no interfaces have a carrier
[ 63.648588][ T5462] 8021q: adding VLAN 0 to HW filter on device bond0
[ 63.690310][ T5462] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting crond: OK
Starting sshd: OK
syzkaller
syzkaller login: [ 87.144037][ T992] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.10.16' (ED25519) to the list of known hosts.
2025/11/04 20:30:26 parsed 1 programs
[ 100.135049][ T5807] cgroup: Unknown subsys name 'net'
[ 100.416665][ T5807] cgroup: Unknown subsys name 'cpuset'
[ 100.531193][ T5807] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 102.549502][ T5807] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 106.047263][ T1125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 106.047292][ T1125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 106.184679][ T1125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 106.184702][ T1125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 108.299226][ T5840] chnl_net:caif_netlink_parms(): no params data found
[ 108.752660][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[ 108.754581][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[ 108.754828][ T5840] bridge_slave_0: entered allmulticast mode
[ 108.757058][ T5840] bridge_slave_0: entered promiscuous mode
[ 108.789349][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[ 108.789501][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[ 108.789633][ T5840] bridge_slave_1: entered allmulticast mode
[ 108.793389][ T5840] bridge_slave_1: entered promiscuous mode
[ 109.025507][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 109.028650][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 109.203277][ T5840] team0: Port device team_slave_0 added
[ 109.206815][ T5840] team0: Port device team_slave_1 added
[ 109.503848][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 109.503868][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 109.503899][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 109.508164][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 109.508181][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 109.508209][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 109.698880][ T5840] hsr_slave_0: entered promiscuous mode
[ 109.700199][ T5840] hsr_slave_1: entered promiscuous mode
[ 110.078059][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 110.097362][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 110.135055][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 110.174261][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 110.313260][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[ 110.399126][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[ 110.411432][ T3586] bridge0: port 1(bridge_slave_0) entered blocking state
[ 110.411606][ T3586] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 110.421724][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 110.421970][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 110.675531][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 110.724456][ T5840] veth0_vlan: entered promiscuous mode
[ 110.735224][ T5840] veth1_vlan: entered promiscuous mode
[ 110.766889][ T5840] veth0_macvtap: entered promiscuous mode
[ 110.778376][ T5840] veth1_macvtap: entered promiscuous mode
[ 110.798048][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 110.813227][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 110.829385][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 110.842910][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 110.843963][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 110.844011][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 111.575428][ T1016] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 111.855939][ T1016] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 112.124043][ T1016] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 113.036235][ T1016] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 113.930764][ T1016] bridge_slave_1: left allmulticast mode
[ 113.931111][ T1016] bridge_slave_1: left promiscuous mode
[ 113.933034][ T1016] bridge0: port 2(bridge_slave_1) entered disabled state
[ 114.013069][ T1016] bridge_slave_0: left allmulticast mode
[ 114.013099][ T1016] bridge_slave_0: left promiscuous mode
[ 114.014446][ T1016] bridge0: port 1(bridge_slave_0) entered disabled state
[ 115.791274][ T1016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 115.851812][ T1016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 115.893218][ T1016] bond0 (unregistering): Released all slaves
[ 116.300620][ T1016] hsr_slave_0: left promiscuous mode
[ 116.342812][ T1016] hsr_slave_1: left promiscuous mode
[ 116.344151][ T1016] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 116.344234][ T1016] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 116.392506][ T1016] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 116.392544][ T1016] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 116.513546][ T1016] veth1_macvtap: left promiscuous mode
[ 116.513782][ T1016] veth0_macvtap: left promiscuous mode
[ 116.514102][ T1016] veth1_vlan: left promiscuous mode
[ 116.514738][ T1016] veth0_vlan: left promiscuous mode
