[ 148.333307][ T1331] ieee802154 phy0 wpan0: encryption failed: -22
[ 148.339598][ T1331] ieee802154 phy1 wpan1: encryption failed: -22
qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x3c2000)
[ 151.371144][ T1030] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1
[ 151.386628][ T1030] ata1: failed to read log page 10h (errno=-5)
[ 151.391209][ T1030] ata1.00: exception Emask 0x1 SAct 0x60 SErr 0x0 action 0x0
[ 151.401142][ T1030] ata1.00: irq_stat 0x41000000
[ 151.409389][ T1030] ata1.00: failed command: WRITE FPDMA QUEUED
[ 151.416268][ T1030] ata1.00: cmd 61/10:28:a6:aa:04/1e:00:00:00:00/40 tag 5 ncq dma 3940352 ou
[ 151.416268][ T1030] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error)
[ 151.436469][ T1030] ata1.00: status: { DRDY }
[ 151.443538][ T1030] ata1.00: failed command: WRITE FPDMA QUEUED
[ 151.448611][ T1030] ata1.00: cmd 61/80:30:b6:c8:04/18:00:00:00:00/40 tag 6 ncq dma 3211264 ou
[ 151.448611][ T1030] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error)
[ 151.467527][ T1030] ata1.00: status: { DRDY }
[ 151.480641][ T1030] ata1.00: configured for UDMA/100
[ 151.489964][ T1030] ata1: EH complete
Warning: Permanently added '[localhost]:17095' (ED25519) to the list of known hosts.
2026/06/24 10:35:18 parsed 1 programs
Setting up swapspace version 1, size = 127995904 bytes
[ 163.726108][ T5615] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 174.907359][ T5664] bridge0: port 1(bridge_slave_0) entered blocking state
[ 174.915322][ T5664] bridge0: port 1(bridge_slave_0) entered disabled state
[ 174.925533][ T5664] bridge_slave_0: entered allmulticast mode
[ 174.936812][ T5664] bridge_slave_0: entered promiscuous mode
[ 174.951022][ T5664] bridge0: port 2(bridge_slave_1) entered blocking state
[ 174.965371][ T5664] bridge0: port 2(bridge_slave_1) entered disabled state
[ 174.968848][ T5664] bridge_slave_1: entered allmulticast mode
[ 174.975393][ T5664] bridge_slave_1: entered promiscuous mode
[ 175.012216][ T5664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 175.021159][ T5664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 175.050195][ T5664] team0: Port device team_slave_0 added
[ 175.056440][ T5664] team0: Port device team_slave_1 added
[ 175.082605][ T5664] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 175.086419][ T5664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 175.105251][ T5664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 175.119832][ T5664] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 175.135383][ T5664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 175.154561][ T5664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 175.201994][ T5664] hsr_slave_0: entered promiscuous mode
[ 175.208887][ T5664] hsr_slave_1: entered promiscuous mode
[ 176.277201][ T5664] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 176.311357][ T5664] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 176.332218][ T5664] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 176.372963][ T5664] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 176.382165][ T5664] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 176.402740][ T5664] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 176.417375][ T5664] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 176.435494][ T5664] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 176.684528][ T5664] 8021q: adding VLAN 0 to HW filter on device bond0
[ 176.728392][ T5664] 8021q: adding VLAN 0 to HW filter on device team0
[ 176.752475][ T69] bridge0: port 1(bridge_slave_0) entered blocking state
[ 176.756015][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 176.784220][ T156] bridge0: port 2(bridge_slave_1) entered blocking state
[ 176.787818][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 177.688238][ T5664] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 177.799385][ T5664] veth0_vlan: entered promiscuous mode
[ 177.828812][ T5664] veth1_vlan: entered promiscuous mode
[ 177.911007][ T5664] veth0_macvtap: entered promiscuous mode
[ 177.928563][ T5664] veth1_macvtap: entered promiscuous mode
[ 177.979480][ T5664] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 178.021582][ T5664] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 178.055814][ T183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 178.068387][ T183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 178.084374][ T183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 178.111762][ T183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 178.622511][ T183] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 179.052940][ T183] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 179.089104][ T45] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 179.098975][ T45] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 179.107052][ T45] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 179.111128][ T45] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 179.122477][ T45] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 179.311201][ T183] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 179.653394][ T183] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 180.181639][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 180.197253][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 180.288860][ T183] bridge_slave_1: left allmulticast mode
[ 180.296783][ T183] bridge_slave_1: left promiscuous mode
[ 180.303601][ T183] bridge0: port 2(bridge_slave_1) entered disabled state
[ 180.320783][ T183] bridge_slave_0: left allmulticast mode
[ 180.323375][ T183] bridge_slave_0: left promiscuous mode
