Warning: Permanently added '[localhost]:2046' (ED25519) to the list of known hosts.
2025/12/26 03:16:38 parsed 1 programs
[ 135.849314][ T5624] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 140.396156][ T5641] chnl_net:caif_netlink_parms(): no params data found
[ 140.519885][ T5641] bridge0: port 1(bridge_slave_0) entered blocking state
[ 140.522874][ T5641] bridge0: port 1(bridge_slave_0) entered disabled state
[ 140.525854][ T5641] bridge_slave_0: entered allmulticast mode
[ 140.538621][ T5641] bridge_slave_0: entered promiscuous mode
[ 140.542959][ T5641] bridge0: port 2(bridge_slave_1) entered blocking state
[ 140.546218][ T5641] bridge0: port 2(bridge_slave_1) entered disabled state
[ 140.556271][ T5641] bridge_slave_1: entered allmulticast mode
[ 140.560516][ T5641] bridge_slave_1: entered promiscuous mode
[ 140.582076][ T5641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 140.588824][ T5641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 140.609140][ T5641] team0: Port device team_slave_0 added
[ 140.614922][ T5641] team0: Port device team_slave_1 added
[ 140.637459][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 140.641764][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 140.653363][ T5641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 140.659849][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 140.662912][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 140.674665][ T5641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 140.709887][ T5641] hsr_slave_0: entered promiscuous mode
[ 140.713208][ T5641] hsr_slave_1: entered promiscuous mode
[ 141.182709][ T5641] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 141.195432][ T5641] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 141.209731][ T5641] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 141.221503][ T5641] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 141.279665][ T5641] bridge0: port 2(bridge_slave_1) entered blocking state
[ 141.282918][ T5641] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 141.286544][ T5641] bridge0: port 1(bridge_slave_0) entered blocking state
[ 141.289904][ T5641] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 141.394876][ T5641] 8021q: adding VLAN 0 to HW filter on device bond0
[ 141.407106][ T954] bridge0: port 1(bridge_slave_0) entered disabled state
[ 141.413113][ T954] bridge0: port 2(bridge_slave_1) entered disabled state
[ 141.444048][ T5641] 8021q: adding VLAN 0 to HW filter on device team0
[ 141.469418][ T1125] bridge0: port 1(bridge_slave_0) entered blocking state
[ 141.472522][ T1125] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 141.492334][ T1125] bridge0: port 2(bridge_slave_1) entered blocking state
[ 141.495517][ T1125] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 141.830049][ T5641] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 141.895894][ T5641] veth0_vlan: entered promiscuous mode
[ 141.914794][ T5641] veth1_vlan: entered promiscuous mode
[ 141.980067][ T5641] veth0_macvtap: entered promiscuous mode
[ 141.985691][ T5641] veth1_macvtap: entered promiscuous mode
[ 142.034699][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 142.060579][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 142.076852][ T1125] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 142.098575][ T1125] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 142.115010][ T1125] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 142.141227][ T1125] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 142.397879][ T954] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 142.494288][ T954] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 142.549613][ T954] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 142.632237][ T954] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 143.016994][ T4681] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 143.021328][ T4681] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 143.024804][ T4681] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 143.028421][ T4681] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 143.031526][ T4681] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 143.082576][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[ 143.085653][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[ 143.684221][ T3496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 143.698067][ T3496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 143.778964][ T1125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 143.783231][ T1125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 144.519263][ T954] bridge_slave_1: left allmulticast mode
[ 144.521779][ T954] bridge_slave_1: left promiscuous mode
[ 144.524574][ T954] bridge0: port 2(bridge_slave_1) entered disabled state
[ 144.558446][ T954] bridge_slave_0: left allmulticast mode
[ 144.560891][ T954] bridge_slave_0: left promiscuous mode
[ 144.563452][ T954] bridge0: port 1(bridge_slave_0) entered disabled state
[ 145.220448][ T954] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 145.226352][ T954] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 145.242176][ T954] bond0 (unregistering): Released all slaves
