Warning: Permanently added '[localhost]:57520' (ED25519) to the list of known hosts. 2025/08/11 20:05:39 ignoring optional flag "sandboxArg"="0" 2025/08/11 20:05:40 parsed 1 programs [ 133.765816][ T5652] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 138.033368][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.036929][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.316705][ T1040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.320051][ T1040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.352175][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.355724][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.171969][ T5718] chnl_net:caif_netlink_parms(): no params data found [ 141.238313][ T5718] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.242164][ T5718] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.245487][ T5718] bridge_slave_0: entered allmulticast mode [ 141.249947][ T5718] bridge_slave_0: entered promiscuous mode [ 141.255917][ T5718] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.259310][ T5718] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.263796][ T5718] bridge_slave_1: entered allmulticast mode [ 141.267816][ T5718] bridge_slave_1: entered promiscuous mode [ 141.296268][ T5718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.303812][ T5718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.328302][ T5718] team0: Port device team_slave_0 added [ 141.333335][ T5718] team0: Port device team_slave_1 added [ 141.354516][ T5718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.357578][ T5718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.369900][ T5718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.375988][ T5718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.378959][ T5718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.392332][ T5718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.424042][ T5718] hsr_slave_0: entered promiscuous mode [ 141.427304][ T5718] hsr_slave_1: entered promiscuous mode [ 142.108325][ T5718] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 142.135699][ T5718] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 142.153884][ T5718] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 142.160526][ T5718] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 142.327218][ T5718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.371928][ T5718] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.385045][ T1041] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.388582][ T1041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.420489][ T1041] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.423875][ T1041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.801854][ T5718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.857792][ T5718] veth0_vlan: entered promiscuous mode [ 142.885099][ T5718] veth1_vlan: entered promiscuous mode [ 142.928978][ T5718] veth0_macvtap: entered promiscuous mode [ 142.955382][ T5718] veth1_macvtap: entered promiscuous mode [ 142.983438][ T5718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.006220][ T5718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.028158][ T67] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.032503][ T67] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.036456][ T67] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.040310][ T67] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.256687][ T5408] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 143.266945][ T5408] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 143.276797][ T5408] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 143.287105][ T5408] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 143.290644][ T5408] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 143.320183][ T1041] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.403587][ T1041] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.505794][ T1041] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/08/11 20:05:55 executed programs: 0 [ 144.732995][ T5408] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 144.737693][ T5408] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 144.742592][ T5408] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 144.747963][ T5408] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 144.755888][ T5408] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 