[ 180.337513][ T183] bridge0: port 1(bridge_slave_0) entered disabled state
[ 180.543030][ T183] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 180.553032][ T183] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 180.559110][ T183] bond0 (unregistering): Released all slaves
[ 180.647677][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 180.658165][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 180.674218][ T183] hsr_slave_0: left promiscuous mode
[ 180.682331][ T183] hsr_slave_1: left promiscuous mode
[ 180.701917][ T183] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 180.706389][ T183] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 180.722905][ T183] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 180.735340][ T183] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 180.768134][ T183] veth1_macvtap: left promiscuous mode
[ 180.770776][ T183] veth0_macvtap: left promiscuous mode
[ 180.773408][ T183] veth1_vlan: left promiscuous mode
[ 180.786275][ T183] veth0_vlan: left promiscuous mode
[ 181.319453][ T183] team0 (unregistering): Port device team_slave_1 removed
[ 181.349549][ T183] team0 (unregistering): Port device team_slave_0 removed
[ 183.551512][ T4995] 8021q: adding VLAN 0 to HW filter on device eth2
[ 184.374059][ T4995] 8021q: adding VLAN 0 to HW filter on device eth3
[ 184.880114][ T4995] 8021q: adding VLAN 0 to HW filter on device eth4
2026/06/24 10:35:45 executed programs: 0
[ 185.221478][ T4649] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 185.231880][ T4649] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 185.237314][ T4649] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 185.243377][ T4649] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 185.250568][ T4649] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 185.557273][ T4995] 8021q: adding VLAN 0 to HW filter on device eth5
[ 186.164948][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state
[ 186.168908][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state
[ 186.172580][ T5818] bridge_slave_0: entered allmulticast mode
[ 186.177929][ T5818] bridge_slave_0: entered promiscuous mode
[ 186.185346][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state
[ 186.189309][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state
[ 186.192854][ T5818] bridge_slave_1: entered allmulticast mode
[ 186.197814][ T5818] bridge_slave_1: entered promiscuous mode
[ 186.231247][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 186.240154][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 186.269142][ T5818] team0: Port device team_slave_0 added
[ 186.275774][ T5818] team0: Port device team_slave_1 added
[ 186.304138][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 186.307735][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 186.320442][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 186.327744][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 186.331000][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 186.343394][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 186.389853][ T5818] hsr_slave_0: entered promiscuous mode
[ 186.393252][ T5818] hsr_slave_1: entered promiscuous mode
[ 187.183128][ T5818] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 187.200248][ T5818] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 187.213438][ T5818] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 187.229759][ T5818] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 187.247183][ T5818] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 187.262519][ T5818] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 187.277525][ T5818] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 187.286245][ T4649] Bluetooth: hci0: command tx timeout
[ 187.297762][ T5818] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 187.481816][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0
[ 187.532598][ T5818] 8021q: adding VLAN 0 to HW filter on device team0
[ 187.552854][ T30] bridge0: port 1(bridge_slave_0) entered blocking state
[ 187.556263][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 187.582966][ T69] bridge0: port 2(bridge_slave_1) entered blocking state
[ 187.586639][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 188.444580][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 188.572053][ T5818] veth0_vlan: entered promiscuous mode
[ 188.601280][ T5818] veth1_vlan: entered promiscuous mode
[ 188.669227][ T5818] veth0_macvtap: entered promiscuous mode
[ 188.691079][ T5818] veth1_macvtap: entered promiscuous mode
[ 188.721733][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 188.738535][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 188.767044][ T30] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 188.781985][ T30] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 188.795515][ T30] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 188.808858][ T30] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 188.948155][ T183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 188.960684][ T183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 189.059197][ T183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 189.067838][ T183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 189.368670][ T4649] Bluetooth: hci0: command tx timeout
[ 189.734193][ T5894] loop0: detected capacity change from 0 to 32768
[ 189.831804][ T5894] XFS (loop0): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6
[ 189.852629][ T5894] XFS (loop0): Log size 624 blocks too small, minimum size is 816 blocks
[ 189.864537][ T5894] XFS (loop0): AAIEEE! Log failed size checks. Abort!
