Warning: Permanently added '10.128.0.117' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 33.761894][ T5971] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5971 'syz-executor293' [ 34.064455][ T5971] loop0: detected capacity change from 0 to 65536 [ 34.072246][ T5971] XFS (loop0): Deprecated V4 format (crc=0) will not be supported after September 2030. [ 34.075042][ T5971] XFS (loop0): Mounting V4 Filesystem acfebfcd-0806-4e27-9777-0ac4ff5ddf54 [ 34.078137][ T5971] XFS (loop0): Log size 756 blocks too small, minimum size is 2220 blocks [ 34.079934][ T5971] XFS (loop0): Log size out of supported range. [ 34.081160][ T5971] XFS (loop0): Continuing onwards, but if log hangs are experienced then please report this message in the bug report. [ 34.090304][ T5971] XFS (loop0): Torn write (CRC failure) detected at log block 0x10. Truncating head block from 0x20. [ 34.103194][ T5971] XFS (loop0): Ending clean mount [ 34.128520][ T5971] XFS (loop0): Unmounting Filesystem acfebfcd-0806-4e27-9777-0ac4ff5ddf54 [ 34.132370][ T5971] ================================================================== [ 34.134088][ T5971] BUG: KASAN: slab-out-of-bounds in xlog_pack_data+0x2c8/0x444 [ 34.135610][ T5971] Read of size 4 at addr ffff0000df8e4e00 by task syz-executor293/5971 [ 34.137234][ T5971] [ 34.137716][ T5971] CPU: 0 PID: 5971 Comm: syz-executor293 Not tainted 6.4.0-rc5-syzkaller-g4641cff8e810 #0 [ 34.139834][ T5971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 34.141957][ T5971] Call trace: [ 34.142626][ T5971] dump_backtrace+0x1b8/0x1e4 [ 34.143612][ T5971] show_stack+0x2c/0x44 [ 34.144513][ T5971] dump_stack_lvl+0xd0/0x124 [ 34.145480][ T5971] print_report+0x174/0x514 [ 34.146521][ T5971] kasan_report+0xd4/0x130 [ 34.147431][ T5971] __asan_report_load4_noabort+0x20/0x2c [ 34.148728][ T5971] xlog_pack_data+0x2c8/0x444 [ 34.149614][ T5971] xlog_sync+0x36c/0x10f4 [ 34.150516][ T5971] xlog_state_release_iclog+0x460/0x934 [ 34.151724][ T5971] xlog_force_lsn+0x5ec/0x76c [ 34.152712][ T5971] xfs_log_force_seq+0x278/0x76c [ 34.153772][ T5971] __xfs_trans_commit+0x9e0/0xff4 [ 34.154836][ T5971] xfs_trans_commit+0x24/0x34 [ 34.155910][ T5971] xfs_sync_sb+0x144/0x1ac [ 34.156828][ T5971] xfs_log_quiesce+0x57c/0x844 [ 34.157838][ T5971] xfs_log_clean+0xb0/0xd50 [ 34.158790][ T5971] xfs_log_unmount+0x38/0x1a4 [ 34.159729][ T5971] xfs_unmountfs+0x1c4/0x268 [ 34.160680][ T5971] xfs_fs_put_super+0x7c/0x264 [ 34.161669][ T5971] generic_shutdown_super+0x130/0x328 [ 34.162795][ T5971] kill_block_super+0x70/0xdc [ 34.163816][ T5971] deactivate_locked_super+0xac/0x124 [ 34.164984][ T5971] deactivate_super+0xe0/0x100 [ 34.165950][ T5971] cleanup_mnt+0x34c/0x3dc [ 34.166891][ T5971] __cleanup_mnt+0x20/0x30 [ 34.167868][ T5971] task_work_run+0x230/0x2e0 [ 34.168818][ T5971] do_exit+0x63c/0x1f58 [ 34.169702][ T5971] do_group_exit+0x194/0x22c [ 34.170664][ T5971] __wake_up_parent+0x0/0x60 [ 34.171685][ T5971] invoke_syscall+0x98/0x2c0 [ 34.172765][ T5971] el0_svc_common+0x138/0x244 [ 34.173796][ T5971] do_el0_svc+0x64/0x198 [ 34.174734][ T5971] el0_svc+0x4c/0x160 [ 34.175552][ T5971] el0t_64_sync_handler+0x84/0xfc [ 34.176702][ T5971] el0t_64_sync+0x190/0x194 [ 34.177674][ T5971] [ 34.178164][ T5971] The buggy address belongs to the physical page: [ 34.179527][ T5971] page:0000000095bf08c2 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11f8c0 [ 34.181838][ T5971] head:0000000095bf08c2 order:6 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 34.183748][ T5971] flags: 0x5ffc00000010000(head|node=0|zone=2|lastcpupid=0x7ff) [ 34.185412][ T5971] page_type: 0xffffffff() [ 34.186316][ T5971] raw: 05ffc00000010000 0000000000000000 dead000000000122 0000000000000000 [ 34.188034][ T5971] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 34.189925][ T5971] page dumped because: kasan: bad access detected [ 34.191269][ T5971] [ 34.191739][ T5971] Memory state around the buggy address: [ 34.192819][ T5971] ffff0000df8e4d00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 34.194562][ T5971] ffff0000df8e4d80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 34.196156][ T5971] >ffff0000df8e4e00: 01 fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 34.197848][ T5971] ^ [ 34.198672][ T5971] ffff0000df8e4e80: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 34.200354][ T5971] ffff0000df8e4f00: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 34.202054][ T5971] ================================================================== [ 34.204232][ T5971] Disabling lock debugging due to kernel taint