[ 118.492329][ T1016] team0 (unregistering): Port device team_slave_1 removed
[ 118.701165][ T1016] team0 (unregistering): Port device team_slave_0 removed
[ 121.372903][ T5938] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 121.375803][ T5938] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 121.377148][ T5938] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 121.383743][ T5938] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 121.384895][ T5938] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
2025/11/04 20:30:53 executed programs: 0
[ 122.976618][ T5116] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 122.978722][ T5116] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 122.980281][ T5116] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 123.005909][ T5116] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 123.006753][ T5116] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 123.476508][ T5966] chnl_net:caif_netlink_parms(): no params data found
[ 123.822232][ T5966] bridge0: port 1(bridge_slave_0) entered blocking state
[ 123.822383][ T5966] bridge0: port 1(bridge_slave_0) entered disabled state
[ 123.822503][ T5966] bridge_slave_0: entered allmulticast mode
[ 123.824352][ T5966] bridge_slave_0: entered promiscuous mode
[ 123.827356][ T5966] bridge0: port 2(bridge_slave_1) entered blocking state
[ 123.827502][ T5966] bridge0: port 2(bridge_slave_1) entered disabled state
[ 123.827627][ T5966] bridge_slave_1: entered allmulticast mode
[ 123.829506][ T5966] bridge_slave_1: entered promiscuous mode
[ 124.031671][ T5966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 124.035132][ T5966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 124.229304][ T5966] team0: Port device team_slave_0 added
[ 124.233863][ T5966] team0: Port device team_slave_1 added
[ 124.575578][ T5966] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 124.575600][ T5966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 124.575620][ T5966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 124.578786][ T5966] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 124.578805][ T5966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 124.578825][ T5966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 124.959507][ T5966] hsr_slave_0: entered promiscuous mode
[ 124.961106][ T5966] hsr_slave_1: entered promiscuous mode
[ 125.062329][ T5938] Bluetooth: hci0: command tx timeout
[ 127.025721][ T5966] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 127.065689][ T5966] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 127.108478][ T5966] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 127.130548][ T5938] Bluetooth: hci0: command tx timeout
[ 127.152182][ T5966] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 127.305303][ T5966] 8021q: adding VLAN 0 to HW filter on device bond0
[ 127.341391][ T5966] 8021q: adding VLAN 0 to HW filter on device team0
[ 127.350053][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 127.370086][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 127.393604][ T3586] bridge0: port 2(bridge_slave_1) entered blocking state
[ 127.393821][ T3586] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 127.747350][ T5966] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 127.825497][ T5966] veth0_vlan: entered promiscuous mode
[ 127.844817][ T5966] veth1_vlan: entered promiscuous mode
[ 127.900975][ T5966] veth0_macvtap: entered promiscuous mode
[ 127.912785][ T5966] veth1_macvtap: entered promiscuous mode
[ 127.938227][ T5966] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 127.956648][ T5966] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 127.969330][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 127.969606][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 127.969650][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 127.969691][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 128.196343][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 128.196367][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 128.281829][ T1016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 128.281852][ T1016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2025/11/04 20:30:58 executed programs: 2
[ 128.442723][ T6056] loop0: detected capacity change from 0 to 128
[ 128.445854][ T6056] =======================================================
[ 128.445854][ T6056] WARNING: The mand mount option has been deprecated and
[ 128.445854][ T6056] and is ignored by this kernel. Remove the mand
[ 128.445854][ T6056] option from the mount to silence this warning.
[ 128.445854][ T6056] =======================================================
[ 128.504561][ T6056] hpfs: hpfs_map_sector(): read error
[ 128.504579][ T6056] hpfs: filesystem error: can't load hotfix map; going on - but anything won't be destroyed because it's read-only
[ 128.504754][ T6056] hpfs: filesystem error: improperly stopped
[ 128.504771][ T6056] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[ 128.504786][ T6056] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories
[ 128.504797][ T6056] hpfs: You really don't want any checks? You are crazy...
