Warning: Permanently added '10.128.1.59' (ED25519) to the list of known hosts.
2026/04/19 18:26:48 parsed 1 programs
[ 133.002484][ T1338] ieee802154 phy0 wpan0: encryption failed: -22
[ 133.002602][ T1338] ieee802154 phy1 wpan1: encryption failed: -22
[ 135.801050][ T6150] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 139.885984][ T3562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 139.886003][ T3562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 139.945137][ T3562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 139.945155][ T3562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 142.898693][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 142.918421][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 142.921948][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 142.923207][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 142.924022][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 143.688381][ T6209] chnl_net:caif_netlink_parms(): no params data found
[ 144.195947][ T6209] bridge0: port 1(bridge_slave_0) entered blocking state
[ 144.196260][ T6209] bridge0: port 1(bridge_slave_0) entered disabled state
[ 144.196571][ T6209] bridge_slave_0: entered allmulticast mode
[ 144.199427][ T6209] bridge_slave_0: entered promiscuous mode
[ 144.208539][ T6209] bridge0: port 2(bridge_slave_1) entered blocking state
[ 144.211508][ T6209] bridge0: port 2(bridge_slave_1) entered disabled state
[ 144.224042][ T6209] bridge_slave_1: entered allmulticast mode
[ 144.227876][ T6209] bridge_slave_1: entered promiscuous mode
[ 144.411151][ T6209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 144.414886][ T6209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 144.590686][ T6209] team0: Port device team_slave_0 added
[ 144.600765][ T6209] team0: Port device team_slave_1 added
[ 145.058522][ T6209] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 145.058538][ T6209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 145.058563][ T6209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 145.136819][ T6209] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 145.136829][ T6209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 145.136843][ T6209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 145.372825][ T6209] hsr_slave_0: entered promiscuous mode
[ 145.374106][ T6209] hsr_slave_1: entered promiscuous mode
[ 147.184959][ T6209] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 147.223866][ T6209] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 147.224982][ T6209] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 147.271120][ T6209] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 147.272188][ T6209] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 147.301419][ T6209] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 147.302607][ T6209] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 147.341237][ T6209] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 147.511151][ T6209] 8021q: adding VLAN 0 to HW filter on device bond0
[ 147.553771][ T6209] 8021q: adding VLAN 0 to HW filter on device team0
[ 147.573840][ T3562] bridge0: port 1(bridge_slave_0) entered blocking state
[ 147.574065][ T3562] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 147.595873][ T3562] bridge0: port 2(bridge_slave_1) entered blocking state
[ 147.596109][ T3562] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 148.023698][ T6209] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 148.144786][ T6209] veth0_vlan: entered promiscuous mode
[ 148.162989][ T6209] veth1_vlan: entered promiscuous mode
[ 148.251658][ T6209] veth0_macvtap: entered promiscuous mode
[ 148.267586][ T6209] veth1_macvtap: entered promiscuous mode
[ 148.316444][ T6209] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 148.341555][ T6209] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 148.377802][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 148.378058][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 148.378092][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 148.378125][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 149.352769][ T251] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 150.085167][ T251] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 150.931383][ T251] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 151.261695][ T251] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/04/19 18:27:09 executed programs: 0
[ 152.426620][ T251] bridge_slave_1: left allmulticast mode
[ 152.426649][ T251] bridge_slave_1: left promiscuous mode
[ 152.426931][ T251] bridge0: port 2(bridge_slave_1) entered disabled state
[ 152.515215][ T5146] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 152.543229][ T5146] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 152.544876][ T5146] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 152.546644][ T5146] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 152.548003][ T5146] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 152.550918][ T251] bridge_slave_0: left allmulticast mode
[ 152.550942][ T251] bridge_slave_0: left promiscuous mode
[ 152.551192][ T251] bridge0: port 1(bridge_slave_0) entered disabled state
[ 153.266402][ T251] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 153.326114][ T251] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 153.367417][ T251] bond0 (unregistering): Released all slaves
[ 153.755495][ T251] hsr_slave_0: left promiscuous mode