[ 145.418009][ T954] hsr_slave_0: left promiscuous mode
[ 145.453571][ T954] hsr_slave_1: left promiscuous mode
[ 145.456427][ T954] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 145.464073][ T954] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 145.504115][ T954] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 145.509034][ T954] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 145.561548][ T954] veth1_macvtap: left promiscuous mode
[ 145.563548][ T954] veth0_macvtap: left promiscuous mode
[ 145.566018][ T954] veth1_vlan: left promiscuous mode
[ 145.582958][ T954] veth0_vlan: left promiscuous mode
[ 146.751821][ T954] team0 (unregistering): Port device team_slave_1 removed
[ 146.784655][ T954] team0 (unregistering): Port device team_slave_0 removed
2025/12/26 03:16:58 executed programs: 0
[ 151.085943][ T46] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 151.093997][ T46] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 151.098314][ T46] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 151.103028][ T46] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 151.106628][ T46] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 151.299746][ T5819] chnl_net:caif_netlink_parms(): no params data found
[ 151.356854][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state
[ 151.360274][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state
[ 151.363463][ T5819] bridge_slave_0: entered allmulticast mode
[ 151.367290][ T5819] bridge_slave_0: entered promiscuous mode
[ 151.372641][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state
[ 151.375790][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state
[ 151.379627][ T5819] bridge_slave_1: entered allmulticast mode
[ 151.383621][ T5819] bridge_slave_1: entered promiscuous mode
[ 151.405667][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 151.411647][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 151.432702][ T5819] team0: Port device team_slave_0 added
[ 151.438010][ T5819] team0: Port device team_slave_1 added
[ 151.456686][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 151.460672][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 151.472598][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 151.482495][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 151.485952][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 151.497260][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 151.526415][ T5819] hsr_slave_0: entered promiscuous mode
[ 151.530199][ T5819] hsr_slave_1: entered promiscuous mode
[ 151.986067][ T5819] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 152.001735][ T5819] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 152.018860][ T5819] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 152.033161][ T5819] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 152.088056][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state
[ 152.091294][ T5819] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 152.094937][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state
[ 152.097913][ T5819] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 152.202525][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0
[ 152.223967][ T954] bridge0: port 1(bridge_slave_0) entered disabled state
[ 152.229037][ T954] bridge0: port 2(bridge_slave_1) entered disabled state
[ 152.250551][ T5819] 8021q: adding VLAN 0 to HW filter on device team0
[ 152.271346][ T3613] bridge0: port 1(bridge_slave_0) entered blocking state
[ 152.274454][ T3613] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 152.292492][ T3613] bridge0: port 2(bridge_slave_1) entered blocking state
[ 152.296981][ T3613] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 152.661469][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 152.716994][ T5819] veth0_vlan: entered promiscuous mode
[ 152.741534][ T5819] veth1_vlan: entered promiscuous mode
[ 152.785470][ T5819] veth0_macvtap: entered promiscuous mode
[ 152.801688][ T5819] veth1_macvtap: entered promiscuous mode
[ 152.831602][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 152.850555][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 152.857905][ T1125] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 152.861824][ T1125] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 152.865758][ T1125] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 152.892545][ T1125] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 152.985178][ T1125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 153.007126][ T1125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 153.058648][ T1125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 153.063162][ T1125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 153.159440][ T46] Bluetooth: hci0: command tx timeout
[ 153.573497][ T5864] loop0: detected capacity change from 0 to 32768
[ 153.594676][ T5864] =======================================================
[ 153.594676][ T5864] WARNING: The mand mount option has been deprecated and
[ 153.594676][ T5864] and is ignored by this kernel. Remove the mand
[ 153.594676][ T5864] option from the mount to silence this warning.