[ 128.504833][ T6056] hpfs: hpfs_map_sector(): read error
[ 128.504843][ T6056] hpfs: code page support is disabled
[ 128.507249][ T6056] ==================================================================
[ 128.507264][ T6056] BUG: KASAN: use-after-free in strcmp+0x6f/0xc0
[ 128.507306][ T6056] Read of size 1 at addr ffff888047111003 by task syz.0.17/6056
[ 128.507325][ T6056]
[ 128.507352][ T6056] CPU: 0 UID: 0 PID: 6056 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 128.507378][ T6056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 128.507399][ T6056] Call Trace:
[ 128.507412][ T6056]
[ 128.507422][ T6056] dump_stack_lvl+0x189/0x250
[ 128.507458][ T6056] ? __virt_addr_valid+0x1c8/0x5c0
[ 128.507492][ T6056] ? rcu_is_watching+0x15/0xb0
[ 128.507512][ T6056] ? __kasan_check_byte+0x12/0x40
[ 128.507544][ T6056] ? __pfx_dump_stack_lvl+0x10/0x10
[ 128.507584][ T6056] ? rcu_is_watching+0x15/0xb0
[ 128.507604][ T6056] ? lock_release+0x4b/0x3e0
[ 128.507637][ T6056] ? __virt_addr_valid+0x1c8/0x5c0
[ 128.507675][ T6056] ? __virt_addr_valid+0x4a5/0x5c0
[ 128.507710][ T6056] print_report+0xca/0x240
[ 128.507742][ T6056] ? strcmp+0x6f/0xc0
[ 128.507771][ T6056] kasan_report+0x118/0x150
[ 128.507804][ T6056] ? strcmp+0x6f/0xc0
[ 128.507839][ T6056] strcmp+0x6f/0xc0
[ 128.507871][ T6056] hpfs_get_ea+0x114/0xdb0
[ 128.507901][ T6056] ? __pfx_hpfs_get_ea+0x10/0x10
[ 128.507927][ T6056] ? bdev_getblk+0x80/0x660
[ 128.507948][ T6056] ? __pfx___might_resched+0x10/0x10
[ 128.507974][ T6056] ? do_raw_spin_lock+0x121/0x290
[ 128.508001][ T6056] ? __bread_gfp+0xc3/0x3c0
[ 128.508024][ T6056] ? hpfs_map_sector+0x167/0x3a0
[ 128.508048][ T6056] ? hpfs_map_fnode+0x27e/0x6a0
[ 128.508073][ T6056] ? set_normalized_timespec64+0xf0/0x1a0
[ 128.508107][ T6056] hpfs_read_inode+0x19d/0x1010
[ 128.508145][ T6056] ? __pfx_hpfs_read_inode+0x10/0x10
[ 128.508170][ T6056] ? inode_set_ctime_to_ts+0x126/0x2f0
[ 128.508194][ T6056] ? __pfx_inode_set_ctime_to_ts+0x10/0x10
[ 128.508224][ T6056] ? hpfs_init_inode+0x216/0x350
[ 128.508251][ T6056] hpfs_fill_super+0x12a9/0x2050
[ 128.508295][ T6056] ? __pfx_hpfs_fill_super+0x10/0x10
[ 128.508333][ T6056] ? __pfx_snprintf+0x10/0x10
[ 128.508354][ T6056] ? set_blocksize+0x219/0x450
[ 128.508386][ T6056] ? rt_spin_unlock+0x150/0x200
[ 128.508413][ T6056] ? sb_set_blocksize+0x104/0x180
[ 128.508446][ T6056] ? setup_bdev_super+0x4c1/0x5b0
[ 128.508477][ T6056] get_tree_bdev_flags+0x40e/0x4d0
[ 128.508505][ T6056] ? __pfx_hpfs_fill_super+0x10/0x10
[ 128.508538][ T6056] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 128.508567][ T6056] ? cap_capable+0x11f/0x460
[ 128.508587][ T6056] ? safesetid_security_capable+0xa9/0x1a0
[ 128.508612][ T6056] vfs_get_tree+0x92/0x2b0
[ 128.508641][ T6056] do_new_mount+0x302/0xa10
[ 128.508676][ T6056] ? __pfx_do_new_mount+0x10/0x10
[ 128.508716][ T6056] __se_sys_mount+0x313/0x410
[ 128.508751][ T6056] ? __pfx___se_sys_mount+0x10/0x10
[ 128.508809][ T6056] ? do_syscall_64+0xbe/0xfa0
[ 128.508839][ T6056] ? __x64_sys_mount+0x20/0xc0
[ 128.508871][ T6056] do_syscall_64+0xfa/0xfa0
[ 128.508897][ T6056] ? lockdep_hardirqs_on+0x9c/0x150
[ 128.508924][ T6056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 128.508946][ T6056] ? clear_bhb_loop+0x60/0xb0
[ 128.508972][ T6056] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 128.508994][ T6056] RIP: 0033:0x7f11bf420e6a
[ 128.509021][ T6056] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 128.509040][ T6056] RSP: 002b:00007ffff5da1d48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 128.509063][ T6056] RAX: ffffffffffffffda RBX: 00007ffff5da1dd0 RCX: 00007f11bf420e6a
