Warning: Permanently added '10.128.1.68' (ED25519) to the list of known hosts. 2025/09/25 20:35:16 parsed 1 programs [ 91.162141][ T974] cfg80211: failed to load regulatory.db [ 91.812456][ T5869] cgroup: Unknown subsys name 'net' [ 91.914868][ T5869] cgroup: Unknown subsys name 'cpuset' [ 91.924446][ T5869] cgroup: Unknown subsys name 'rlimit' [ 93.527518][ T5869] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.429846][ T5877] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.614810][ T5883] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.622697][ T5883] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.630188][ T5883] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.639761][ T5883] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.661127][ T5883] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.967023][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.978394][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.009320][ T3593] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.017723][ T3593] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.789394][ T5936] chnl_net:caif_netlink_parms(): no params data found [ 99.890163][ T5936] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.897420][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.905695][ T5936] bridge_slave_0: entered allmulticast mode [ 99.913453][ T5936] bridge_slave_0: entered promiscuous mode [ 99.922391][ T5936] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.929505][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.936706][ T5936] bridge_slave_1: entered allmulticast mode [ 99.944624][ T5936] bridge_slave_1: entered promiscuous mode [ 99.981513][ T5936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.994170][ T5936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.032080][ T5936] team0: Port device team_slave_0 added [ 100.040088][ T5936] team0: Port device team_slave_1 added [ 100.077234][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.084363][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.110269][ T5936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.122773][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.129706][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.155660][ T5936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.207524][ T5936] hsr_slave_0: entered promiscuous mode [ 100.214038][ T5936] hsr_slave_1: entered promiscuous mode [ 100.389013][ T5936] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.401599][ T5936] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.412671][ T5936] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.423247][ T5936] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.512289][ T5936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.534578][ T5936] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.548703][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.555900][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.570303][ T3593] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.577431][ T3593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.790184][ T5936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.839702][ T5936] veth0_vlan: entered promiscuous mode [ 100.853891][ T5936] veth1_vlan: entered promiscuous mode [ 100.885551][ T5936] veth0_macvtap: entered promiscuous mode [ 100.896071][ T5936] veth1_macvtap: entered promiscuous mode [ 100.917126][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.934946][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.950207][ T1091] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.960045][ T1091] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.969962][ T1091] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.979485][ T1091] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.092843][ T3593] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.187582][ T3593] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.258090][ T3593] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.338351][ T3593] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/09/25 20:35:30 executed programs: 0 [ 101.854186][ T5883] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 101.864301][ T5883] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 101.872005][ T5883] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 101.880257][ T5883] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 101.889652][ T5883] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 102.079620][ T5972] chnl_net:caif_netlink_parms(): no params data found [ 102.174815][ T5972] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.182193][ T5972] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.189351][ T5972] bridge_slave_0: entered allmulticast mode [ 102.197932][ T5972] bridge_slave_0: entered promiscuous mode [ 102.206346][ T5972] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.214373][ T5972] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.221632][ T5972] bridge_slave_1: entered allmulticast mode [ 102.229188][ T5972] bridge_slave_1: entered promiscuous mode [ 102.268784][ T5972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.281078][ T5972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.325387][ T5972] team0: Port device team_slave_0 added [ 102.334340][ T5972] team0: Port device team_slave_1 added [ 102.372854][ T5972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.379782][ T5972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.405732][ T5972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.418917][ T5972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.425899][ T5972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.452319][ T5972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.509153][ T5972] hsr_slave_0: entered promiscuous mode [ 102.515797][ T5972] hsr_slave_1: entered promiscuous mode [ 102.523237][ T5972] debugfs: 'hsr0' already exists in 'hsr' [ 102.528993][ T5972] Cannot create hsr debugfs directory [ 103.845999][ T3593] bridge_slave_1: left allmulticast mode [ 103.852358][ T3593] bridge_slave_1: left promiscuous mode [ 103.858429][ T3593] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.870225][ T3593] bridge_slave_0: left allmulticast mode [ 103.876693][ T3593] bridge_slave_0: left promiscuous mode [ 103.883071][ T3593] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.962642][ T5181] Bluetooth: hci0: command tx timeout [ 104.094591][ T3593] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.105832][ T3593] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.116189][ T3593] bond0 (unregistering): Released all slaves [ 104.238703][ T3593] hsr_slave_0: left promiscuous mode [ 104.246522][ T3593] hsr_slave_1: left promiscuous mode [ 104.252953][ T3593] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.260340][ T3593] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.272855][ T3593] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.280225][ T3593] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.305871][ T3593] veth1_macvtap: left promiscuous mode [ 104.314744][ T3593] veth0_macvtap: left promiscuous mode [ 104.320616][ T3593] veth1_vlan: left promiscuous mode [ 104.326604][ T3593] veth0_vlan: left promiscuous mode [ 104.731757][ T3593] team0 (unregistering): Port device team_slave_1 removed [ 104.763951][ T3593] team0 (unregistering): Port device team_slave_0 removed [ 105.226249][ T5972] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.267126][ T5972] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.284863][ T5972] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.304406][ T5972] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.681835][ T5972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.728026][ T5972] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.763638][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.770802][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.800662][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.807796][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.036560][ T5972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.043573][ T5181] Bluetooth: hci0: command tx timeout [ 106.085386][ T5972] veth0_vlan: entered promiscuous mode [ 106.100109][ T5972] veth1_vlan: entered promiscuous mode [ 106.129705][ T5972] veth0_macvtap: entered promiscuous mode [ 106.139678][ T5972] veth1_macvtap: entered promiscuous mode [ 106.158601][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.175329][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.188855][ T3593] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.198151][ T3593] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.213582][ T3593] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.222694][ T3593] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.277198][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.292476][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.318827][ T1175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.327330][ T1175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.368271][ T6018] loop0: detected capacity change from 0 to 128 [ 106.375853][ T6018] ======================================================= [ 106.375853][ T6018] WARNING: The mand mount option has been deprecated and [ 