[ 153.594676][ T5864] =======================================================
[ 153.755504][ T5864] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 153.882227][ T5864] ==================================================================
[ 153.885332][ T5864] BUG: KASAN: slab-out-of-bounds in crc32c+0xcd/0x480
[ 153.888402][ T5864] Read of size 8 at addr ffff888040ecca00 by task syz.0.17/5864
[ 153.892378][ T5864]
[ 153.893359][ T5864] CPU: 0 UID: 0 PID: 5864 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 153.893376][ T5864] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 153.893382][ T5864] Call Trace:
[ 153.893389][ T5864]
[ 153.893394][ T5864] dump_stack_lvl+0xe8/0x150
[ 153.893411][ T5864] print_report+0xca/0x240
[ 153.893421][ T5864] ? crc32c+0xcd/0x480
[ 153.893437][ T5864] kasan_report+0x118/0x150
[ 153.893449][ T5864] ? crc32c+0xcd/0x480
[ 153.893466][ T5864] crc32c+0xcd/0x480
[ 153.893480][ T5864] ? xlog_cksum+0x6a/0x100
[ 153.893495][ T5864] xlog_cksum+0x93/0x100
[ 153.893514][ T5864] xlog_recover_process+0x90/0x2f0
[ 153.893528][ T5864] xlog_do_recovery_pass+0x9cd/0xc30
[ 153.893546][ T5864] ? __pfx_xlog_do_recovery_pass+0x10/0x10
[ 153.893561][ T5864] ? kfree+0x1c0/0x660
[ 153.893574][ T5864] xlog_verify_head+0x136/0x440
[ 153.893591][ T5864] xlog_find_tail+0x5ca/0x840
[ 153.893604][ T5864] xlog_recover+0x4b/0x3e0
[ 153.893615][ T5864] xfs_log_mount+0x253/0x3e0
[ 153.893631][ T5864] xfs_mountfs+0xe5e/0x22c0
[ 153.893646][ T5864] ? __pfx_xfs_mountfs+0x10/0x10
[ 153.893657][ T5864] ? trace_xfs_inode_timestamp_range+0x84/0x1e0
[ 153.893668][ T5864] xfs_fs_fill_super+0x11f1/0x1640
[ 153.893681][ T5864] get_tree_bdev_flags+0x40e/0x4d0
[ 153.893695][ T5864] ? __pfx_xfs_fs_fill_super+0x10/0x10
[ 153.893704][ T5864] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 153.893719][ T5864] vfs_get_tree+0x92/0x2a0
[ 153.893733][ T5864] do_new_mount+0x302/0xa10
[ 153.893745][ T5864] ? __pfx_do_new_mount+0x10/0x10
[ 153.893756][ T5864] ? kmem_cache_free+0x197/0x620
[ 153.893771][ T5864] __se_sys_mount+0x313/0x410
[ 153.893781][ T5864] ? __pfx___se_sys_mount+0x10/0x10
[ 153.893788][ T5864] ? __x64_sys_mount+0x20/0xc0
[ 153.893795][ T5864] do_syscall_64+0xec/0xf80
[ 153.893844][ T5864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 153.893851][ T5864] ? trace_irq_disable+0x37/0x100
[ 153.893859][ T5864] ? clear_bhb_loop+0x60/0xb0
[ 153.893866][ T5864] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 153.893873][ T5864] RIP: 0033:0x7f29ba19034a
[ 153.893881][ T5864] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 153.893887][ T5864] RSP: 002b:00007f29baf85e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 153.893896][ T5864] RAX: ffffffffffffffda RBX: 00007f29baf85ef0 RCX: 00007f29ba19034a
[ 153.893900][ T5864] RDX: 0000200000000500 RSI: 0000200000000200 RDI: 00007f29baf85eb0
[ 153.893905][ T5864] RBP: 0000200000000500 R08: 00007f29baf85ef0 R09: 0000000002218a5d
[ 153.893909][ T5864] R10: 0000000002218a5d R11: 0000000000000246 R12: 0000200000000200
[ 153.893913][ T5864] R13: 00007f29baf85eb0 R14: 00000000000096bf R15: 0000200000000380
[ 153.893920][ T5864]
[ 153.893923][ T5864]
[ 154.015373][ T5864] Allocated by task 5864:
[ 154.017219][ T5864] kasan_save_track+0x3e/0x80
[ 154.019228][ T5864] __kasan_kmalloc+0x93/0xb0
[ 154.021272][ T5864] __kvmalloc_node_noprof+0x5d5/0x920
[ 154.023596][ T5864] xlog_do_recovery_pass+0x106/0xc30
[ 154.025903][ T5864] xlog_verify_head+0x136/0x440
[ 154.027713][ T5864] xlog_find_tail+0x5ca/0x840
[ 154.029747][ T5864] xlog_recover+0x4b/0x3e0
[ 154.031673][ T5864] xfs_log_mount+0x253/0x3e0