[ 128.509080][ T6056] RDX: 000020000000a000 RSI: 0000200000000000 RDI: 00007ffff5da1d90
[ 128.509097][ T6056] RBP: 000020000000a000 R08: 00007ffff5da1dd0 R09: 0000000003200041
[ 128.509113][ T6056] R10: 0000000003200041 R11: 0000000000000246 R12: 0000200000000000
[ 128.509133][ T6056] R13: 00007ffff5da1d90 R14: 0000000000009e15 R15: 0000200000000040
[ 128.509166][ T6056]
[ 128.509174][ T6056]
[ 128.509179][ T6056] The buggy address belongs to the physical page:
[ 128.509199][ T6056] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x3 pfn:0x47111
[ 128.509219][ T6056] flags: 0x80000000000000(node=0|zone=1)
[ 128.509249][ T6056] raw: 0080000000000000 ffffea00011c3f48 ffffea00011ba988 0000000000000000
[ 128.509267][ T6056] raw: 0000000000000003 0000000000000000 00000000ffffffff 0000000000000000
[ 128.509279][ T6056] page dumped because: kasan: bad access detected
[ 128.509293][ T6056] page_owner tracks the page as freed
[ 128.509301][ T6056] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 6051, tgid 6051 (sed), ts 128212724746, free_ts 128257975652
[ 128.509335][ T6056] post_alloc_hook+0x240/0x2a0
[ 128.509364][ T6056] get_page_from_freelist+0x28c0/0x2960
[ 128.509397][ T6056] __alloc_frozen_pages_noprof+0x181/0x370
[ 128.509429][ T6056] alloc_pages_mpol+0xd1/0x380
[ 128.509459][ T6056] vma_alloc_folio_noprof+0xe4/0x280
[ 128.509488][ T6056] folio_prealloc+0x30/0x180
[ 128.509517][ T6056] handle_mm_fault+0x103a/0x3400
[ 128.509545][ T6056] do_user_addr_fault+0x764/0x1380
[ 128.509569][ T6056] exc_page_fault+0x82/0x100
[ 128.509594][ T6056] asm_exc_page_fault+0x26/0x30
[ 128.509613][ T6056] page last free pid 6051 tgid 6051 stack trace:
[ 128.509625][ T6056] free_unref_folios+0xc22/0x1860
[ 128.509653][ T6056] folios_put_refs+0x569/0x670
[ 128.509672][ T6056] free_pages_and_swap_cache+0x4be/0x520
[ 128.509695][ T6056] tlb_flush_mmu+0x3a0/0x680
[ 128.509712][ T6056] tlb_finish_mmu+0xc3/0x1d0
[ 128.509730][ T6056] exit_mmap+0x444/0xb40
[ 128.509757][ T6056] __mmput+0xcb/0x3d0
[ 128.509779][ T6056] exit_mm+0x1da/0x2c0
[ 128.509809][ T6056] do_exit+0x648/0x2300
[ 128.509839][ T6056] do_group_exit+0x21c/0x2d0
[ 128.509856][ T6056] __x64_sys_exit_group+0x3f/0x40
[ 128.509874][ T6056] x64_sys_call+0x21f7/0x2200
[ 128.509895][ T6056] do_syscall_64+0xfa/0xfa0
[ 128.509922][ T6056] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 128.509942][ T6056]
[ 128.509947][ T6056] Memory state around the buggy address:
[ 128.509958][ T6056] ffff888047110f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 128.509973][ T6056] ffff888047110f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 128.509988][ T6056] >ffff888047111000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 128.510005][ T6056] ^
[ 128.510016][ T6056] ffff888047111080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 128.510031][ T6056] ffff888047111100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 128.510042][ T6056] ==================================================================
[ 128.510191][ T6056] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 128.510208][ T6056] CPU: 0 UID: 0 PID: 6056 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 128.510231][ T6056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 128.510244][ T6056] Call Trace:
[ 128.510252][ T6056]
[ 128.510261][ T6056] dump_stack_lvl+0x99/0x250
[ 128.510297][ T6056] ? __asan_memcpy+0x40/0x70
