Warning: Permanently added '[localhost]:10621' (ED25519) to the list of known hosts. 2025/10/07 19:37:36 parsed 1 programs [ 132.245642][ T5557] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 137.942177][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.945061][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.086766][ T5577] chnl_net:caif_netlink_parms(): no params data found [ 138.203739][ T5577] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.217911][ T5577] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.221304][ T5577] bridge_slave_0: entered allmulticast mode [ 138.229056][ T5577] bridge_slave_0: entered promiscuous mode [ 138.249335][ T5577] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.253160][ T5577] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.256361][ T5577] bridge_slave_1: entered allmulticast mode [ 138.269299][ T5577] bridge_slave_1: entered promiscuous mode [ 138.311521][ T5577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.317665][ T5577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.371051][ T5577] team0: Port device team_slave_0 added [ 138.375269][ T5577] team0: Port device team_slave_1 added [ 138.416236][ T5577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.427861][ T5577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.448950][ T5577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.468372][ T5577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.471781][ T5577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.488884][ T5577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.553891][ T5577] hsr_slave_0: entered promiscuous mode [ 138.568165][ T5577] hsr_slave_1: entered promiscuous mode [ 139.109631][ T5577] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 139.130878][ T5577] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 139.148623][ T5577] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 139.170119][ T5577] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 139.374989][ T5577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.405007][ T5577] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.423618][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.426853][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.453897][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.457144][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.522072][ T5577] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 139.826959][ T5577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.901718][ T5577] veth0_vlan: entered promiscuous mode [ 139.912910][ T5577] veth1_vlan: entered promiscuous mode [ 139.969929][ T5577] veth0_macvtap: entered promiscuous mode [ 139.981758][ T5577] veth1_macvtap: entered promiscuous mode [ 140.005351][ T5577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.025366][ T5577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.049810][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.062147][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.079203][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.083179][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.316278][ T5356] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 140.321724][ T5356] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 140.325617][ T5356] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 140.329577][ T31] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.344843][ T5356] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 140.349825][ T5356] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 140.451863][ T31] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.530339][ T31] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.613018][ T31] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.056975][ T31] bridge_slave_1: left allmulticast mode [ 142.062743][ T31] bridge_slave_1: left promiscuous mode [ 142.085950][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.100194][ T31] bridge_slave_0: left allmulticast mode [ 142.102695][ T31] bridge_slave_0: left promiscuous mode [ 142.105342][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.249656][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.270572][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.279133][ T31] bond0 (unregistering): Released all slaves [ 143.463134][ T31] hsr_slave_0: left promiscuous mode [ 143.472518][ T31] hsr_slave_1: left promiscuous mode [ 143.479877][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.483116][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.514118][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.517418][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.561879][ T31] veth1_macvtap: left promiscuous mode [ 143.564424][ T31] veth0_macvtap: left promiscuous mode [ 143.566909][ T31] veth1_vlan: left promiscuous mode [ 143.598245][ T31] veth0_vlan: left promiscuous mode [ 144.519492][ T31] team0 (unregistering): Port device team_slave_1 removed [ 144.600940][ T31] team0 (unregistering): Port device team_slave_0 removed [ 147.139920][ T1040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.143308][ T1040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.205902][ T1040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.214681][ T1040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/10/07 19:37:57 executed programs: 0 [ 148.851376][ T4666] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 148.855456][ T4666] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 148.861137][ T4666] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 148.864993][ T4666] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 148.868905][ T4666] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 149.084872][ T5754] chnl_net:caif_netlink_parms(): no params data found [ 149.154254][ T5754] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.160223][ T5754] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.163481][ T5754] bridge_slave_0: entered allmulticast mode [ 149.167292][ T5754] bridge_slave_0: entered promiscuous mode [ 149.173335][ T5754] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.176686][ T5754] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.180969][ T5754] bridge_slave_1: entered allmulticast mode [ 149.184911][ T5754] bridge_slave_1: entered promiscuous mode [ 149.208244][ T5754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.214591][ T5754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.236833][ T5754] team0: Port device team_slave_0 added [ 149.242404][ T5754] team0: Port device team_slave_1 added [ 149.262829][ T5754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.265926][ T5754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.277615][ T5754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.284074][ T5754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.287056][ T5754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.301908][ T5754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.336656][ T5754] hsr_slave_0: entered promiscuous mode [ 149.340249][ T5754] hsr_slave_1: entered promiscuous mode [ 149.794606][ T5754] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 149.819697][ T5754] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 149.830478][ T5754] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 149.841093][ T5754] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 149.990616][ T5754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.020057][ T5754] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.037620][ T1040] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.040861][ T1040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.064053][ T1040] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.067283][ T1040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.126453][ T5754] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 150.138983][ T5754] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 150.439327][ T5754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.510299][ T5754] veth0_vlan: entered promiscuous mode [ 150.517078][ T5754] veth1_vlan: entered promiscuous mode [ 150.571241][ T5754] veth0_macvtap: entered promiscuous mode [ 150.591021][ T5754] veth1_macvtap: entered promiscuous mode [ 150.613728][ T5754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.632481][ T5754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.661233][ T1040] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.670366][ T1040] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.673816][ T1040] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.677203][ T1040] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.789318][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.792844][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.859362][ T1040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.863024][ T1040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.898505][ T5356] Bluetooth: hci0: command tx timeout [ 151.376364][ T5798] loop0: detected capacity change from 0 to 32768 [ 151.410303][ T5798] ======================================================= [ 151.410303][ T5798] WARNING: The mand mount option has been deprecated and [ 151.410303][ T5798] and is ignored by this kernel. Remove the mand [ 151.410303][ T5798] option from the mount to silence this warning. [ 151.410303][ T5798] ======================================================= [ 151.505927][ T5798] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 151.642520][ T5798] ================================================================== [ 151.646101][ T5798] BUG: KASAN: slab-out-of-bounds in crc32c+0xcd/0x480 [ 151.649189][ T5798] Read of size 8 at addr ffff888000c88a00 by task syz.0.17/5798 [ 151.653771][ T5798] [ 151.654861][ T5798] CPU: 0 UID: 0 PID: 5798 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 151.654876][ T5798] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 151.654884][ T5798] Call Trace: [ 151.654894][ T5798] [ 151.654900][ T5798] dump_stack_lvl+0x189/0x250 [ 151.654920][ T5798] ? __virt_addr_valid+0x1c8/0x5c0 [ 151.654937][ T5798] ? rcu_is_watching+0x15/0xb0 [ 151.654950][ T5798] ? __kasan_check_byte+0x12/0x40 [ 151.654966][ T5798] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.654975][ T5798] ? rcu_is_watching+0x15/0xb0 [ 151.654986][ T5798] ? lock_release+0x4b/0x3e0 [ 151.654998][ T5798] ? __virt_addr_valid+0x1c8/0x5c0 [ 151.655012][ T5798] ? __virt_addr_valid+0x4a5/0x5c0 [ 151.655025][ T5798] print_report+0xca/0x240 [ 151.655039][ T5798] ? crc32c+0xcd/0x480 [ 151.655053][ T5798] kasan_report+0x118/0x150 [ 151.655067][ T5798] ? crc32c+0xcd/0x480 [ 151.655081][ T5798] crc32c+0xcd/0x480 [ 151.655093][ T5798] ? xlog_cksum+0x6a/0xf0 [ 151.655107][ T5798] xlog_cksum+0x91/0xf0 [ 151.655120][ T5798] xlog_recover_process+0x90/0x2f0 [ 151.655134][ T5798] xlog_do_recovery_pass+0x9cd/0xc30 [ 151.655148][ T5798] ? __pfx_xlog_do_recovery_pass+0x10/0x10 [ 151.655160][ T5798] ? kfree+0x19a/0x6d0 [ 151.655172][ T5798] xlog_verify_head+0x136/0x440 [ 151.655184][ T5798] xlog_find_tail+0x5ca/0x840 [ 151.655204][ T5798] xlog_recover+0x4b/0x3e0 [ 151.655220][ T5798] xfs_log_mount+0x253/0x3e0 [ 151.655233][ T5798] xfs_mountfs+0xe5e/0x22c0 [ 151.655253][ T5798] ? __pfx_xfs_mountfs+0x10/0x10 [ 151.655268][ T5798] ? trace_xfs_inode_timestamp_range+0x84/0x200 [ 151.655284][ T5798] xfs_fs_fill_super+0x11b3/0x1600 [ 151.655300][ T5798] get_tree_bdev_flags+0x40e/0x4d0 [ 151.655315][ T5798] ? __pfx_xfs_fs_fill_super+0x10/0x10 [ 151.655329][ T5798] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 151.655343][ T5798] vfs_get_tree+0x92/0x2b0 [ 151.655355][ T5798] do_new_mount+0x302/0xa10 [ 151.655370][ T5798] ? __pfx_do_new_mount+0x10/0x10 [ 151.655383][ T5798] ? kmem_cache_free+0x19b/0x690 [ 151.655397][ T5798] __se_sys_mount+0x313/0x410 [ 151.655412][ T5798] ? __pfx___se_sys_mount+0x10/0x10 [ 151.655426][ T5798] ? do_syscall_64+0xbe/0xfa0 [ 151.656284][ T5798] ? __x64_sys_mount+0x20/0xc0 [ 151.656300][ T5798] do_syscall_64+0xfa/0xfa0 [ 151.656312][ T5798] ? lockdep_hardirqs_on+0x9c/0x150 [ 151.656323][ T5798] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.656335][ T5798] ? clear_bhb_loop+0x60/0xb0 [ 151.656347][ T5798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.656357][ T5798] RIP: 0033:0x7feed8d9066a [ 151.656369][ T5798] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.656379][ T5798] RSP: 002b:00007feed9c93e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 151.656392][ T5798] RAX: ffffffffffffffda RBX: 00007feed9c93ef0 RCX: 00007feed8d9066a [ 151.656400][ T5798] RDX: 0000200000000500 RSI: 0000200000000200 RDI: 00007feed9c93eb0 [ 151.656407][ T5798] RBP: 0000200000000500 R08: 00007feed9c93ef0 R09: 0000000002218a5d [ 151.656414][ T5798] R10: 0000000002218a5d R11: 0000000000000246 R12: 0000200000000200 [ 151.656421][ T5798] R13: 00007feed9c93eb0 R14: 0000000000009706 R15: 0000200000000100 [ 151.656433][ T5798] [ 151.656437][ T5798] [ 151.797980][ T5798] Allocated by task 5798: [ 151.799934][ T5798] kasan_save_track+0x3e/0x80 [ 151.801958][ T5798] __kasan_kmalloc+0x93/0xb0 [ 151.803860][ T5798] __kvmalloc_node_noprof+0x5cd/0x910 [ 151.806047][ T5798] xlog_do_recovery_pass+0x106/0xc30 [ 151.808195][ T5798] xlog_verify_head+0x136/0x440 [ 151.810217][ T5798] xlog_find_tail+0x5ca/0x840 [ 151.812138][ T5798] xlog_recover+0x4b/0x3e0 [ 151.813921][ T5798] xfs_log_mount+0x253/0x3e0 [ 151.815811][ T5798] xfs_mountfs+0xe5e/0x22c0 [ 151.817661][ T5798] xfs_fs_fill_super+0x11b3/0x1600 [ 151.820060][ T5798] get_tree_bdev_flags+0x40e/0x4d0 [ 151.822309][ T5798] vfs_get_tree+0x92/0x2b0 [ 151.824304][ T5798] do_new_mount+0x302/0xa10 [ 151.826319][ T5798] __se_sys_mount+0x313/0x410 [ 151.828377][ T5798] do_syscall_64+0xfa/0xfa0 [ 151.830403][ T5798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.832968][ T5798] [ 151.834012][ T5798] The buggy address belongs to the object at ffff888000c88800 [ 151.834012][ T5798] which belongs to the cache kmalloc-512 of size 512 [ 151.840041][ T5798] The buggy address is located 0 bytes to the right of [ 151.840041][ T5798] allocated 512-byte region [ffff888000c88800, ffff888000c88a00) [ 151.846079][ T5798] [ 151.847121][ T5798] The buggy address belongs to the physical page: [ 151.850045][ T5798] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xc88 [ 151.853804][ T5798] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 151.857478][ T5798] flags: 0x7ff00000000040(head|node=0|zone=0|lastcpupid=0x7ff) [ 151.860729][ T5798] page_type: f5(slab) [ 151.862547][ T5798] raw: 007ff00000000040 ffff88801a441c80 dead000000000100 dead000000000122 [ 151.866249][ T5798] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 151.869953][ T5798] head: 007ff00000000040 ffff88801a441c80 dead000000000100 dead000000000122 [ 151.873737][ T5798] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 151.877488][ T5798] head: 007ff00000000001 ffffea0000032201 00000000ffffffff 00000000ffffffff [ 151.881154][ T5798] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 151.884900][ T5798] page dumped because: kasan: bad access detected [ 151.887733][ T5798] page_owner tracks the page as allocated [ 151.890274][ T5798] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5577, tgid 5577 (syz-executor), ts 139340894593, free_ts 137624649746 [ 151.899701][ T5798] post_alloc_hook+0x240/0x2a0 [ 151.901865][ T5798] get_page_from_freelist+0x2365/0x2440 [ 151.904484][ T5798] __alloc_frozen_pages_noprof+0x181/0x370 [ 151.907034][ T5798] alloc_pages_mpol+0x232/0x4a0 [ 151.909209][ T5798] allocate_slab+0x96/0x3a0 [ 151.911243][ T5798] ___slab_alloc+0xe94/0x1920 [ 151.913539][ T5798] __slab_alloc+0x65/0x100 [ 151.915472][ T5798] __kmalloc_noprof+0x471/0x7f0 [ 151.917631][ T5798] fib6_info_alloc+0x30/0xf0 [ 151.919764][ T5798] ip6_route_info_create+0x142/0x860 [ 151.922132][ T5798] addrconf_f6i_alloc+0x1d2/0x450 [ 151.924349][ T5798] ipv6_add_addr+0x56e/0x1090 [ 151.926447][ T5798] inet6_addr_add+0x387/0xc00 [ 151.928519][ T5798] inet6_rtm_newaddr+0x93d/0xd20 [ 151.930722][ T5798] rtnetlink_rcv_msg+0x7cc/0xb70 [ 151.932944][ T5798] netlink_rcv_skb+0x205/0x470 [ 151.935081][ T5798] page last free pid 5570 tgid 5570 stack trace: [ 151.937887][ T5798] __free_frozen_pages+0xbc4/0xd30 [ 151.940202][ T5798] vfree+0x25a/0x400 [ 151.941974][ T5798] kcov_close+0x28/0x50 [ 151.943939][ T5798] __fput+0x44c/0xa70 [ 151.945732][ T5798] task_work_run+0x1d4/0x260 [ 151.947744][ T5798] do_exit+0x6b5/0x2300 [ 151.949611][ T5798] do_group_exit+0x21c/0x2d0 [ 151.951665][ T5798] get_signal+0x1285/0x1340 [ 151.953667][ T5798] arch_do_signal_or_restart+0xa0/0x790 [ 151.956145][ T5798] exit_to_user_mode_loop+0x72/0x130 [ 151.958501][ T5798] do_syscall_64+0x2bd/0xfa0 [ 151.960621][ T5798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.963137][ T5798] [ 151.964242][ T5798] Memory state around the buggy address: [ 151.966698][ T5798] ffff888000c88900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 151.970305][ T5798] ffff888000c88980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 151.973868][ T5798] >ffff888000c88a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 151.977235][ T5798] ^ [ 151.979177][ T5798] ffff888000c88a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 151.982642][ T5798] ffff888000c88b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 151.986152][ T5798] ================================================================== [ 152.181373][ T5798] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 152.184676][ T5798] CPU: 0 UID: 0 PID: 5798 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 152.188569][ T5798] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 152.193302][ T5798] Call Trace: [ 152.194793][ T5798] [ 152.196124][ T5798] dump_stack_lvl+0x99/0x250 [ 152.198150][ T5798] ? __asan_memcpy+0x40/0x70 [ 152.200234][ T5798] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.202490][ T5798] ? __pfx__printk+0x10/0x10 [ 152.204595][ T5798] vpanic+0x237/0x6d0 [ 152.206352][ T5798] ? __pfx_vpanic+0x10/0x10 [ 152.208344][ T5798] ? preempt_schedule_common+0x83/0xd0 [ 152.210657][ T5798] ? preempt_schedule+0xae/0xc0 [ 152.212802][ T5798] panic+0xb9/0xc0 [ 152.214455][ T5798] ? __pfx_panic+0x10/0x10 [ 152.216427][ T5798] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 152.219188][ T5798] ? crc32c+0xcd/0x480 [ 152.220985][ T5798] check_panic_on_warn+0x89/0xb0 [ 152.223149][ T5798] ? crc32c+0xcd/0x480 [ 152.224984][ T5798] end_report+0x78/0x160 [ 152.226848][ T5798] kasan_report+0x129/0x150 [ 152.228912][ T5798] ? crc32c+0xcd/0x480 [ 152.230695][ T5798] crc32c+0xcd/0x480 [ 152.232438][ T5798] ? xlog_cksum+0x6a/0xf0 [ 152.234330][ T5798] xlog_cksum+0x91/0xf0 [ 152.236172][ T5798] xlog_recover_process+0x90/0x2f0 [ 152.238386][ T5798] xlog_do_recovery_pass+0x9cd/0xc30 [ 152.240874][ T5798] ? __pfx_xlog_do_recovery_pass+0x10/0x10 [ 152.243542][ T5798] ? kfree+0x19a/0x6d0 [ 152.245369][ T5798] xlog_verify_head+0x136/0x440 [ 152.247518][ T5798] xlog_find_tail+0x5ca/0x840 [ 152.249701][ T5798] xlog_recover+0x4b/0x3e0 [ 152.251729][ T5798] xfs_log_mount+0x253/0x3e0 [ 152.253768][ T5798] xfs_mountfs+0xe5e/0x22c0 [ 152.255767][ T5798] ? __pfx_xfs_mountfs+0x10/0x10 [ 152.258006][ T5798] ? trace_xfs_inode_timestamp_range+0x84/0x200 [ 152.260798][ T5798] xfs_fs_fill_super+0x11b3/0x1600 [ 152.263103][ T5798] get_tree_bdev_flags+0x40e/0x4d0 [ 152.265383][ T5798] ? __pfx_xfs_fs_fill_super+0x10/0x10 [ 152.267793][ T5798] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 152.270313][ T5798] vfs_get_tree+0x92/0x2b0 [ 152.272270][ T5798] do_new_mount+0x302/0xa10 [ 152.274305][ T5798] ? __pfx_do_new_mount+0x10/0x10 [ 152.276546][ T5798] ? kmem_cache_free+0x19b/0x690 [ 152.278744][ T5798] __se_sys_mount+0x313/0x410 [ 152.280885][ T5798] ? __pfx___se_sys_mount+0x10/0x10 [ 152.283168][ T5798] ? do_syscall_64+0xbe/0xfa0 [ 152.285266][ T5798] ? __x64_sys_mount+0x20/0xc0 [ 152.287430][ T5798] do_syscall_64+0xfa/0xfa0 [ 152.289503][ T5798] ? lockdep_hardirqs_on+0x9c/0x150 [ 152.291830][ T5798] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.294499][ T5798] ? clear_bhb_loop+0x60/0xb0 [ 152.296597][ T5798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.299283][ T5798] RIP: 0033:0x7feed8d9066a [ 152.301309][ T5798] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.309595][ T5798] RSP: 002b:00007feed9c93e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 152.313164][ T5798] RAX: ffffffffffffffda RBX: 00007feed9c93ef0 RCX: 00007feed8d9066a [ 152.316558][ T5798] RDX: 0000200000000500 RSI: 0000200000000200 RDI: 00007feed9c93eb0 [ 152.319888][ T5798] RBP: 0000200000000500 R08: 00007feed9c93ef0 R09: 0000000002218a5d [ 152.323190][ T5798] R10: 0000000002218a5d R11: 0000000000000246 R12: 0000200000000200 [ 152.326636][ T5798] R13: 00007feed9c93eb0 R14: 0000000000009706 R15: 0000200000000100 [ 152.329996][ T5798] [ 152.331694][ T5798] Kernel Offset: disabled [ 152.333597][ T5798] Rebooting in 86400 seconds..