[ 189.895933][ T5894] XFS (loop0): log mount failed
[ 189.990169][ T5894] loop0: detected capacity change from 0 to 128
[ 190.009831][ T5894] =======================================================
[ 190.009831][ T5894] WARNING: The mand mount option has been deprecated and
[ 190.009831][ T5894] and is ignored by this kernel. Remove the mand
[ 190.009831][ T5894] option from the mount to silence this warning.
[ 190.009831][ T5894] =======================================================
[ 190.107174][ T5894] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[ 190.133706][ T5894] hpfs: filesystem error: improperly stopped
[ 190.138311][ T5894] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[ 190.146276][ T5894] hpfs: You really don't want any checks? You are crazy...
[ 190.156020][ T5894] hpfs: hpfs_map_sector(): read error
[ 190.167445][ T5894] hpfs: code page support is disabled
[ 190.171041][ T5894] hpfs: filesystem error: map_dirent: not a directory
[ 190.176876][ T5894]
[ 190.179667][ T5894] hpfs: hpfs_map_4sectors(): unaligned read
[ 190.187123][ T5894] hpfs: filesystem error: unable to find root dir
[ 190.220415][ T5894] ==================================================================
[ 190.223951][ T5894] BUG: KASAN: use-after-free in hpfs_bplus_lookup+0x4e1/0x870
[ 190.227609][ T5894] Read of size 4 at addr ffff888046d5e004 by task syz.0.17/5894
[ 190.232142][ T5894]
[ 190.233125][ T5894] CPU: 0 UID: 0 PID: 5894 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 190.233142][ T5894] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 190.233149][ T5894] Call Trace:
[ 190.233156][ T5894]
[ 190.233163][ T5894] dump_stack_lvl+0xe8/0x150
[ 190.233183][ T5894] print_address_description+0x55/0x1e0
[ 190.233196][ T5894] ? hpfs_bplus_lookup+0x4e1/0x870
[ 190.233214][ T5894] print_report+0x58/0x70
[ 190.233225][ T5894] kasan_report+0x117/0x150
[ 190.233241][ T5894] ? hpfs_bplus_lookup+0x4e1/0x870
[ 190.233257][ T5894] hpfs_bplus_lookup+0x4e1/0x870
[ 190.233275][ T5894] ? __pfx_hpfs_bplus_lookup+0x10/0x10
[ 190.233293][ T5894] hpfs_bmap+0x254/0x4b0
[ 190.233306][ T5894] ? __pfx_hpfs_bmap+0x10/0x10
[ 190.233316][ T5894] ? __page_table_check_zero+0x6a/0x3e0
[ 190.233332][ T5894] ? __page_table_check_zero+0x6a/0x3e0
[ 190.233348][ T5894] hpfs_get_block+0xa8/0x6e0
[ 190.233361][ T5894] do_mpage_readpage+0x794/0x1b40
[ 190.233382][ T5894] mpage_readahead+0x3e7/0x800
[ 190.233399][ T5894] ? __pfx_mpage_readahead+0x10/0x10
[ 190.233417][ T5894] ? __pfx_hpfs_get_block+0x10/0x10
[ 190.233431][ T5894] ? blk_start_plug+0x6e/0x1b0
[ 190.233488][ T5894] read_pages+0x193/0x5a0
[ 190.233497][ T5894] ? __pfx_read_pages+0x10/0x10
[ 190.233505][ T5894] ? filemap_add_folio+0x350/0x530
[ 190.233513][ T5894] page_cache_ra_unbounded+0x754/0x9d0
[ 190.233523][ T5894] page_cache_ra_order+0xb47/0xee0