[ 128.510323][ T6056] ? __pfx_dump_stack_lvl+0x10/0x10
[ 128.510357][ T6056] ? __pfx__printk+0x10/0x10
[ 128.510393][ T6056] vpanic+0x237/0x6d0
[ 128.510413][ T6056] ? __pfx_vpanic+0x10/0x10
[ 128.510433][ T6056] ? preempt_schedule_common+0x83/0xd0
[ 128.510461][ T6056] ? preempt_schedule+0xae/0xc0
[ 128.510492][ T6056] panic+0xb9/0xc0
[ 128.510511][ T6056] ? __pfx_panic+0x10/0x10
[ 128.510537][ T6056] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 128.510570][ T6056] ? strcmp+0x6f/0xc0
[ 128.510599][ T6056] check_panic_on_warn+0x89/0xb0
[ 128.510620][ T6056] ? strcmp+0x6f/0xc0
[ 128.510648][ T6056] end_report+0x78/0x160
[ 128.510679][ T6056] kasan_report+0x129/0x150
[ 128.510711][ T6056] ? strcmp+0x6f/0xc0
[ 128.510746][ T6056] strcmp+0x6f/0xc0
[ 128.510778][ T6056] hpfs_get_ea+0x114/0xdb0
[ 128.510808][ T6056] ? __pfx_hpfs_get_ea+0x10/0x10
[ 128.510834][ T6056] ? bdev_getblk+0x80/0x660
[ 128.510854][ T6056] ? __pfx___might_resched+0x10/0x10
[ 128.510879][ T6056] ? do_raw_spin_lock+0x121/0x290
[ 128.510910][ T6056] ? __bread_gfp+0xc3/0x3c0
[ 128.510933][ T6056] ? hpfs_map_sector+0x167/0x3a0
[ 128.510958][ T6056] ? hpfs_map_fnode+0x27e/0x6a0
[ 128.510984][ T6056] ? set_normalized_timespec64+0xf0/0x1a0
[ 128.511018][ T6056] hpfs_read_inode+0x19d/0x1010
[ 128.511048][ T6056] ? __pfx_hpfs_read_inode+0x10/0x10
[ 128.511074][ T6056] ? inode_set_ctime_to_ts+0x126/0x2f0
[ 128.511099][ T6056] ? __pfx_inode_set_ctime_to_ts+0x10/0x10
[ 128.511136][ T6056] ? hpfs_init_inode+0x216/0x350
[ 128.511164][ T6056] hpfs_fill_super+0x12a9/0x2050
[ 128.511207][ T6056] ? __pfx_hpfs_fill_super+0x10/0x10
[ 128.511240][ T6056] ? __pfx_snprintf+0x10/0x10
[ 128.511261][ T6056] ? set_blocksize+0x219/0x450
[ 128.511293][ T6056] ? rt_spin_unlock+0x150/0x200
[ 128.511318][ T6056] ? sb_set_blocksize+0x104/0x180
[ 128.511350][ T6056] ? setup_bdev_super+0x4c1/0x5b0
[ 128.511381][ T6056] get_tree_bdev_flags+0x40e/0x4d0
[ 128.511409][ T6056] ? __pfx_hpfs_fill_super+0x10/0x10
[ 128.511440][ T6056] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 128.511470][ T6056] ? cap_capable+0x11f/0x460
[ 128.511490][ T6056] ? safesetid_security_capable+0xa9/0x1a0
[ 128.511516][ T6056] vfs_get_tree+0x92/0x2b0
[ 128.511546][ T6056] do_new_mount+0x302/0xa10
[ 128.511579][ T6056] ? __pfx_do_new_mount+0x10/0x10
[ 128.511621][ T6056] __se_sys_mount+0x313/0x410
[ 128.511656][ T6056] ? __pfx___se_sys_mount+0x10/0x10
[ 128.511690][ T6056] ? do_syscall_64+0xbe/0xfa0
[ 128.511718][ T6056] ? __x64_sys_mount+0x20/0xc0
[ 128.511749][ T6056] do_syscall_64+0xfa/0xfa0
[ 128.511779][ T6056] ? lockdep_hardirqs_on+0x9c/0x150
[ 128.511809][ T6056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 128.511831][ T6056] ? clear_bhb_loop+0x60/0xb0
[ 128.511858][ T6056] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 128.511879][ T6056] RIP: 0033:0x7f11bf420e6a
[ 128.511899][ T6056] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 128.511918][ T6056] RSP: 002b:00007ffff5da1d48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 128.511941][ T6056] RAX: ffffffffffffffda RBX: 00007ffff5da1dd0 RCX: 00007f11bf420e6a
[ 128.511957][ T6056] RDX: 000020000000a000 RSI: 0000200000000000 RDI: 00007ffff5da1d90
[ 128.511973][ T6056] RBP: 000020000000a000 R08: 00007ffff5da1dd0 R09: 0000000003200041
[ 128.511988][ T6056] R10: 0000000003200041 R11: 0000000000000246 R12: 0000200000000000
[ 128.512003][ T6056] R13: 00007ffff5da1d90 R14: 0000000000009e15 R15: 0000200000000040
[ 128.512028][ T6056]
[ 128.512452][ T6056] Kernel Offset: disabled