Warning: Permanently added '[localhost]:2150' (ED25519) to the list of known hosts. 2025/05/22 04:59:26 ignoring optional flag "sandboxArg"="0" 2025/05/22 04:59:28 parsed 1 programs [ 136.381168][ T5738] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 137.892124][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.895371][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 142.960402][ T5372] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 142.966854][ T5372] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 142.970551][ T5372] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 142.974767][ T5372] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 142.986668][ T5372] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 145.013370][ T25] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.016846][ T25] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.045671][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.049095][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.406873][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 145.474577][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.477867][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.482204][ T5811] bridge_slave_0: entered allmulticast mode [ 145.486206][ T5811] bridge_slave_0: entered promiscuous mode [ 145.492253][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.495616][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.498942][ T5811] bridge_slave_1: entered allmulticast mode [ 145.503806][ T5811] bridge_slave_1: entered promiscuous mode [ 145.526897][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.534098][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.557962][ T5811] team0: Port device team_slave_0 added [ 145.574758][ T5811] team0: Port device team_slave_1 added [ 145.614573][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.617608][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.641286][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.661485][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.664639][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.691171][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.762395][ T5811] hsr_slave_0: entered promiscuous mode [ 145.765676][ T5811] hsr_slave_1: entered promiscuous mode [ 146.694678][ T5811] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 146.724831][ T5811] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 146.743414][ T5811] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 146.771238][ T5811] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 146.967311][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.011941][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.034181][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.037367][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.057646][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.061008][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.537385][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.649031][ T5811] veth0_vlan: entered promiscuous mode [ 147.683772][ T5811] veth1_vlan: entered promiscuous mode [ 147.753657][ T5811] veth0_macvtap: entered promiscuous mode [ 147.793250][ T5811] veth1_macvtap: entered promiscuous mode [ 147.826062][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.854548][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.872876][ T5811] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.876618][ T5811] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.880382][ T5811] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.911527][ T5811] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.264596][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.164844][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/05/22 04:59:46 executed programs: 0 [ 149.840777][ T4663] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 149.846354][ T4663] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 149.850261][ T4663] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 149.854859][ T4663] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 149.858288][ T4663] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 149.907496][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.224006][ T5870] chnl_net:caif_netlink_parms(): no params data found [ 150.358432][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.372468][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.375668][ T5870] bridge_slave_0: entered allmulticast mode [ 150.391750][ T5870] bridge_slave_0: entered promiscuous mode [ 150.397234][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.400489][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.414254][ T5870] bridge_slave_1: entered allmulticast mode [ 150.418112][ T5870] bridge_slave_1: entered promiscuous mode [ 150.476809][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.518616][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.544142][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.623011][ T5870] team0: Port device team_slave_0 added [ 150.668420][ T5870] team0: Port device team_slave_1 added [ 150.771436][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.784543][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.811848][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.846219][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.849341][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.877673][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.887417][ T12] bridge_slave_1: left allmulticast mode [ 150.889920][ T12] bridge_slave_1: left promiscuous mode [ 150.902492][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.907681][ T12] bridge_slave_0: left allmulticast mode [ 150.910277][ T12] bridge_slave_0: left promiscuous mode [ 150.923966][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.405546][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.412383][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.423005][ T12] bond0 (unregistering): Released all slaves [ 151.532398][ T5870] hsr_slave_0: entered promiscuous mode [ 151.548880][ T5870] hsr_slave_1: entered promiscuous mode [ 151.561645][ T5870] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.565239][ T5870] Cannot create hsr debugfs directory [ 151.585025][ T12] hsr_slave_0: left promiscuous mode [ 151.587907][ T12] hsr_slave_1: left promiscuous mode [ 151.592889][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.595886][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.607008][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.610346][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.634201][ T12] veth1_macvtap: left promiscuous mode [ 151.636677][ T12] veth0_macvtap: left promiscuous mode [ 151.639800][ T12] veth1_vlan: left promiscuous mode [ 151.660878][ T12] veth0_vlan: left promiscuous mode [ 151.881775][ T4663] Bluetooth: hci0: command tx timeout [ 152.055707][ T12] team0 (unregistering): Port device team_slave_1 removed [ 152.078579][ T12] team0 (unregistering): Port device team_slave_0 removed [ 152.945162][ T5870] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 152.965240][ T5870] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 152.981357][ T5870] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 152.988094][ T5870] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 153.139716][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.167643][ T5870] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.190189][ T1040] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.193440][ T1040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.213865][ T1040] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.217121][ T1040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.284076][ T5870] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 153.539914][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.612020][ T5870] veth0_vlan: entered promiscuous mode [ 153.637589][ T5870] veth1_vlan: entered promiscuous mode [ 153.685977][ T5870] veth0_macvtap: entered promiscuous mode [ 153.702743][ T5870] veth1_macvtap: entered promiscuous mode [ 153.743211][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.752965][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.769018][ T5870] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.783597][ T5870] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.787446][ T5870] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.806073][ T5870] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.938127][ T1040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.947793][ T1040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.961265][ T4663] Bluetooth: hci0: command tx timeout [ 154.013433][ T1040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.018038][ T1040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.785389][ T5937] loop0: detected capacity change from 0 to 32768 [ 154.813932][ T5937] ======================================================= [ 154.813932][ T5937] WARNING: The mand mount option has been deprecated and [ 154.813932][ T5937] and is ignored by this kernel. Remove the mand [ 154.813932][ T5937] option from the mount to silence this warning. [ 154.813932][ T5937] ======================================================= [ 154.963358][ T5937] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 155.286530][ T5937] ================================================================== [ 155.290070][ T5937] BUG: KASAN: slab-out-of-bounds in crc32c_arch+0xc3/0x240 [ 155.293317][ T5937] Read of size 8 at addr ffff888011e29e00 by task syz.0.16/5937 [ 155.297613][ T5937] [ 155.298739][ T5937] CPU: 0 UID: 0 PID: 5937 Comm: syz.0.16 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) [ 155.298753][ T5937] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 155.298759][ T5937] Call Trace: [ 155.298766][ T5937] [ 155.298771][ T5937] dump_stack_lvl+0x189/0x250 [ 155.298788][ T5937] ? __kasan_check_byte+0x12/0x40 [ 155.298803][ T5937] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.298817][ T5937] ? lock_release+0x4b/0x3e0 [ 155.298830][ T5937] ? lock_release+0x4b/0x3e0 [ 155.298844][ T5937] ? __virt_addr_valid+0x469/0x540 [ 155.298858][ T5937] print_report+0xb4/0x290 [ 155.298870][ T5937] ? crc32c_arch+0xc3/0x240 [ 155.298883][ T5937] kasan_report+0x118/0x150 [ 155.298896][ T5937] ? crc32c_arch+0xc3/0x240 [ 155.298910][ T5937] crc32c_arch+0xc3/0x240 [ 155.298925][ T5937] xlog_cksum+0x92/0xf0 [ 155.298937][ T5937] xlog_recover_process+0x7a/0x1f0 [ 155.298948][ T5937] xlog_do_recovery_pass+0x9cd/0xc30 [ 155.298961][ T5937] ? __pfx_xlog_do_recovery_pass+0x10/0x10 [ 155.298973][ T5937] ? xlog_verify_head+0xf2/0x440 [ 155.298982][ T5937] xlog_verify_head+0x136/0x440 [ 155.298993][ T5937] xlog_find_tail+0x5ca/0x840 [ 155.299010][ T5937] xlog_recover+0x4b/0x3e0 [ 155.299024][ T5937] xfs_log_mount+0x253/0x3e0 [ 155.299035][ T5937] xfs_mountfs+0xe5e/0x22f0 [ 155.299054][ T5937] ? __pfx_xfs_mountfs+0x10/0x10 [ 155.299068][ T5937] ? trace_xfs_inode_timestamp_range+0x84/0x200 [ 155.299083][ T5937] xfs_fs_fill_super+0x1286/0x16d0 [ 155.299098][ T5937] get_tree_bdev_flags+0x40e/0x4d0 [ 155.299117][ T5937] ? __pfx_xfs_fs_fill_super+0x10/0x10 [ 155.299129][ T5937] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 155.299142][ T5937] vfs_get_tree+0x8f/0x2b0 [ 155.299153][ T5937] do_new_mount+0x24a/0xa40 [ 155.299167][ T5937] __se_sys_mount+0x317/0x410 [ 155.299180][ T5937] ? __pfx___se_sys_mount+0x10/0x10 [ 155.299193][ T5937] ? do_syscall_64+0xba/0x210 [ 155.299254][ T5937] ? __x64_sys_mount+0x20/0xc0 [ 155.299266][ T5937] do_syscall_64+0xf6/0x210 [ 155.299280][ T5937] ? clear_bhb_loop+0x60/0xb0 [ 155.299292][ T5937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.299302][ T5937] RIP: 0033:0x7f88f5f8e90a [ 155.299312][ T5937] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.299321][ T5937] RSP: 002b:00007f88f6dabe68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 155.299333][ T5937] RAX: ffffffffffffffda RBX: 00007f88f6dabef0 RCX: 00007f88f5f8e90a [ 155.299341][ T5937] RDX: 0000400000000500 RSI: 0000400000000200 RDI: 00007f88f6dabeb0 [ 155.299348][ T5937] RBP: 0000400000000500 R08: 00007f88f6dabef0 R09: 0000000002218a5d [ 155.299354][ T5937] R10: 0000000002218a5d R11: 0000000000000246 R12: 0000400000000200 [ 155.299361][ T5937] R13: 00007f88f6dabeb0 R14: 0000000000009706 R15: 0000400000000100 [ 155.299371][ T5937] [ 155.299375][ T5937] [ 155.423480][ T5937] Allocated by task 5937: [ 155.425412][ T5937] kasan_save_track+0x3e/0x80 [ 155.427516][ T5937] __kasan_kmalloc+0x93/0xb0 [ 155.429823][ T5937] __kvmalloc_node_noprof+0x314/0x5e0 [ 155.432159][ T5937] xlog_do_recovery_pass+0x106/0xc30 [ 155.434474][ T5937] xlog_verify_head+0x136/0x440 [ 155.436743][ T5937] xlog_find_tail+0x5ca/0x840 [ 155.438905][ T5937] xlog_recover+0x4b/0x3e0 [ 155.440941][ T5937] xfs_log_mount+0x253/0x3e0 [ 155.442969][ T5937] xfs_mountfs+0xe5e/0x22f0 [ 155.445247][ T5937] xfs_fs_fill_super+0x1286/0x16d0 [ 155.447505][ T5937] get_tree_bdev_flags+0x40e/0x4d0 [ 155.449748][ T5937] vfs_get_tree+0x8f/0x2b0 [ 155.451761][ T5937] do_new_mount+0x24a/0xa40 [ 155.453774][ T5937] __se_sys_mount+0x317/0x410 [ 155.455840][ T5937] do_syscall_64+0xf6/0x210 [ 155.457851][ T5937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.460410][ T5937] [ 155.461584][ T5937] The buggy address belongs to the object at ffff888011e29c00 [ 155.461584][ T5937] which belongs to the cache kmalloc-512 of size 512 [ 155.467672][ T5937] The buggy address is located 0 bytes to the right of [ 155.467672][ T5937] allocated 512-byte region [ffff888011e29c00, ffff888011e29e00) [ 155.473912][ T5937] [ 155.475007][ T5937] The buggy address belongs to the physical page: [ 155.477786][ T5937] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11e28 [ 155.481690][ T5937] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 155.485327][ T5937] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 155.488708][ T5937] page_type: f5(slab) [ 155.490549][ T5937] raw: 00fff00000000040 ffff88801a041c80 dead000000000100 dead000000000122 [ 155.494326][ T5937] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 155.498108][ T5937] head: 00fff00000000040 ffff88801a041c80 dead000000000100 dead000000000122 [ 155.502134][ T5937] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 155.505960][ T5937] head: 00fff00000000001 ffffea0000478a01 00000000ffffffff 00000000ffffffff [ 155.509723][ T5937] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 155.513473][ T5937] page dumped because: kasan: bad access detected [ 155.516246][ T5937] page_owner tracks the page as allocated [ 155.518714][ T5937] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5345, tgid 5345 (syz-executor), ts 95274120880, free_ts 87525805664 [ 155.527022][ T5937] post_alloc_hook+0x1d8/0x230 [ 155.529224][ T5937] get_page_from_freelist+0x21ce/0x22b0 [ 155.531644][ T5937] __alloc_frozen_pages_noprof+0x181/0x370 [ 155.534147][ T5937] alloc_pages_mpol+0x232/0x4a0 [ 155.536261][ T5937] allocate_slab+0x8a/0x3b0 [ 155.538334][ T5937] ___slab_alloc+0xbfc/0x1480 [ 155.540443][ T5937] __kmalloc_noprof+0x305/0x4f0 [ 155.542624][ T5937] fib6_info_alloc+0x30/0xf0 [ 155.544828][ T5937] ip6_route_info_create+0x4b3/0x1360 [ 155.547865][ T5937] ip6_route_add+0x28/0x160 [ 155.549878][ T5937] addrconf_permanent_addr+0x67f/0x9d0 [ 155.552219][ T5937] addrconf_notify+0x887/0x1010 [ 155.554366][ T5937] notifier_call_chain+0x1b6/0x3e0 [ 155.556658][ T5937] __dev_notify_flags+0x18d/0x2e0 [ 155.559034][ T5937] netif_change_flags+0xe8/0x1a0 [ 155.561467][ T5937] do_setlink+0xcb9/0x40d0 [ 155.563456][ T5937] page last free pid 4723 tgid 4723 stack trace: [ 155.566200][ T5937] __free_frozen_pages+0xb0e/0xcd0 [ 155.568560][ T5937] __slab_free+0x326/0x400 [ 155.570549][ T5937] qlist_free_all+0x9a/0x140 [ 155.572621][ T5937] kasan_quarantine_reduce+0x148/0x160 [ 155.575001][ T5937] __kasan_slab_alloc+0x22/0x80 [ 155.577159][ T5937] __kmalloc_noprof+0x224/0x4f0 [ 155.579386][ T5937] tomoyo_realpath_from_path+0xe3/0x5d0 [ 155.581852][ T5937] tomoyo_path_perm+0x213/0x4b0 [ 155.583949][ T5937] security_inode_getattr+0x12f/0x330 [ 155.586289][ T5937] vfs_statx+0x153/0x550 [ 155.588188][ T5937] vfs_fstatat+0xe4/0x160 [ 155.590135][ T5937] __x64_sys_newfstatat+0x11c/0x1a0 [ 155.592432][ T5937] do_syscall_64+0xf6/0x210 [ 155.595106][ T5937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.597778][ T5937] [ 155.598870][ T5937] Memory state around the buggy address: [ 155.601301][ T5937] ffff888011e29d00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 155.604773][ T5937] ffff888011e29d80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 155.608165][ T5937] >ffff888011e29e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 155.611644][ T5937] ^ [ 155.613449][ T5937] ffff888011e29e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 155.616946][ T5937] ffff888011e29f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 155.620409][ T5937] ================================================================== [ 155.933265][ T5937] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 155.936669][ T5937] CPU: 0 UID: 0 PID: 5937 Comm: syz.0.16 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) [ 155.941820][ T5937] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 155.946383][ T5937] Call Trace: [ 155.947874][ T5937] [ 155.949183][ T5937] dump_stack_lvl+0x99/0x250 [ 155.951213][ T5937] ? __asan_memcpy+0x40/0x70 [ 155.953251][ T5937] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.955514][ T5937] ? __pfx__printk+0x10/0x10 [ 155.957585][ T5937] panic+0x2db/0x790 [ 155.959305][ T5937] ? __pfx_preempt_schedule+0x10/0x10 [ 155.961686][ T5937] ? __pfx_panic+0x10/0x10 [ 155.963688][ T5937] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 155.966348][ T5937] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 155.969069][ T5937] ? crc32c_arch+0xc3/0x240 [ 155.971092][ T5937] check_panic_on_warn+0x89/0xb0 [ 155.973205][ T5937] ? crc32c_arch+0xc3/0x240 [ 155.975227][ T5937] end_report+0x78/0x160 [ 155.977219][ T5937] kasan_report+0x129/0x150 [ 155.979341][ T5937] ? crc32c_arch+0xc3/0x240 [ 155.981302][ T5937] crc32c_arch+0xc3/0x240 [ 155.983180][ T5937] xlog_cksum+0x92/0xf0 [ 155.985365][ T5937] xlog_recover_process+0x7a/0x1f0 [ 155.987521][ T5937] xlog_do_recovery_pass+0x9cd/0xc30 [ 155.989862][ T5937] ? __pfx_xlog_do_recovery_pass+0x10/0x10 [ 155.992423][ T5937] ? xlog_verify_head+0xf2/0x440 [ 155.994562][ T5937] xlog_verify_head+0x136/0x440 [ 155.996616][ T5937] xlog_find_tail+0x5ca/0x840 [ 155.998696][ T5937] xlog_recover+0x4b/0x3e0 [ 156.000604][ T5937] xfs_log_mount+0x253/0x3e0 [ 156.002609][ T5937] xfs_mountfs+0xe5e/0x22f0 [ 156.004565][ T5937] ? __pfx_xfs_mountfs+0x10/0x10 [ 156.006770][ T5937] ? trace_xfs_inode_timestamp_range+0x84/0x200 [ 156.009482][ T5937] xfs_fs_fill_super+0x1286/0x16d0 [ 156.011690][ T5937] get_tree_bdev_flags+0x40e/0x4d0 [ 156.013928][ T5937] ? __pfx_xfs_fs_fill_super+0x10/0x10 [ 156.016352][ T5937] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 156.018891][ T5937] vfs_get_tree+0x8f/0x2b0 [ 156.020871][ T5937] do_new_mount+0x24a/0xa40 [ 156.022891][ T5937] __se_sys_mount+0x317/0x410 [ 156.024955][ T5937] ? __pfx___se_sys_mount+0x10/0x10 [ 156.027272][ T5937] ? do_syscall_64+0xba/0x210 [ 156.029551][ T5937] ? __x64_sys_mount+0x20/0xc0 [ 156.031948][ T5937] do_syscall_64+0xf6/0x210 [ 156.033912][ T5937] ? clear_bhb_loop+0x60/0xb0 [ 156.035923][ T5937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.038415][ T5937] RIP: 0033:0x7f88f5f8e90a [ 156.040343][ T5937] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.048602][ T5937] RSP: 002b:00007f88f6dabe68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 156.052140][ T5937] RAX: ffffffffffffffda RBX: 00007f88f6dabef0 RCX: 00007f88f5f8e90a [ 156.055522][ T5937] RDX: 0000400000000500 RSI: 0000400000000200 RDI: 00007f88f6dabeb0 [ 156.058850][ T5937] RBP: 0000400000000500 R08: 00007f88f6dabef0 R09: 0000000002218a5d [ 156.062215][ T5937] R10: 0000000002218a5d R11: 0000000000000246 R12: 0000400000000200 [ 156.065517][ T5937] R13: 00007f88f6dabeb0 R14: 0000000000009706 R15: 0000400000000100 [ 156.068860][ T5937] [ 156.070547][ T5937] Kernel Offset: disabled [ 156.072408][ T5937] Rebooting in 86400 seconds..