[ 190.233532][ T5894] ? blk_cgroup_congested+0x1d/0x210
[ 190.233551][ T5894] filemap_get_pages+0x4a9/0x1ec0
[ 190.233570][ T5894] ? __pfx_filemap_get_pages+0x10/0x10
[ 190.233584][ T5894] ? is_bpf_text_address+0x26/0x2b0
[ 190.233601][ T5894] filemap_read+0x426/0x11e0
[ 190.233616][ T5894] ? __pfx_filemap_read+0x10/0x10
[ 190.233634][ T5894] ? ima_file_check+0xe1/0x130
[ 190.233649][ T5894] ? generic_file_read_iter+0x9b/0x560
[ 190.233661][ T5894] ? iov_iter_kvec+0xb8/0x180
[ 190.233677][ T5894] __kernel_read+0x4ca/0x960
[ 190.233688][ T5894] ? __pfx___kernel_read+0x10/0x10
[ 190.233698][ T5894] integrity_kernel_read+0x89/0xd0
[ 190.233709][ T5894] ? __pfx_integrity_kernel_read+0x10/0x10
[ 190.233719][ T5894] ? ima_calc_file_hash+0x40f/0x890
[ 190.233731][ T5894] ? ima_calc_file_hash+0x40f/0x890
[ 190.233745][ T5894] ima_calc_file_hash+0x451/0x890
[ 190.233762][ T5894] ? __pfx_ima_calc_file_hash+0x10/0x10
[ 190.233782][ T5894] ? generic_fillattr+0x575/0x840
[ 190.233798][ T5894] ima_collect_measurement+0x51b/0xa00
[ 190.233821][ T5894] ? __pfx_ima_collect_measurement+0x10/0x10
[ 190.233838][ T5894] ? trace_contention_end+0x3d/0x140
[ 190.233858][ T5894] ? __pfx_ima_get_hash_algo+0x10/0x10
[ 190.233873][ T5894] process_measurement+0x1272/0x1c10
[ 190.233891][ T5894] ? __pfx_process_measurement+0x10/0x10
[ 190.233905][ T5894] ? tomoyo_check_open_permission+0x38e/0x470
[ 190.233927][ T5894] ? apparmor_file_open+0x523/0x6c0
[ 190.233945][ T5894] ima_file_check+0xe1/0x130
[ 190.233960][ T5894] ? do_dentry_open+0xd21/0x1380
[ 190.233976][ T5894] ? __pfx_ima_file_check+0x10/0x10
[ 190.233992][ T5894] security_file_post_open+0xb3/0x260
[ 190.234010][ T5894] path_openat+0x2e90/0x3830
[ 190.234023][ T5894] ? kasan_save_track+0x3e/0x80
[ 190.234039][ T5894] ? do_sys_openat2+0xcc/0x200
[ 190.234053][ T5894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 190.234070][ T5894] do_file_open+0x23e/0x4a0
[ 190.234082][ T5894] ? __pfx_do_file_open+0x10/0x10
[ 190.234097][ T5894] ? _raw_spin_unlock+0x28/0x50
[ 190.234155][ T5894] ? alloc_fd+0x651/0x6c0
[ 190.234172][ T5894] do_sys_openat2+0x115/0x200
[ 190.234187][ T5894] ? __se_sys_futex+0x3a8/0x450
[ 190.234201][ T5894] ? __pfx_do_sys_openat2+0x10/0x10
[ 190.234217][ T5894] ? rcu_is_watching+0x15/0xb0
[ 190.234231][ T5894] __x64_sys_openat+0x138/0x170
[ 190.234246][ T5894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 190.234258][ T5894] do_syscall_64+0x174/0x580
[ 190.234274][ T5894] ? clear_bhb_loop+0x40/0x90
[ 190.234287][ T5894] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 190.234299][ T5894] RIP: 0033:0x7f181b39af39
[ 190.234313][ T5894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 190.234323][ T5894] RSP: 002b:00007f181c1a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 190.234338][ T5894] RAX: ffffffffffffffda RBX: 00007f181b605fa0 RCX: 00007f181b39af39