[ 153.795545][ T251] hsr_slave_1: left promiscuous mode
[ 153.796692][ T251] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 153.796715][ T251] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 153.836600][ T251] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 153.836625][ T251] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 153.936512][ T251] veth1_macvtap: left promiscuous mode
[ 153.936572][ T251] veth0_macvtap: left promiscuous mode
[ 153.936724][ T251] veth1_vlan: left promiscuous mode
[ 153.936825][ T251] veth0_vlan: left promiscuous mode
[ 154.517256][ T251] team0 (unregistering): Port device team_slave_1 removed
[ 154.556224][ T251] team0 (unregistering): Port device team_slave_0 removed
[ 154.595475][ T5146] Bluetooth: hci0: command tx timeout
[ 154.734357][ T5491] 8021q: adding VLAN 0 to HW filter on device eth1
[ 154.858785][ T6409] chnl_net:caif_netlink_parms(): no params data found
[ 155.298570][ T5491] 8021q: adding VLAN 0 to HW filter on device eth2
[ 155.312291][ T6409] bridge0: port 1(bridge_slave_0) entered blocking state
[ 155.312559][ T6409] bridge0: port 1(bridge_slave_0) entered disabled state
[ 155.312852][ T6409] bridge_slave_0: entered allmulticast mode
[ 155.347730][ T6409] bridge_slave_0: entered promiscuous mode
[ 155.354667][ T6409] bridge0: port 2(bridge_slave_1) entered blocking state
[ 155.355059][ T6409] bridge0: port 2(bridge_slave_1) entered disabled state
[ 155.355811][ T6409] bridge_slave_1: entered allmulticast mode
[ 155.358779][ T6409] bridge_slave_1: entered promiscuous mode
[ 155.601974][ T6409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 155.618645][ T6409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 155.948263][ T6409] team0: Port device team_slave_0 added
[ 155.950681][ T5491] 8021q: adding VLAN 0 to HW filter on device eth3
[ 155.958046][ T6409] team0: Port device team_slave_1 added
[ 156.129783][ T6409] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 156.129794][ T6409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 156.129808][ T6409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 156.133247][ T6409] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 156.133257][ T6409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 156.133271][ T6409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 156.561012][ T6409] hsr_slave_0: entered promiscuous mode
[ 156.562628][ T6409] hsr_slave_1: entered promiscuous mode
[ 156.687214][ T5146] Bluetooth: hci0: command tx timeout
[ 157.199386][ T5491] 8021q: adding VLAN 0 to HW filter on device eth4
[ 158.758237][ T5146] Bluetooth: hci0: command tx timeout
[ 158.826949][ T6409] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 158.874879][ T6409] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 158.883191][ T6409] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 158.930361][ T6409] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 158.931425][ T6409] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 158.977118][ T6409] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 158.978204][ T6409] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 159.010127][ T6409] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 159.220577][ T6409] 8021q: adding VLAN 0 to HW filter on device bond0
[ 159.258686][ T6409] 8021q: adding VLAN 0 to HW filter on device team0
[ 159.273947][ T1057] bridge0: port 1(bridge_slave_0) entered blocking state
[ 159.274171][ T1057] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 159.329748][ T1057] bridge0: port 2(bridge_slave_1) entered blocking state
[ 159.329901][ T1057] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 159.699633][ T6409] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 159.845215][ T6409] veth0_vlan: entered promiscuous mode
[ 159.880748][ T6409] veth1_vlan: entered promiscuous mode
[ 159.945187][ T6409] veth0_macvtap: entered promiscuous mode
[ 159.961330][ T6409] veth1_macvtap: entered promiscuous mode
[ 160.001361][ T6409] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 160.046512][ T6409] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 160.078938][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 160.079210][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 160.079244][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 160.079275][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 160.580106][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 160.580127][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 160.639767][ T3562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 160.639785][ T3562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/04/19 18:27:18 executed programs: 2
[ 160.835486][ T5146] Bluetooth: hci0: command tx timeout
[ 160.862252][ T6577] loop0: detected capacity change from 0 to 128
[ 160.865255][ T6577] =======================================================
[ 160.865255][ T6577] WARNING: The mand mount option has been deprecated and
[ 160.865255][ T6577] and is ignored by this kernel. Remove the mand
[ 160.865255][ T6577] option from the mount to silence this warning.
[ 160.865255][ T6577] =======================================================
[ 160.968659][ T6577] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[ 160.968836][ T6577] hpfs: filesystem error: improperly stopped
[ 160.968850][ T6577] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[ 160.968860][ T6577] hpfs: You really don't want any checks? You are crazy...