106.375853][ T6018] and is ignored by this kernel. Remove the mand [ 106.375853][ T6018] option from the mount to silence this warning. [ 106.375853][ T6018] ======================================================= [ 106.415638][ T6018] hpfs: hpfs_map_sector(): read error [ 106.421617][ T6018] hpfs: filesystem error: can't load hotfix map; going on - but anything won't be destroyed because it's read-only [ 106.434745][ T6018] hpfs: filesystem error: improperly stopped [ 106.441000][ T6018] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 106.448802][ T6018] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 106.459568][ T6018] hpfs: You really don't want any checks? You are crazy... [ 106.466888][ T6018] hpfs: hpfs_map_sector(): read error [ 106.472356][ T6018] hpfs: code page support is disabled [ 106.479022][ T6018] ================================================================== [ 106.487062][ T6018] BUG: KASAN: use-after-free in strcmp+0x6f/0xc0 [ 106.493382][ T6018] Read of size 1 at addr ffff888066c708a6 by task syz.0.17/6018 [ 106.500997][ T6018] [ 106.503323][ T6018] CPU: 1 UID: 0 PID: 6018 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 106.503345][ T6018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 106.503356][ T6018] Call Trace: [ 106.503363][ T6018] [ 106.503370][ T6018] dump_stack_lvl+0x189/0x250 [ 106.503395][ T6018] ? srso_alias_return_thunk+0x5/0xfbef5 [ 106.503416][ T6018] ? srso_alias_return_thunk+0x5/0xfbef5 [ 106.503440][ T6018] ? __kasan_check_byte+0x12/0x40 [ 106.503467][ T6018] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.503486][ T6018] ? srso_alias_return_thunk+0x5/0xfbef5 [ 106.503506][ T6018] ? rcu_is_watching+0x15/0xb0 [ 106.503524][ T6018] ? srso_alias_return_thunk+0x5/0xfbef5 [ 106.503544][ T6018] ? lock_release+0x4b/0x3e0 [ 106.503572][ T6018] ? __virt_addr_valid+0x1c8/0x5c0 [ 106.503595][ T6018] ? srso_alias_return_thunk+0x5/0xfbef5 [ 106.503615][ T6018] ? __virt_addr_valid+0x4a5/0x5c0 [ 106.503639][ T6018] print_report+0xca/0x240 [ 106.503656][ T6018] ? strcmp+0x6f/0xc0 [ 106.503676][ T6018] kasan_report+0x118/0x150 [ 106.503702][ T6018] ? strcmp+0x6f/0xc0 [ 106.503725][ T6018] strcmp+0x6f/0xc0 [ 106.503746][ T6018] hpfs_get_ea+0x114/0xdb0 [ 106.503776][ T6018] ? __pfx_hpfs_get_ea+0x10/0x10 [ 106.503801][ T6018] ? srso_alias_return_thunk+0x5/0xfbef5 [ 106.503821][ T6018] ? bdev_getblk+0x80/0x660 [ 106.503837][ T6018] ? srso_alias_return_thunk+0x5/0xfbef5 [ 106.503863][ T6018] ? srso_alias_return_thunk+0x5/0xfbef5 [ 106.503883][ T6018] ? __bread_gfp+0xc3/0x3c0 [ 106.503901][ T6018] ? srso_alias_return_thunk+0x5/0xfbef5 [ 106.503921][ T6018] ? hpfs_map_sector+0x14f/0x380 [ 106.503944][ T6018] ? srso_alias_return_thunk+0x5/0xfbef5 [ 106.503964][ T6018] ? hpfs_map_fnode+0x27e/0x6a0 [ 106.503990][ T6018] ? set_normalized_timespec64+0xf0/0x1a0 [ 106.504015][ T6018] ? __lock_acquire+0xab9/0xd20 [ 106.504043][ T6018] hpfs_read_inode+0x19d/0x1010 [ 106.504072][ T6018] ? __pfx_hpfs_read_inode+0x10/0x10 [ 106.504097][ T6018] ? inode_set_ctime_to_ts+0x126/0x2f0 [ 106.504119][ T6018] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 106.504141][ T6018] ? do_raw_spin_unlock+0x122/0x240 [ 106.504164][ T6018] ? srso_alias_return_thunk+0x5/0xfbef5 [ 106.504185][ T6018] ? srso_alias_return_thunk+0x5/0xfbef5 [ 106.504205][ T6018] ? hpfs_init_inode+0x216/0x350 [ 106.504231][ T6018] hpfs_fill_super+0x129d/0x2040 [ 106.504260][ T6018] ? __pfx_hpfs_fill_super+0x10/0x10 [ 106.504279][ T6018] ? srso_alias_return_thunk+0x5/0xfbef5 [ 106.504299][ T6018] ? set_blocksize+0x21e/0x500 [ 106.504326][ T6018] ? srso_alias_return_thunk+0x5/0xfbef5 [ 106.504349][ T6018] ? srso_alias_return_thunk+0x5/0xfbef5 [ 106.504368][ T6018] ? sb_set_blocksize+0x104/0x180 [ 106.504386][ T6018] ? srso_alias_return_thunk+0x5/0xfbef5 [ 106.504405][ T6018] ? setup_bdev_super+0x4c1/0x5b0 [ 106.504435][ T6018] get_tree_bdev_flags+0x40e/0x4d0 [ 106.504459][ T6018] ? __pfx_hpfs_fill_super+0x10/0x10 [ 106.504477][ T6018] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 106.504502][ T6018] ? srso_alias_return_thunk+0x5/0xfbef5 [ 106.504524][ T6018] ? srso_alias_return_thunk+0x5/0xfbef5 [ 106.504546][ T6018] vfs_get_tree+0x92/0x2b0 [ 106.504571][ T6018] do_new_mount+0x2a2/0x9e0 [ 106.504599][ T6018] ? srso_alias_return_thunk+0x5/0xfbef5 [ 106.504620][ T6018] ? __pfx_do_new_mount+0x10/0x10 [ 106.504646][ T6018] ? srso_alias_return_thunk+0x5/0xfbef5 [ 106.504665][ T6018] ? path_mount+0x61c/0xfe0 [ 106.504690][ T6018] ? srso_alias_return_thunk+0x5/0xfbef5 [ 106.504715][ T6018] __se_sys_mount+0x317/0x410 [ 106.504745][ T6018] ? __pfx___se_sys_mount+0x10/0x10 [ 106.504771][ T6018] ? srso_alias_return_thunk+0x5/0xfbef5 [ 106.504794][ T6018] ? srso_alias_return_thunk+0x5/0xfbef5 [ 106.504814][ T6018] ? __x64_sys_mount+0x20/0xc0 [ 106.504842][ T6018] do_syscall_64+0xfa/0x3b0 [ 106.504861][ T6018] ? lockdep_hardirqs_on+0x9c/0x150 [ 106.504879][ T6018] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.504895][ T6018] ? srso_alias_return_thunk+0x5/0xfbef5 [ 106.504915][ T6018] ? exc_page_fault+0x9f/0xf0 [ 106.504933][ T6018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.504950][ T6018] RIP: 0033:0x7f079519066a [ 106.504965][ T6018] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.504979][ T6018] RSP: 002b:00007ffce26b83e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 106.504997][ T6018] RAX: ffffffffffffffda RBX: 00007ffce26b8470 RCX: 00007f079519066a [ 106.505010][ T6018] RDX: 000020000000a000 RSI: 0000200000000000 RDI: 00007ffce26b8430 [ 106.505023][ T6018] RBP: 000020000000a000 R08: 00007ffce26b8470 R09: 0000000003200041 [ 106.505035][ T6018] R10: 0000000003200041 R11: 0000000000000246 R12: 0000200000000000 [ 106.505046][ T6018] R13: 00007ffce26b8430 R14: 0000000000009e15 R15: 0000200000000040 [ 106.505066][ T6018] [ 106.505072][ T6018] [ 106.966387][ T6018] The buggy address belongs to the physical page: [ 106.972781][ T6018] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x6 pfn:0x66c70 [ 106.981530][ T6018] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 106.988632][ T6018] raw: 00fff00000000000 ffffea00019b1408 ffffea00019b1d48 0000000000000000 [ 106.997202][ T6018] raw: 0000000000000006 0000000000000000 00000000ffffffff 0000000000000000 [ 107.005768][ T6018] page dumped because: kasan: bad access detected [ 107.012166][ T6018] page_owner tracks the page as freed [ 107.017509][ T6018] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 6013, tgid 6013 (rm), ts 105776369938, free_ts 105791902051 [ 107.034528][ T6018] post_alloc_hook+0x240/0x2a0 [ 107.039304][ T6018] get_page_from_freelist+0x21e4/0x22c0 [ 107.044835][ T6018] __alloc_frozen_pages_noprof+0x181/0x370 [ 107.050625][ T6018] alloc_pages_mpol+0x232/0x4a0 [ 107.055471][ T6018] vma_alloc_folio_noprof+0xe4/0x200 [ 107.060748][ T6018] folio_prealloc+0x30/0x180 [ 107.065332][ T6018] do_wp_page+0x1231/0x5800 [ 107.069824][ T6018] __handle_mm_fault+0x1033/0x5440 [ 107.074925][ T6018] handle_mm_fault+0x40a/0x8e0 [ 107.079677][ T6018] do_user_addr_fault+0xa81/0x1390 [ 107.084782][ T6018] exc_page_fault+0x76/0xf0 [ 107.089271][ T6018] asm_exc_page_fault+0x26/0x30 [ 107.094106][ T6018] page last free pid 6013 tgid 6013 stack trace: [ 107.100409][ T6018] free_unref_folios+0xdbd/0x1520 [ 107.105435][ T6018] folios_put_refs+0x559/0x640 [ 107.110185][ T6018] free_pages_and_swap_cache+0x277/0x520 [ 107.115800][ T6018] tlb_flush_mmu+0x3a0/0x680 [ 107.120370][ T6018] tlb_finish_mmu+0xc3/0x1d0 [ 107.124947][ T6018] exit_mmap+0x44c/0xb50 [ 107.129182][ T6018] __mmput+0x118/0x430 [ 107.133233][ T6018] exit_mm+0x1da/0x2c0 [ 107.137312][ T6018] do_exit+0x648/0x2300 [ 107.141456][ T6018] do_group_exit+0x21c/0x2d0 [ 107.146036][ T6018] __x64_sys_exit_group+0x3f/0x40 [ 107.151062][ T6018] x64_sys_call+0x21f7/0x2200 [ 107.155729][ T6018] do_syscall_64+0xfa/0x3b0 [ 107.160217][ T6018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.166095][ T6018] [ 107.168401][ T6018] Memory state around the buggy address: [ 107.174015][ T6018] ffff888066c70780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 107.182056][ T6018] ffff888066c70800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 107.190098][ T6018] >ffff888066c70880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 107.198140][ T6018] ^ [ 107.203234][ T6018] ffff888066c70900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 107.211278][ T6018] ffff888066c70980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 107.219349][ T6018] ================================================================== [ 107.238213][ T6018] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 107.245415][ T6018] CPU: 0 UID: 0 PID: 6018 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 107.254523][ T6018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 107.264573][ T6018] Call Trace: [ 107.267845][ T6018] [ 107.270771][ T6018] dump_stack_lvl+0x99/0x250 [ 107.275371][ T6018] ? __asan_memcpy+0x40/0x70 [ 107.279966][ T6018] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.285167][ T6018] ? __pfx__printk+0x10/0x10 [ 107.289778][ T6018] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.295400][ T6018] vpanic+0x281/0x750 [ 107.299384][ T6018] ? __pfx_print_hex_dump+0x10/0x10 [ 107.304571][ T6018] ? __pfx_vpanic+0x10/0x10 [ 107.309059][ T6018] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.314673][ T6018] ? preempt_schedule_common+0x83/0xd0 [ 107.320120][ T6018] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.325745][ T6018] ? preempt_schedule+0xae/0xc0 [ 107.330604][ T6018] panic+0xb9/0xc0 [ 107.334322][ T6018] ? __pfx_panic+0x10/0x10 [ 107.338720][ T6018] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.344353][ T6018] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 107.350696][ T6018] ? strcmp+0x6f/0xc0 [ 107.354663][ T6018] check_panic_on_warn+0x89/0xb0 [ 107.359587][ T6018] ? strcmp+0x6f/0xc0 [ 107.363554][ T6018] end_report+0x78/0x160 [ 107.367788][ T6018] kasan_report+0x129/0x150 [ 107.372304][ T6018] ? strcmp+0x6f/0xc0 [ 107.376274][ T6018] strcmp+0x6f/0xc0 [ 107.380063][ T6018] hpfs_get_ea+0x114/0xdb0 [ 107.384474][ T6018] ? __pfx_hpfs_get_ea+0x10/0x10 [ 107.389400][ T6018] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.395018][ T6018] ? bdev_getblk+0x80/0x660 [ 107.399504][ T6018] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.405129][ T6018] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.410746][ T6018] ? __bread_gfp+0xc3/0x3c0 [ 107.415235][ T6018] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.420852][ T6018] ? hpfs_map_sector+0x14f/0x380 [ 107.425783][ T6018] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.431403][ T6018] ? hpfs_map_fnode+0x27e/0x6a0 [ 107.436246][ T6018] ? set_normalized_timespec64+0xf0/0x1a0 [ 107.441954][ T6018] ? __lock_acquire+0xab9/0xd20 [ 107.446799][ T6018] hpfs_read_inode+0x19d/0x1010 [ 107.451646][ T6018] ? __pfx_hpfs_read_inode+0x10/0x10 [ 107.456919][ T6018] ? inode_set_ctime_to_ts+0x126/0x2f0 [ 107.462359][ T6018] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 107.468153][ T6018] ? do_raw_spin_unlock+0x122/0x240 [ 107.473347][ T6018] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.478964][ T6018] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.484667][ T6018] ? hpfs_init_inode+0x216/0x350 [ 107.489600][ T6018] hpfs_fill_super+0x129d/0x2040 [ 107.494532][ T6018] ? __pfx_hpfs_fill_super+0x10/0x10 [ 107.499801][ T6018] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.505416][ T6018] ? set_blocksize+0x21e/0x500 [ 107.510174][ T6018] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.515795][ T6018] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.521409][ T6018] ? sb_set_blocksize+0x104/0x180 [ 107.526415][ T6018] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.532030][ T6018] ? setup_bdev_super+0x4c1/0x5b0 [ 107.537043][ T6018] get_tree_bdev_flags+0x40e/0x4d0 [ 107.542232][ T6018] ? __pfx_hpfs_fill_super+0x10/0x10 [ 107.547501][ T6018] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 107.553119][ T6018] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.558734][ T6018] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.564351][ T6018] vfs_get_tree+0x92/0x2b0 [ 107.568774][ T6018] do_new_mount+0x2a2/0x9e0 [ 107.573270][ T6018] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.578921][ T6018] ? __pfx_do_new_mount+0x10/0x10 [ 107.584377][ T6018] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.589999][ T6018] ? path_mount+0x61c/0xfe0 [ 107.594504][ T6018] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.600139][ T6018] __se_sys_mount+0x317/0x410 [ 107.604992][ T6018] ? __pfx___se_sys_mount+0x10/0x10 [ 107.610197][ T6018] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.615834][ T6018] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.621450][ T6018] ? __x64_sys_mount+0x20/0xc0 [ 107.626208][ T6018] do_syscall_64+0xfa/0x3b0 [ 107.630698][ T6018] ? lockdep_hardirqs_on+0x9c/0x150 [ 107.635878][ T6018] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.641923][ T6018] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.647539][ T6018] ? exc_page_fault+0x9f/0xf0 [ 107.652194][ T6018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.658071][ T6018] RIP: 0033:0x7f079519066a [ 107.662464][ T6018] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.682048][ T6018] RSP: 002b:00007ffce26b83e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 107.690454][ T6018] RAX: ffffffffffffffda RBX: 00007ffce26b8470 RCX: 00007f079519066a [ 107.698411][ T6018] RDX: 000020000000a000 RSI: 0000200000000000 RDI: 00007ffce26b8430 [ 107.706364][ T6018] RBP: 000020000000a000 R08: 00007ffce26b8470 R09: 0000000003200041 [ 107.714315][ T6018] R10: 0000000003200041 R11: 0000000000000246 R12: 0000200000000000 [ 107.722267][ T6018] R13: 00007ffce26b8430 R14: 0000000000009e15 R15: 0000200000000040 [ 107.730225][ T6018] [ 107.733334][ T6018] Kernel Offset: disabled [ 107.737635][ T6018] Rebooting in 86400 seconds..