[ 190.234346][ T5894] RDX: 0000000000000000 RSI: 0000200000004280 RDI: ffffffffffffff9c
[ 190.234354][ T5894] RBP: 00007f181b42fee0 R08: 0000000000000000 R09: 0000000000000000
[ 190.234362][ T5894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 190.234369][ T5894] R13: 00007f181b606038 R14: 00007f181b605fa0 R15: 00007fff411cf428
[ 190.234381][ T5894]
[ 190.234385][ T5894]
[ 190.446162][ T5894] The buggy address belongs to the physical page:
[ 190.449208][ T5894] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x68a pfn:0x46d5e
[ 190.453514][ T5894] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff)
[ 190.456845][ T5894] raw: 04fff00000000000 ffffea00011b5708 ffffea00011b57c8 0000000000000000
[ 190.461069][ T5894] raw: 000000000000068a 0000000000000000 00000000ffffffff 0000000000000000
[ 190.465122][ T5894] page dumped because: kasan: bad access detected
[ 190.467976][ T5894] page_owner tracks the page as freed
[ 190.470453][ T5894] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 5894, tgid 5893 (syz.0.17), ts 189550142114, free_ts 190081979379
[ 190.478498][ T5894] post_alloc_hook+0x1f9/0x250
[ 190.480672][ T5894] get_page_from_freelist+0x21fa/0x2270
[ 190.483688][ T5894] __alloc_frozen_pages_noprof+0x18d/0x380
[ 190.486558][ T5894] alloc_pages_mpol+0x212/0x380
[ 190.488700][ T5894] folio_alloc_mpol_noprof+0x39/0x160
[ 190.491057][ T5894] shmem_alloc_and_add_folio+0x43e/0xf60
[ 190.493509][ T5894] shmem_get_folio_gfp+0x5da/0x16d0
[ 190.496160][ T5894] shmem_write_begin+0x16c/0x330
[ 190.498752][ T5894] generic_perform_write+0x2d5/0x8f0
[ 190.501148][ T5894] shmem_file_write_iter+0xf8/0x120
[ 190.503443][ T5894] vfs_write+0x612/0xba0
[ 190.505408][ T5894] ksys_write+0x150/0x270
[ 190.507505][ T5894] do_syscall_64+0x174/0x580
[ 190.509749][ T5894] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 190.512472][ T5894] page last free pid 5686 tgid 5686 stack trace:
[ 190.515444][ T5894] free_unref_folios+0xd84/0x14a0
[ 190.517933][ T5894] folios_put_refs+0x9e9/0xb30
[ 190.520294][ T5894] shmem_undo_range+0x4e6/0x15d0
[ 190.522697][ T5894] shmem_evict_inode+0x280/0xa80
[ 190.524941][ T5894] evict+0x624/0xb50
[ 190.526807][ T5894] dentry_kill+0x1b9/0x880
[ 190.529020][ T5894] finish_dput+0x1a/0x260
[ 190.531180][ T5894] __fput+0x675/0xa50
[ 190.533153][ T5894] task_work_run+0x1d9/0x270
[ 190.535195][ T5894] exit_to_user_mode_loop+0x1fa/0x730
[ 190.537504][ T5894] do_syscall_64+0x353/0x580
[ 190.539576][ T5894] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 190.542651][ T5894]
[ 190.543860][ T5894] Memory state around the buggy address:
[ 190.546365][ T5894] ffff888046d5df00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 190.549707][ T5894] ffff888046d5df80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 190.554029][ T5894] >ffff888046d5e000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 190.557962][ T5894] ^