[ 160.971382][ T6577] hpfs: hpfs_map_sector(): read error
[ 160.971398][ T6577] hpfs: code page support is disabled
[ 160.972123][ T6577] HPFS: de_next_de: de->length = 84ba
[ 160.972134][ T6577] HPFS: dnode_end_de: dnode->first_free = 7b3184b6
[ 160.972154][ T6577] ==================================================================
[ 160.972161][ T6577] BUG: KASAN: use-after-free in hpfs_count_dnodes+0x874/0xb70
[ 160.972187][ T6577] Read of size 2 at addr ffff888056b3c4d0 by task syz.0.17/6577
[ 160.972202][ T6577]
[ 160.972226][ T6577] CPU: 1 UID: 0 PID: 6577 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 160.972245][ T6577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 160.972263][ T6577] Call Trace:
[ 160.972273][ T6577]
[ 160.972281][ T6577] dump_stack_lvl+0xe8/0x150
[ 160.972302][ T6577] print_address_description+0x55/0x1e0
[ 160.972321][ T6577] ? hpfs_count_dnodes+0x874/0xb70
[ 160.972340][ T6577] print_report+0x58/0x70
[ 160.972356][ T6577] kasan_report+0x117/0x150
[ 160.972382][ T6577] ? hpfs_count_dnodes+0x874/0xb70
[ 160.972404][ T6577] hpfs_count_dnodes+0x874/0xb70
[ 160.972428][ T6577] ? __pfx_hpfs_count_dnodes+0x10/0x10
[ 160.972447][ T6577] ? __bread_gfp+0xc3/0x3b0
[ 160.972465][ T6577] ? hpfs_map_sector+0x167/0x3a0
[ 160.972485][ T6577] ? hpfs_map_fnode+0x27e/0x6a0
[ 160.972506][ T6577] ? set_normalized_timespec64+0xf0/0x1a0
[ 160.972533][ T6577] hpfs_read_inode+0xc79/0x1050
[ 160.972556][ T6577] ? __pfx_hpfs_read_inode+0x10/0x10
[ 160.972578][ T6577] ? inode_set_ctime_to_ts+0x116/0x2e0
[ 160.972604][ T6577] ? __pfx_inode_set_ctime_to_ts+0x10/0x10
[ 160.972629][ T6577] ? rt_spin_unlock+0x160/0x200
[ 160.972657][ T6577] ? hpfs_init_inode+0x216/0x350
[ 160.972680][ T6577] hpfs_fill_super+0x123d/0x1fa0
[ 160.972715][ T6577] ? __pfx_hpfs_fill_super+0x10/0x10
[ 160.972743][ T6577] ? __pfx_snprintf+0x10/0x10
[ 160.972766][ T6577] ? set_blocksize+0x1c8/0x3d0
[ 160.972789][ T6577] ? rt_spin_unlock+0x14f/0x200
[ 160.972814][ T6577] ? sb_set_blocksize+0x11b/0x210
[ 160.972837][ T6577] ? setup_bdev_super+0x4c1/0x5b0
[ 160.972864][ T6577] get_tree_bdev_flags+0x431/0x4f0
[ 160.972889][ T6577] ? __pfx_hpfs_fill_super+0x10/0x10
[ 160.972912][ T6577] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 160.972941][ T6577] vfs_get_tree+0x92/0x2a0
[ 160.972966][ T6577] do_new_mount+0x341/0xd30
[ 160.972988][ T6577] ? __pfx_do_new_mount+0x10/0x10
[ 160.973009][ T6577] ? user_path_at+0xd4/0x160
[ 160.973033][ T6577] ? user_path_at+0xd4/0x160
[ 160.973064][ T6577] __se_sys_mount+0x31d/0x420
[ 160.973087][ T6577] ? __pfx___se_sys_mount+0x10/0x10
[ 160.973110][ T6577] ? __x64_sys_mount+0x20/0xc0
[ 160.973130][ T6577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 160.973148][ T6577] do_syscall_64+0x15f/0xf80
[ 160.973168][ T6577] ? trace_irq_disable+0x3b/0x140
[ 160.973188][ T6577] ? clear_bhb_loop+0x40/0x90
[ 160.973208][ T6577] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 160.973226][ T6577] RIP: 0033:0x7f50818cb90a
[ 160.973251][ T6577] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 160.973266][ T6577] RSP: 002b:00007f5080f2de58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 160.973285][ T6577] RAX: ffffffffffffffda RBX: 00007f5080f2dee0 RCX: 00007f50818cb90a