[ 154.033691][ T5864] xfs_mountfs+0xe5e/0x22c0
[ 154.035512][ T5864] xfs_fs_fill_super+0x11f1/0x1640
[ 154.037541][ T5864] get_tree_bdev_flags+0x40e/0x4d0
[ 154.039796][ T5864] vfs_get_tree+0x92/0x2a0
[ 154.041908][ T5864] do_new_mount+0x302/0xa10
[ 154.043953][ T5864] __se_sys_mount+0x313/0x410
[ 154.046057][ T5864] do_syscall_64+0xec/0xf80
[ 154.048083][ T5864] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 154.050704][ T5864]
[ 154.051711][ T5864] The buggy address belongs to the object at ffff888040ecc800
[ 154.051711][ T5864] which belongs to the cache kmalloc-512 of size 512
[ 154.057143][ T5864] The buggy address is located 0 bytes to the right of
[ 154.057143][ T5864] allocated 512-byte region [ffff888040ecc800, ffff888040ecca00)
[ 154.063008][ T5864]
[ 154.063964][ T5864] The buggy address belongs to the physical page:
[ 154.066699][ T5864] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x40ecc
[ 154.070281][ T5864] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 154.073895][ T5864] anon flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff)
[ 154.077216][ T5864] page_type: f5(slab)
[ 154.078802][ T5864] raw: 04fff00000000040 ffff88801a441c80 0000000000000000 0000000000000001
[ 154.082151][ T5864] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000
[ 154.085921][ T5864] head: 04fff00000000040 ffff88801a441c80 0000000000000000 0000000000000001
[ 154.089837][ T5864] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000
[ 154.093621][ T5864] head: 04fff00000000001 ffffea000103b301 00000000ffffffff 00000000ffffffff
[ 154.097502][ T5864] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[ 154.101009][ T5864] page dumped because: kasan: bad access detected
[ 154.103584][ T5864] page_owner tracks the page as allocated
[ 154.106184][ T5864] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5819, tgid 5819 (syz-executor), ts 152366932018, free_ts 150865041929
[ 154.115407][ T5864] post_alloc_hook+0x234/0x290
[ 154.117544][ T5864] get_page_from_freelist+0x24e0/0x2580
[ 154.119972][ T5864] __alloc_frozen_pages_noprof+0x181/0x370
[ 154.122622][ T5864] alloc_pages_mpol+0x232/0x4a0
[ 154.125013][ T5864] allocate_slab+0x86/0x3b0
[ 154.127038][ T5864] ___slab_alloc+0xe53/0x1820
[ 154.129102][ T5864] __slab_alloc+0x65/0x100
[ 154.131103][ T5864] __kmalloc_noprof+0x47d/0x800
[ 154.133299][ T5864] fib6_info_alloc+0x30/0xf0
[ 154.135230][ T5864] ip6_route_info_create+0x142/0x860
[ 154.137394][ T5864] ip6_route_add+0x49/0x1b0
[ 154.139330][ T5864] addrconf_add_dev+0x23f/0x320
[ 154.141366][ T5864] inet6_addr_add+0x182/0xce0
[ 154.143469][ T5864] inet6_rtm_newaddr+0x93d/0xd20
[ 154.145752][ T5864] rtnetlink_rcv_msg+0x7cf/0xb70
[ 154.147932][ T5864] netlink_rcv_skb+0x208/0x470
[ 154.149969][ T5864] page last free pid 5816 tgid 5816 stack trace:
[ 154.152768][ T5864] __free_frozen_pages+0xbc8/0xd30
[ 154.155135][ T5864] __slab_free+0x2ce/0x320
[ 154.157023][ T5864] qlist_free_all+0x97/0x100
[ 154.159102][ T5864] kasan_quarantine_reduce+0x148/0x160
[ 154.161250][ T5864] __kasan_slab_alloc+0x22/0x80
[ 154.163359][ T5864] kmem_cache_alloc_noprof+0x37d/0x710
[ 154.165785][ T5864] getname_flags+0xb8/0x540
[ 154.167741][ T5864] vfs_fstatat+0x43/0x170
[ 154.169634][ T5864] __x64_sys_newfstatat+0x116/0x190
[ 154.171888][ T5864] do_syscall_64+0xec/0xf80
[ 154.173766][ T5864] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 154.176183][ T5864]
[ 154.177443][ T5864] Memory state around the buggy address:
[ 154.179966][ T5864] ffff888040ecc900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 154.183491][ T5864] ffff888040ecc980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 154.187026][ T5864] >ffff888040ecca00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 154.190200][ T5864] ^