[ 190.559819][ T5894] ffff888046d5e080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 190.564031][ T5894] ffff888046d5e100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 190.568901][ T5894] ==================================================================
[ 190.659214][ T5894] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 190.662844][ T5894] CPU: 0 UID: 0 PID: 5894 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 190.666625][ T5894] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 190.671527][ T5894] Call Trace:
[ 190.673429][ T5894]
[ 190.674982][ T5894] vpanic+0x56c/0xa60
[ 190.676896][ T5894] ? __pfx_vpanic+0x10/0x10
[ 190.678940][ T5894] panic+0xc5/0xd0
[ 190.680620][ T5894] ? __pfx_panic+0x10/0x10
[ 190.682590][ T5894] ? preempt_schedule_thunk+0x16/0x40
[ 190.685007][ T5894] ? hpfs_bplus_lookup+0x4e1/0x870
[ 190.687412][ T5894] ? preempt_schedule_thunk+0x16/0x40
[ 190.689855][ T5894] ? hpfs_bplus_lookup+0x4e1/0x870
[ 190.692195][ T5894] check_panic_on_warn+0x89/0xb0
[ 190.694468][ T5894] ? hpfs_bplus_lookup+0x4e1/0x870
[ 190.696799][ T5894] end_report+0x73/0x170
[ 190.698963][ T5894] ? hpfs_bplus_lookup+0x4e1/0x870
[ 190.701735][ T5894] kasan_report+0x128/0x150
[ 190.703828][ T5894] ? hpfs_bplus_lookup+0x4e1/0x870
[ 190.705992][ T5894] hpfs_bplus_lookup+0x4e1/0x870
[ 190.708064][ T5894] ? __pfx_hpfs_bplus_lookup+0x10/0x10
[ 190.710284][ T5894] hpfs_bmap+0x254/0x4b0
[ 190.712339][ T5894] ? __pfx_hpfs_bmap+0x10/0x10
[ 190.714793][ T5894] ? __page_table_check_zero+0x6a/0x3e0
[ 190.717536][ T5894] ? __page_table_check_zero+0x6a/0x3e0
[ 190.720033][ T5894] hpfs_get_block+0xa8/0x6e0
[ 190.722114][ T5894] do_mpage_readpage+0x794/0x1b40
[ 190.724384][ T5894] mpage_readahead+0x3e7/0x800
[ 190.726949][ T5894] ? __pfx_mpage_readahead+0x10/0x10
[ 190.729715][ T5894] ? __pfx_hpfs_get_block+0x10/0x10
[ 190.732066][ T5894] ? blk_start_plug+0x6e/0x1b0
[ 190.734239][ T5894] read_pages+0x193/0x5a0
[ 190.736152][ T5894] ? __pfx_read_pages+0x10/0x10
[ 190.738333][ T5894] ? filemap_add_folio+0x350/0x530
[ 190.741091][ T5894] page_cache_ra_unbounded+0x754/0x9d0
[ 190.744062][ T5894] page_cache_ra_order+0xb47/0xee0
[ 190.746823][ T5894] ? blk_cgroup_congested+0x1d/0x210
[ 190.749914][ T5894] filemap_get_pages+0x4a9/0x1ec0
[ 190.752389][ T5894] ? __pfx_filemap_get_pages+0x10/0x10
[ 190.754915][ T5894] ? is_bpf_text_address+0x26/0x2b0
[ 190.757343][ T5894] filemap_read+0x426/0x11e0
[ 190.759505][ T5894] ? __pfx_filemap_read+0x10/0x10
[ 190.761939][ T5894] ? ima_file_check+0xe1/0x130
[ 190.764234][ T5894] ? generic_file_read_iter+0x9b/0x560
[ 190.767057][ T5894] ? iov_iter_kvec+0xb8/0x180
[ 190.769235][ T5894] __kernel_read+0x4ca/0x960