145.116315][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 145.255799][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.262191][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.265586][ T5792] bridge_slave_0: entered allmulticast mode [ 145.283348][ T5792] bridge_slave_0: entered promiscuous mode [ 145.292719][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.295861][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.299018][ T5792] bridge_slave_1: entered allmulticast mode [ 145.319918][ T5792] bridge_slave_1: entered promiscuous mode [ 145.379802][ T1041] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.408617][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.425107][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.484136][ T5792] team0: Port device team_slave_0 added [ 145.488923][ T5792] team0: Port device team_slave_1 added [ 145.554531][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.557570][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.581421][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.594940][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.598037][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.630218][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.717702][ T5792] hsr_slave_0: entered promiscuous mode [ 145.736233][ T5792] hsr_slave_1: entered promiscuous mode [ 145.752765][ T5792] debugfs: 'hsr0' already exists in 'hsr' [ 145.755755][ T5792] Cannot create hsr debugfs directory [ 146.073819][ T1041] bridge_slave_1: left allmulticast mode [ 146.076834][ T1041] bridge_slave_1: left promiscuous mode [ 146.079557][ T1041] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.103127][ T1041] bridge_slave_0: left allmulticast mode [ 146.105664][ T1041] bridge_slave_0: left promiscuous mode [ 146.108316][ T1041] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.616318][ T1041] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.634780][ T1041] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.639837][ T1041] bond0 (unregistering): Released all slaves [ 146.777317][ T1041] hsr_slave_0: left promiscuous mode [ 146.780492][ T1041] hsr_slave_1: left promiscuous mode [ 146.792307][ T1041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.797220][ T1041] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.814011][ T1041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.817536][ T1041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.829803][ T1041] veth1_macvtap: left promiscuous mode [ 146.833747][ T4701] Bluetooth: hci0: command tx timeout [ 146.837423][ T1041] veth0_macvtap: left promiscuous mode [ 146.839958][ T1041] veth1_vlan: left promiscuous mode [ 146.842911][ T1041] veth0_vlan: left promiscuous mode [ 147.148268][ T1041] team0 (unregistering): Port device team_slave_1 removed [ 147.174875][ T1041] team0 (unregistering): Port device team_slave_0 removed [ 147.957501][ T5792] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 147.994433][ T5792] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 148.018295][ T5792] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 148.024734][ T5792] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 148.177318][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.209781][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.236263][ T1041] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.240302][ T1041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.269429][ T1041] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.272654][ T1041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.642167][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.722964][ T5792] veth0_vlan: entered promiscuous mode [ 148.743746][ T5792] veth1_vlan: entered promiscuous mode [ 148.793860][ T5792] veth0_macvtap: entered promiscuous mode [ 148.814294][ T5792] veth1_macvtap: entered promiscuous mode [ 148.851819][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.873210][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.913289][ T4701] Bluetooth: hci0: command tx timeout [ 148.917380][ T2996] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.931185][ T2996] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.935620][ T2996] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.939246][ T2996] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.055182][ T2996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.058496][ T2996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.118496][ T1041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.124309][ T1041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.207317][ T5863] loop0: detected capacity change from 0 to 128 [ 149.227961][ T5863] ======================================================= [ 149.227961][ T5863] WARNING: The mand mount option has been deprecated and [ 149.227961][ T5863] and is ignored by this kernel. Remove the mand [ 149.227961][ T5863] option from the mount to silence this warning. [ 149.227961][ T5863] ======================================================= [ 149.290669][ T5863] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 149.298222][ T5863] hpfs: filesystem error: improperly stopped [ 149.314064][ T5863] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 149.317509][ T5863] hpfs: You really don't want any checks? You are crazy... [ 149.333265][ T5863] hpfs: hpfs_map_sector(): read error [ 149.335665][ T5863] hpfs: code page support is disabled [ 149.353153][ T5863] hpfs: hpfs_map_sector(): read error [ 149.355826][ T5863] hpfs: hpfs_map_sector(): read error [ 149.358548][ T5863] hpfs: hpfs_map_sector(): read error [ 149.373891][ T5863] hpfs: hpfs_map_sector(): read error [ 149.378242][ T5863] hpfs: hpfs_map_4sectors(): unaligned read [ 149.392100][ T5863] hpfs: hpfs_map_4sectors(): unaligned read [ 149.395291][ T5863] hpfs: filesystem error: unable to find root dir [ 149.506049][ T5868] loop0: detected capacity change from 0 to 128 [ 149.521995][ T5868] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 149.544708][ T5868] hpfs: filesystem error: improperly stopped [ 149.547570][ T5868] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 149.572067][ T5868] hpfs: You really don't want any checks? You are crazy... [ 149.575630][ T5868] hpfs: hpfs_map_sector(): read error [ 149.578114][ T5868] hpfs: code page support is disabled [ 149.612125][ T5868] hpfs: hpfs_map_sector(): read error [ 149.614531][ T5868] hpfs: hpfs_map_sector(): read error [ 149.616897][ T5868] hpfs: hpfs_map_sector(): read error [ 149.619300][ T5868] hpfs: hpfs_map_sector(): read error [ 149.644840][ T5868] hpfs: hpfs_map_4sectors(): unaligned read [ 149.648000][ T5868] hpfs: hpfs_map_4sectors(): unaligned read [ 149.650634][ T5868] hpfs: filesystem error: unable to find root dir [ 149.736104][ T5873] loop0: detected capacity change from 0 to 128 2025/08/11 20:06:01 executed programs: 4 [ 149.762455][ T5873] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 149.789197][ T5873] hpfs: filesystem error: improperly stopped [ 149.799598][ T5873] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 149.817314][ T5873] hpfs: You really don't want any checks? You are crazy... [ 149.820658][ T5873] hpfs: hpfs_map_sector(): read error [ 149.851458][ T5873] hpfs: code page support is disabled [ 149.853949][ T5873] ================================================================== [ 149.857576][ T5873] BUG: KASAN: use-after-free in strcmp+0x6f/0xc0 [ 149.860231][ T5873] Read of size 1 at addr ffff88804387a8a6 by task syz.0.18/5873 [ 149.865255][ T5873] [ 149.866455][ T5873] CPU: 0 UID: 0 PID: 5873 Comm: syz.0.18 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 149.866472][ T5873] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 149.866479][ T5873] Call Trace: [ 149.866489][ T5873] [ 149.866496][ T5873] dump_stack_lvl+0x189/0x250 [ 149.866519][ T5873] ? __virt_addr_valid+0x1c8/0x5c0 [ 149.866537][ T5873] ? rcu_is_watching+0x15/0xb0 [ 149.866651][ T5873] ? __kasan_check_byte+0x12/0x40 [ 149.866670][ T5873] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.866703][ T5873] ? rcu_is_watching+0x15/0xb0 [ 149.866717][ T5873] ? lock_release+0x4b/0x3e0 [ 149.866738][ T5873] ? __virt_addr_valid+0x1c8/0x5c0 [ 149.866756][ T5873] ? __virt_addr_valid+0x4a5/0x5c0 [ 149.866772][ T5873] print_report+0xca/0x240 [ 149.866786][ T5873] ? strcmp+0x6f/0xc0 [ 149.866805][ T5873] kasan_report+0x118/0x150 [ 149.866823][ T5873] ? strcmp+0x6f/0xc0 [ 149.866842][ T5873] strcmp+0x6f/0xc0 [ 149.866861][ T5873] hpfs_get_ea+0x114/0xdb0 [ 149.866880][ T5873] ? __pfx_hpfs_get_ea+0x10/0x10 [ 149.866895][ T5873] ? bdev_getblk+0x80/0x660 [ 149.866920][ T5873] ? __bread_gfp+0xc3/0x3c0 [ 149.866936][ T5873] ? hpfs_map_sector+0x14f/0x380 [ 149.866951][ T5873] ? hpfs_map_fnode+0x27e/0x6a0 [ 149.866966][ T5873] ? set_normalized_timespec64+0xf0/0x1a0 [ 149.866984][ T5873] ? __lock_acquire+0xab9/0xd20 [ 149.867017][ T5873] hpfs_read_inode+0x19d/0x1010 [ 149.867035][ T5873] ? __pfx_hpfs_read_inode+0x10/0x10 [ 149.867050][ T5873] ? inode_set_ctime_to_ts+0x126/0x2f0 [ 149.867064][ T5873] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 149.867077][ T5873] ? do_raw_spin_unlock+0x4d/0x240 [ 149.867095][ T5873] ? hpfs_init_inode+0x216/0x350 [ 149.867110][ T5873] hpfs_fill_super+0x129d/0x2040 [ 149.867139][ T5873] ? __pfx_hpfs_fill_super+0x10/0x10 [ 149.867156][ T5873] ? __pfx_snprintf+0x10/0x10 [ 149.867168][ T5873] ? set_blocksize+0x21e/0x500 [ 149.867186][ T5873] ? sb_set_blocksize+0x104/0x180 [ 149.867202][ T5873] ? setup_bdev_super+0x4c1/0x5b0 [ 149.867218][ T5873] get_tree_bdev_flags+0x40e/0x4d0 [ 149.867231][ T5873] ? __pfx_hpfs_fill_super+0x10/0x10 [ 149.867243][ T5873] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 149.867255][ T5873] vfs_get_tree+0x8f/0x2b0 [ 149.867265][ T5873] do_new_mount+0x2a2/0x9e0 [ 149.867276][ T5873] ? ns_capable+0x8a/0xf0 [ 149.867286][ T5873] ? __pfx_do_new_mount+0x10/0x10 [ 149.867296][ T5873] ? path_mount+0x61c/0xfe0 [ 149.867306][ T5873] ? user_path_at+0x44/0x60 [ 149.867318][ T5873] __se_sys_mount+0x317/0x410 [ 149.867332][ T5873] ? __pfx___se_sys_mount+0x10/0x10 [ 149.867346][ T5873] ? do_syscall_64+0xbe/0x3b0 [ 149.867358][ T5873] ? __x64_sys_mount+0x20/0xc0 [ 149.867368][ T5873] do_syscall_64+0xfa/0x3b0 [ 149.867376][ T5873] ? lockdep_hardirqs_on+0x9c/0x150 [ 149.867384][ T5873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.867391][ T5873] ? clear_bhb_loop+0x60/0xb0 [ 149.867398][ T5873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.867405][ T5873] RIP: 0033:0x7f2efc7900ca [ 149.867413][ T5873] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.867419][ T5873] RSP: 002b:00007f2efd68fe68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 149.867428][ T5873] RAX: ffffffffffffffda RBX: 00007f2efd68fef0 RCX: 00007f2efc7900ca [ 149.867433][ T5873] RDX: 0000200000009e80 RSI: 0000200000009ec0 RDI: 00007f2efd68feb0 [ 149.867438][ T5873] RBP: 0000200000009e80 R08: 00007f2efd68fef0 R09: 0000000000000041 [ 149.867442][ T5873] R10: 0000000000000041 R11: 0000000000000246 R12: 0000200000009ec0 [ 149.867447][ T5873] R13: 00007f2efd68feb0 R14: 0000000000009e02 R15: 0000200000009fc0 [ 149.867453][ T5873] [ 149.867456][ T5873] [ 150.035564][ T5873] The buggy address belongs to the physical page: [ 150.038607][ T5873] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4387a [ 150.042744][ T5873] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 150.045829][ T5873] raw: 04fff00000000000 ffffea00010e1ec8 ffffea00010e1e48 0000000000000000 [ 150.049443][ T5873] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 150.052990][ T5873] page dumped because: kasan: bad access detected [ 150.055704][ T5873] page_owner tracks the page as freed [ 150.058158][ T5873] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 4754, tgid 4754 (udevd), ts 47514087830, free_ts 141029462822 [ 150.066514][ T5873] post_alloc_hook+0x240/0x2a0 [ 150.068623][ T5873] compaction_alloc+0x3099/0x34a0 [ 150.070830][ T5873] migrate_pages_batch+0x81e/0x3620 [ 150.073173][ T5873] migrate_pages+0x1bcc/0x2930 [ 150.075403][ T5873] compact_zone+0x23e1/0x4ab0 [ 150.077748][ T5873] compact_node+0x1d2/0x280 [ 150.079983][ T5873] kcompactd+0xbc8/0x1290 [ 150.082023][ T5873] kthread+0x70e/0x8a0 [ 150.083866][ T5873] ret_from_fork+0x3f9/0x770 [ 150.086049][ T5873] ret_from_fork_asm+0x1a/0x30 [ 150.088179][ T5873] page last free pid 30 tgid 30 stack trace: [ 150.090951][ T5873] __free_frozen_pages+0xbc4/0xd30 [ 150.093583][ T5873] __folio_put+0x21b/0x2c0 [ 150.095906][ T5873] migrate_pages_batch+0x234a/0x3620 [ 150.098317][ T5873] migrate_pages+0x1bcc/0x2930 [ 150.100841][ T5873] compact_zone+0x23e1/0x4ab0 [ 150.103134][ T5873] compact_node+0x1d2/0x280 [ 150.105664][ T5873] kcompactd+0xbc8/0x1290 [ 150.108105][ T5873] kthread+0x70e/0x8a0 [ 150.110382][ T5873] ret_from_fork+0x3f9/0x770 [ 150.113203][ T5873] ret_from_fork_asm+0x1a/0x30 [ 150.116207][ T5873] [ 150.117722][ T5873] Memory state around the buggy address: [ 150.120665][ T5873] ffff88804387a780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 150.124295][ T5873] ffff88804387a800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 150.127833][ T5873] >ffff88804387a880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 150.131523][ T5873] ^ [ 150.133887][ T5873] ffff88804387a900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 150.137892][ T5873] ffff88804387a980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 150.141852][ T5873] ================================================================== [ 150.262260][ T5873] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 150.265584][ T5873] CPU: 0 UID: 0 PID: 5873 Comm: syz.0.18 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 150.270820][ T5873] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 150.275795][ T5873] Call Trace: [ 150.277435][ T5873] [ 150.278894][ T5873] dump_stack_lvl+0x99/0x250 [ 150.281194][ T5873] ? __asan_memcpy+0x40/0x70 [ 150.283443][ T5873] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.285890][ T5873] ? __pfx__printk+0x10/0x10 [ 150.288041][ T5873] vpanic+0x281/0x750 [ 150.289864][ T5873] ? __pfx_print_hex_dump+0x10/0x10 [ 150.292273][ T5873] ? __pfx_vpanic+0x10/0x10 [ 150.294386][ T5873] ? preempt_schedule_common+0x83/0xd0 [ 150.297306][ T5873] ? preempt_schedule+0xae/0xc0 [ 150.300190][ T5873] panic+0xb9/0xc0 [ 150.302510][ T5873] ? __pfx_panic+0x10/0x10 [ 150.304698][ T5873] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 150.307538][ T5873] ? strcmp+0x6f/0xc0 [ 150.309352][ T5873] check_panic_on_warn+0x89/0xb0 [ 150.311604][ T5873] ? strcmp+0x6f/0xc0 [ 150.313497][ T5873] end_report+0x78/0x160 [ 150.315480][ T5873] kasan_report+0x129/0x150 [ 150.317566][ T5873] ? strcmp+0x6f/0xc0 [ 150.319389][ T5873] strcmp+0x6f/0xc0 [ 150.321143][ T5873] hpfs_get_ea+0x114/0xdb0 [ 150.323095][ T5873] ? __pfx_hpfs_get_ea+0x10/0x10 [ 150.325346][ T5873] ? bdev_getblk+0x80/0x660 [ 150.327422][ T5873] ? __bread_gfp+0xc3/0x3c0 [ 150.329489][ T5873] ? hpfs_map_sector+0x14f/0x380 [ 150.331776][ T5873] ? hpfs_map_fnode+0x27e/0x6a0 [ 150.333992][ T5873] ? set_normalized_timespec64+0xf0/0x1a0 [ 150.336576][ T5873] ? __lock_acquire+0xab9/0xd20 [ 150.338798][ T5873] hpfs_read_inode+0x19d/0x1010 [ 150.341018][ T5873] ? __pfx_hpfs_read_inode+0x10/0x10 [ 150.343367][ T5873] ? inode_set_ctime_to_ts+0x126/0x2f0 [ 150.345839][ T5873] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 150.348450][ T5873] ? do_raw_spin_unlock+0x4d/0x240 [ 150.350721][ T5873] ? hpfs_init_inode+0x216/0x350 [ 150.353046][ T5873] hpfs_fill_super+0x129d/0x2040 [ 150.355301][ T5873] ? __pfx_hpfs_fill_super+0x10/0x10 [ 150.357725][ T5873] ? __pfx_snprintf+0x10/0x10 [ 150.359988][ T5873] ? set_blocksize+0x21e/0x500 [ 150.362405][ T5873] ? sb_set_blocksize+0x104/0x180 [ 150.364723][ T5873] ? setup_bdev_super+0x4c1/0x5b0 [ 150.367049][ T5873] get_tree_bdev_flags+0x40e/0x4d0 [ 150.369343][ T5873] ? __pfx_hpfs_fill_super+0x10/0x10 [ 150.371722][ T5873] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 150.374308][ T5873] vfs_get_tree+0x8f/0x2b0 [ 150.376537][ T5873] do_new_mount+0x2a2/0x9e0 [ 150.378772][ T5873] ? ns_capable+0x8a/0xf0 [ 150.380963][ T5873] ? __pfx_do_new_mount+0x10/0x10 [ 150.383331][ T5873] ? path_mount+0x61c/0xfe0 [ 150.385417][ T5873] ? user_path_at+0x44/0x60 [ 150.387518][ T5873] __se_sys_mount+0x317/0x410 [ 150.389753][ T5873] ? __pfx___se_sys_mount+0x10/0x10 [ 150.392362][ T5873] ? do_syscall_64+0xbe/0x3b0 [ 150.394847][ T5873] ? __x64_sys_mount+0x20/0xc0 [ 150.397011][ T5873] do_syscall_64+0xfa/0x3b0 [ 150.399095][ T5873] ? lockdep_hardirqs_on+0x9c/0x150 [ 150.401555][ T5873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.404631][ T5873] ? clear_bhb_loop+0x60/0xb0 [ 150.407312][ T5873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.410115][ T5873] RIP: 0033:0x7f2efc7900ca [ 150.412133][ T5873] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.420750][ T5873] RSP: 002b:00007f2efd68fe68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 150.425037][ T5873] RAX: ffffffffffffffda RBX: 00007f2efd68fef0 RCX: 00007f2efc7900ca [ 150.428851][ T5873] RDX: 0000200000009e80 RSI: 0000200000009ec0 RDI: 00007f2efd68feb0 [ 150.432361][ T5873] RBP: 0000200000009e80 R08: 00007f2efd68fef0 R09: 0000000000000041 [ 150.435981][ T5873] R10: 0000000000000041 R11: 0000000000000246 R12: 0000200000009ec0 [ 150.439864][ T5873] R13: 00007f2efd68feb0 R14: 0000000000009e02 R15: 0000200000009fc0 [ 150.443616][ T5873] [ 150.445404][ T5873] Kernel Offset: disabled [ 150.447389][ T5873] Rebooting in 86400 seconds..