[ 154.191856][ T5864] ffff888040ecca80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 154.195064][ T5864] ffff888040eccb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 154.198295][ T5864] ==================================================================
[ 154.380553][ T5864] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 154.383719][ T5864] CPU: 0 UID: 0 PID: 5864 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 154.387520][ T5864] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 154.391894][ T5864] Call Trace:
[ 154.393421][ T5864]
[ 154.394789][ T5864] vpanic+0x1e0/0x670
[ 154.396832][ T5864] panic+0xb9/0xc0
[ 154.398921][ T5864] ? __pfx_panic+0x10/0x10
[ 154.401358][ T5864] ? preempt_schedule_thunk+0x16/0x30
[ 154.404190][ T5864] ? crc32c+0xcd/0x480
[ 154.406073][ T5864] ? preempt_schedule_thunk+0x16/0x30
[ 154.408400][ T5864] ? crc32c+0xcd/0x480
[ 154.410213][ T5864] check_panic_on_warn+0x89/0xb0
[ 154.412364][ T5864] ? crc32c+0xcd/0x480
[ 154.414055][ T5864] end_report+0x6f/0x140
[ 154.415786][ T5864] kasan_report+0x129/0x150
[ 154.418027][ T5864] ? crc32c+0xcd/0x480
[ 154.420218][ T5864] crc32c+0xcd/0x480
[ 154.422146][ T5864] ? xlog_cksum+0x6a/0x100
[ 154.424130][ T5864] xlog_cksum+0x93/0x100
[ 154.426026][ T5864] xlog_recover_process+0x90/0x2f0
[ 154.428313][ T5864] xlog_do_recovery_pass+0x9cd/0xc30
[ 154.430637][ T5864] ? __pfx_xlog_do_recovery_pass+0x10/0x10
[ 154.433038][ T5864] ? kfree+0x1c0/0x660
[ 154.434883][ T5864] xlog_verify_head+0x136/0x440
[ 154.436856][ T5864] xlog_find_tail+0x5ca/0x840
[ 154.438861][ T5864] xlog_recover+0x4b/0x3e0
[ 154.440724][ T5864] xfs_log_mount+0x253/0x3e0
[ 154.442729][ T5864] xfs_mountfs+0xe5e/0x22c0
[ 154.444467][ T5864] ? __pfx_xfs_mountfs+0x10/0x10
[ 154.446487][ T5864] ? trace_xfs_inode_timestamp_range+0x84/0x1e0
[ 154.449205][ T5864] xfs_fs_fill_super+0x11f1/0x1640
[ 154.451108][ T5864] get_tree_bdev_flags+0x40e/0x4d0
[ 154.453227][ T5864] ? __pfx_xfs_fs_fill_super+0x10/0x10
[ 154.455436][ T5864] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 154.457851][ T5864] vfs_get_tree+0x92/0x2a0
[ 154.459807][ T5864] do_new_mount+0x302/0xa10
[ 154.461856][ T5864] ? __pfx_do_new_mount+0x10/0x10
[ 154.464080][ T5864] ? kmem_cache_free+0x197/0x620
[ 154.466271][ T5864] __se_sys_mount+0x313/0x410
[ 154.468280][ T5864] ? __pfx___se_sys_mount+0x10/0x10
[ 154.470534][ T5864] ? __x64_sys_mount+0x20/0xc0
[ 154.472556][ T5864] do_syscall_64+0xec/0xf80
[ 154.474479][ T5864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 154.477020][ T5864] ? trace_irq_disable+0x37/0x100
[ 154.479215][ T5864] ? clear_bhb_loop+0x60/0xb0
[ 154.481328][ T5864] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 154.483881][ T5864] RIP: 0033:0x7f29ba19034a
[ 154.485950][ T5864] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 154.494124][ T5864] RSP: 002b:00007f29baf85e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 154.497779][ T5864] RAX: ffffffffffffffda RBX: 00007f29baf85ef0 RCX: 00007f29ba19034a
[ 154.501160][ T5864] RDX: 0000200000000500 RSI: 0000200000000200 RDI: 00007f29baf85eb0
[ 154.504641][ T5864] RBP: 0000200000000500 R08: 00007f29baf85ef0 R09: 0000000002218a5d
[ 154.508046][ T5864] R10: 0000000002218a5d R11: 0000000000000246 R12: 0000200000000200
[ 154.511417][ T5864] R13: 00007f29baf85eb0 R14: 00000000000096bf R15: 0000200000000380
[ 154.514836][ T5864]
[ 154.516534][ T5864] Kernel Offset: disabled
[ 154.518419][ T5864] Rebooting in 86400 seconds..