[ 160.973298][ T6577] RDX: 000020000000a000 RSI: 0000200000009ec0 RDI: 00007f5080f2dea0
[ 160.973310][ T6577] RBP: 000020000000a000 R08: 00007f5080f2dee0 R09: 0000000003200041
[ 160.973322][ T6577] R10: 0000000003200041 R11: 0000000000000246 R12: 0000200000009ec0
[ 160.973334][ T6577] R13: 00007f5080f2dea0 R14: 0000000000009e21 R15: 0000200000000000
[ 160.973355][ T6577]
[ 160.973362][ T6577]
[ 160.973366][ T6577] The buggy address belongs to the physical page:
[ 160.973393][ T6577] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x5 pfn:0x56b3c
[ 160.973410][ T6577] flags: 0x80000000000000(node=0|zone=1)
[ 160.973435][ T6577] raw: 0080000000000000 ffffea0001147b48 ffffea00015ace08 0000000000000000
[ 160.973449][ T6577] raw: 0000000000000005 0000000000000000 00000000ffffffff 0000000000000000
[ 160.973459][ T6577] page dumped because: kasan: bad access detected
[ 160.973470][ T6577] page_owner tracks the page as freed
[ 160.973476][ T6577] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 6570, tgid 6570 (sed), ts 160334525676, free_ts 160433947794
[ 160.973505][ T6577] post_alloc_hook+0x231/0x280
[ 160.973528][ T6577] get_page_from_freelist+0x27d6/0x2850
[ 160.973543][ T6577] __alloc_frozen_pages_noprof+0x18d/0x380
[ 160.973559][ T6577] alloc_pages_mpol+0xd1/0x380
[ 160.973583][ T6577] folio_alloc_mpol_noprof+0x3b/0x1e0
[ 160.973607][ T6577] vma_alloc_folio_noprof+0xe1/0x1e0
[ 160.973631][ T6577] do_pte_missing+0x569/0x2950
[ 160.973646][ T6577] handle_mm_fault+0xdb5/0x14c0
[ 160.973666][ T6577] do_user_addr_fault+0xa73/0x1340
[ 160.973682][ T6577] exc_page_fault+0x6a/0xc0
[ 160.973697][ T6577] asm_exc_page_fault+0x26/0x30
[ 160.973712][ T6577] page last free pid 6570 tgid 6570 stack trace:
[ 160.973722][ T6577] free_unref_folios+0xd6f/0x1aa0
[ 160.973744][ T6577] folios_put_refs+0x7cb/0x8d0
[ 160.973763][ T6577] free_pages_and_swap_cache+0x2b9/0x490
[ 160.973783][ T6577] tlb_flush_mmu+0x6d3/0xa30
[ 160.973797][ T6577] tlb_finish_mmu+0xf9/0x230
[ 160.973810][ T6577] exit_mmap+0x498/0x9e0
[ 160.973832][ T6577] __mmput+0xcb/0x3e0
[ 160.973847][ T6577] exit_mm+0x18e/0x250
[ 160.973867][ T6577] do_exit+0x6a2/0x22c0
[ 160.973886][ T6577] do_group_exit+0x21b/0x2d0
[ 160.973906][ T6577] __x64_sys_exit_group+0x3f/0x40
[ 160.973927][ T6577] x64_sys_call+0x221a/0x2240
[ 160.973946][ T6577] do_syscall_64+0x15f/0xf80
[ 160.973962][ T6577] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 160.973979][ T6577]
[ 160.973983][ T6577] Memory state around the buggy address:
[ 160.973992][ T6577] ffff888056b3c380: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 160.974004][ T6577] ffff888056b3c400: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 160.974015][ T6577] >ffff888056b3c480: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 160.974024][ T6577] ^
[ 160.974034][ T6577] ffff888056b3c500: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 160.974045][ T6577] ffff888056b3c580: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 160.974060][ T6577] ==================================================================
[ 160.974076][ T6577] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 160.974090][ T6577] CPU: 1 UID: 0 PID: 6577 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 160.974110][ T6577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 160.974119][ T6577] Call Trace:
[ 160.974126][ T6577]
[ 160.974133][ T6577] vpanic+0x56c/0xa60
[ 160.974156][ T6577] ? __pfx_vpanic+0x10/0x10
[ 160.974181][ T6577] panic+0xc5/0xd0
[ 160.974200][ T6577] ? __pfx_panic+0x10/0x10
[ 160.974221][ T6577] ? hpfs_count_dnodes+0x874/0xb70
[ 160.974244][ T6577] ? hpfs_count_dnodes+0x874/0xb70
[ 160.974263][ T6577] check_panic_on_warn+0x89/0xb0
[ 160.974286][ T6577] ? hpfs_count_dnodes+0x874/0xb70
[ 160.974305][ T6577] end_report+0x73/0x170
[ 160.974328][ T6577] ? hpfs_count_dnodes+0x874/0xb70
[ 160.974346][ T6577] kasan_report+0x128/0x150
[ 160.974371][ T6577] ? hpfs_count_dnodes+0x874/0xb70
[ 160.974394][ T6577] hpfs_count_dnodes+0x874/0xb70
[ 160.974417][ T6577] ? __pfx_hpfs_count_dnodes+0x10/0x10
[ 160.974437][ T6577] ? __bread_gfp+0xc3/0x3b0
[ 160.974454][ T6577] ? hpfs_map_sector+0x167/0x3a0
[ 160.974483][ T6577] ? hpfs_map_fnode+0x27e/0x6a0
[ 160.974508][ T6577] ? set_normalized_timespec64+0xf0/0x1a0
[ 160.974536][ T6577] hpfs_read_inode+0xc79/0x1050
[ 160.974561][ T6577] ? __pfx_hpfs_read_inode+0x10/0x10
[ 160.974581][ T6577] ? inode_set_ctime_to_ts+0x116/0x2e0
[ 160.974608][ T6577] ? __pfx_inode_set_ctime_to_ts+0x10/0x10
[ 160.974635][ T6577] ? rt_spin_unlock+0x160/0x200
[ 160.974664][ T6577] ? hpfs_init_inode+0x216/0x350
[ 160.974687][ T6577] hpfs_fill_super+0x123d/0x1fa0
[ 160.974721][ T6577] ? __pfx_hpfs_fill_super+0x10/0x10
[ 160.974748][ T6577] ? __pfx_snprintf+0x10/0x10
[ 160.974772][ T6577] ? set_blocksize+0x1c8/0x3d0
[ 160.974795][ T6577] ? rt_spin_unlock+0x14f/0x200
[ 160.974821][ T6577] ? sb_set_blocksize+0x11b/0x210
[ 160.974847][ T6577] ? setup_bdev_super+0x4c1/0x5b0
[ 160.974874][ T6577] get_tree_bdev_flags+0x431/0x4f0
[ 160.974900][ T6577] ? __pfx_hpfs_fill_super+0x10/0x10
[ 160.974925][ T6577] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 160.974955][ T6577] vfs_get_tree+0x92/0x2a0
[ 160.974982][ T6577] do_new_mount+0x341/0xd30
[ 160.975006][ T6577] ? __pfx_do_new_mount+0x10/0x10
[ 160.975028][ T6577] ? user_path_at+0xd4/0x160
[ 160.975049][ T6577] ? user_path_at+0xd4/0x160
[ 160.975072][ T6577] __se_sys_mount+0x31d/0x420
[ 160.975090][ T6577] ? __pfx___se_sys_mount+0x10/0x10
[ 160.975107][ T6577] ? __x64_sys_mount+0x20/0xc0
[ 160.975122][ T6577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 160.975136][ T6577] do_syscall_64+0x15f/0xf80
[ 160.975151][ T6577] ? trace_irq_disable+0x3b/0x140
[ 160.975167][ T6577] ? clear_bhb_loop+0x40/0x90
[ 160.975183][ T6577] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 160.975197][ T6577] RIP: 0033:0x7f50818cb90a
[ 160.975210][ T6577] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 160.975222][ T6577] RSP: 002b:00007f5080f2de58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 160.975239][ T6577] RAX: ffffffffffffffda RBX: 00007f5080f2dee0 RCX: 00007f50818cb90a
[ 160.975250][ T6577] RDX: 000020000000a000 RSI: 0000200000009ec0 RDI: 00007f5080f2dea0
[ 160.975262][ T6577] RBP: 000020000000a000 R08: 00007f5080f2dee0 R09: 0000000003200041
[ 160.975276][ T6577] R10: 0000000003200041 R11: 0000000000000246 R12: 0000200000009ec0
[ 160.975287][ T6577] R13: 00007f5080f2dea0 R14: 0000000000009e21 R15: 0000200000000000
[ 160.975304][ T6577]
[ 160.976062][ T6577] Kernel Offset: disabled