[ 190.771381][ T5894] ? __pfx___kernel_read+0x10/0x10
[ 190.773726][ T5894] integrity_kernel_read+0x89/0xd0
[ 190.776193][ T5894] ? __pfx_integrity_kernel_read+0x10/0x10
[ 190.779040][ T5894] ? ima_calc_file_hash+0x40f/0x890
[ 190.781421][ T5894] ? ima_calc_file_hash+0x40f/0x890
[ 190.783697][ T5894] ima_calc_file_hash+0x451/0x890
[ 190.786016][ T5894] ? __pfx_ima_calc_file_hash+0x10/0x10
[ 190.788776][ T5894] ? generic_fillattr+0x575/0x840
[ 190.791510][ T5894] ima_collect_measurement+0x51b/0xa00
[ 190.794068][ T5894] ? __pfx_ima_collect_measurement+0x10/0x10
[ 190.796672][ T5894] ? trace_contention_end+0x3d/0x140
[ 190.799110][ T5894] ? __pfx_ima_get_hash_algo+0x10/0x10
[ 190.801717][ T5894] process_measurement+0x1272/0x1c10
[ 190.804365][ T5894] ? __pfx_process_measurement+0x10/0x10
[ 190.806983][ T5894] ? tomoyo_check_open_permission+0x38e/0x470
[ 190.809658][ T5894] ? apparmor_file_open+0x523/0x6c0
[ 190.812125][ T5894] ima_file_check+0xe1/0x130
[ 190.814574][ T5894] ? do_dentry_open+0xd21/0x1380
[ 190.817161][ T5894] ? __pfx_ima_file_check+0x10/0x10
[ 190.819550][ T5894] security_file_post_open+0xb3/0x260
[ 190.822027][ T5894] path_openat+0x2e90/0x3830
[ 190.824061][ T5894] ? kasan_save_track+0x3e/0x80
[ 190.826050][ T5894] ? do_sys_openat2+0xcc/0x200
[ 190.828144][ T5894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 190.831233][ T5894] do_file_open+0x23e/0x4a0
[ 190.833530][ T5894] ? __pfx_do_file_open+0x10/0x10
[ 190.835727][ T5894] ? _raw_spin_unlock+0x28/0x50
[ 190.837859][ T5894] ? alloc_fd+0x651/0x6c0
[ 190.839919][ T5894] do_sys_openat2+0x115/0x200
[ 190.842273][ T5894] ? __se_sys_futex+0x3a8/0x450
[ 190.844737][ T5894] ? __pfx_do_sys_openat2+0x10/0x10
[ 190.847109][ T5894] ? rcu_is_watching+0x15/0xb0
[ 190.849152][ T5894] __x64_sys_openat+0x138/0x170
[ 190.851318][ T5894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 190.854289][ T5894] do_syscall_64+0x174/0x580
[ 190.856928][ T5894] ? clear_bhb_loop+0x40/0x90
[ 190.859337][ T5894] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 190.861981][ T5894] RIP: 0033:0x7f181b39af39
[ 190.864091][ T5894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 190.873242][ T5894] RSP: 002b:00007f181c1a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 190.877117][ T5894] RAX: ffffffffffffffda RBX: 00007f181b605fa0 RCX: 00007f181b39af39
[ 190.880653][ T5894] RDX: 0000000000000000 RSI: 0000200000004280 RDI: ffffffffffffff9c
[ 190.884288][ T5894] RBP: 00007f181b42fee0 R08: 0000000000000000 R09: 0000000000000000
[ 190.888074][ T5894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 190.892150][ T5894] R13: 00007f181b606038 R14: 00007f181b605fa0 R15: 00007fff411cf428
[ 190.895733][ T5894]
[ 190.897500][ T5894] Kernel Offset: disabled
[ 190.899450][ T5894] Rebooting in 86400 seconds..