Warning: Permanently added '[localhost]:60580' (ED25519) to the list of known hosts. 2026/01/14 18:20:09 parsed 1 programs [ 130.439916][ T5628] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 133.694042][ T5641] chnl_net:caif_netlink_parms(): no params data found [ 133.752746][ T5641] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.755992][ T5641] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.759846][ T5641] bridge_slave_0: entered allmulticast mode [ 133.763477][ T5641] bridge_slave_0: entered promiscuous mode [ 133.768155][ T5641] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.771326][ T5641] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.774896][ T5641] bridge_slave_1: entered allmulticast mode [ 133.780325][ T5641] bridge_slave_1: entered promiscuous mode [ 133.808448][ T5641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.815203][ T5641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.838748][ T5641] team0: Port device team_slave_0 added [ 133.843225][ T5641] team0: Port device team_slave_1 added [ 133.862100][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.865268][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.877204][ T5641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.883430][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.886543][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.898544][ T5641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.941307][ T5641] hsr_slave_0: entered promiscuous mode [ 133.947478][ T5641] hsr_slave_1: entered promiscuous mode [ 134.412225][ T5641] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 134.430288][ T5641] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 134.435940][ T5641] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 134.450009][ T5641] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 134.506914][ T5641] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.510232][ T5641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.513694][ T5641] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.516815][ T5641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.590620][ T3260] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.594293][ T3260] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.653804][ T5641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.692099][ T5641] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.713633][ T3990] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.716802][ T3990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.746833][ T3990] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.750867][ T3990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.078193][ T5641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.143405][ T5641] veth0_vlan: entered promiscuous mode [ 135.162208][ T5641] veth1_vlan: entered promiscuous mode [ 135.217990][ T5641] veth0_macvtap: entered promiscuous mode [ 135.230612][ T5641] veth1_macvtap: entered promiscuous mode [ 135.260993][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.280263][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.297893][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.301801][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.305704][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.330890][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.549213][ T3260] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.618840][ T3260] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.657723][ T3260] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.722143][ T3260] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.527667][ T4685] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 137.531649][ T4685] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 137.534990][ T4685] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 137.540347][ T4685] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 137.543647][ T4685] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 137.747802][ T3260] bridge_slave_1: left allmulticast mode [ 137.750352][ T3260] bridge_slave_1: left promiscuous mode [ 137.753688][ T3260] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.796437][ T3260] bridge_slave_0: left allmulticast mode [ 137.799686][ T3260] bridge_slave_0: left promiscuous mode [ 137.807337][ T3260] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.287886][ T3260] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.299255][ T3260] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.308970][ T3260] bond0 (unregistering): Released all slaves [ 138.404624][ T3260] hsr_slave_0: left promiscuous mode [ 138.417786][ T3260] hsr_slave_1: left promiscuous mode [ 138.427295][ T3260] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.430924][ T3260] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.437992][ T3260] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.441341][ T3260] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.460079][ T3260] veth1_macvtap: left promiscuous mode [ 138.462529][ T3260] veth0_macvtap: left promiscuous mode [ 138.464947][ T3260] veth1_vlan: left promiscuous mode [ 138.478558][ T3260] veth0_vlan: left promiscuous mode [ 138.803327][ T3260] team0 (unregistering): Port device team_slave_1 removed [ 138.820332][ T3260] team0 (unregistering): Port device team_slave_0 removed [ 139.191027][ T3990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.194490][ T3990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.252514][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.272064][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.990451][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 142.993609][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 2026/01/14 18:20:26 executed programs: 0 [ 143.284716][ T47] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 143.288490][ T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 143.291842][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 143.295225][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 143.298823][ T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 143.460445][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 143.520851][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.524985][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.528720][ T5822] bridge_slave_0: entered allmulticast mode [ 143.532658][ T5822] bridge_slave_0: entered promiscuous mode [ 143.538164][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.541953][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.545093][ T5822] bridge_slave_1: entered allmulticast mode [ 143.551270][ T5822] bridge_slave_1: entered promiscuous mode [ 143.574182][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.580706][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.599991][ T5822] team0: Port device team_slave_0 added [ 143.603923][ T5822] team0: Port device team_slave_1 added [ 143.622294][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.632978][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.646765][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.653184][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.656136][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.668159][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.698242][ T5822] hsr_slave_0: entered promiscuous mode [ 143.701423][ T5822] hsr_slave_1: entered promiscuous mode [ 144.115675][ T5822] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 144.128826][ T5822] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 144.152087][ T5822] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 144.167966][ T5822] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 144.209576][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.212731][ T5822] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.216114][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.219370][ T5822] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.352506][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.373652][ T2949] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.377793][ T2949] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.398236][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.413479][ T2949] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.416643][ T2949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.434395][ T3990] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.437676][ T3990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.495590][ T5822] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 144.511867][ T5822] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 144.796688][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.866290][ T5822] veth0_vlan: entered promiscuous mode [ 144.885297][ T5822] veth1_vlan: entered promiscuous mode [ 144.932437][ T5822] veth0_macvtap: entered promiscuous mode [ 144.952284][ T5822] veth1_macvtap: entered promiscuous mode [ 144.980275][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.001019][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.031448][ T3260] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.046865][ T3260] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.054944][ T3260] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.068955][ T3260] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.159019][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.162602][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.234778][ T3990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.241584][ T3990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.311259][ T47] Bluetooth: hci0: command tx timeout [ 145.783661][ T5866] loop0: detected capacity change from 0 to 32768 [ 145.804810][ T5866] ======================================================= [ 145.804810][ T5866] WARNING: The mand mount option has been deprecated and [ 145.804810][ T5866] and is ignored by this kernel. Remove the mand [ 145.804810][ T5866] option from the mount to silence this warning. [ 145.804810][ T5866] ======================================================= [ 145.885956][ T5866] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 145.987909][ T5866] ================================================================== [ 145.991564][ T5866] BUG: KASAN: slab-out-of-bounds in crc32c+0xcd/0x480 [ 145.994721][ T5866] Read of size 8 at addr ffff888042021600 by task syz.0.16/5866 [ 145.999033][ T5866] [ 146.000147][ T5866] CPU: 0 UID: 0 PID: 5866 Comm: syz.0.16 Not tainted syzkaller #0 PREEMPT(full) [ 146.000162][ T5866] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 146.000169][ T5866] Call Trace: [ 146.000177][ T5866] [ 146.000183][ T5866] dump_stack_lvl+0xe8/0x150 [ 146.000201][ T5866] print_report+0xca/0x240 [ 146.000214][ T5866] ? crc32c+0xcd/0x480 [ 146.000224][ T5866] kasan_report+0x118/0x150 [ 146.000237][ T5866] ? crc32c+0xcd/0x480 [ 146.000248][ T5866] crc32c+0xcd/0x480 [ 146.000257][ T5866] ? xlog_cksum+0x6a/0x100 [ 146.000267][ T5866] xlog_cksum+0x93/0x100 [ 146.000278][ T5866] xlog_recover_process+0x90/0x2f0 [ 146.000294][ T5866] xlog_do_recovery_pass+0x9cd/0xc30 [ 146.000311][ T5866] ? __pfx_xlog_do_recovery_pass+0x10/0x10 [ 146.000329][ T5866] ? kfree+0x1c0/0x660 [ 146.000344][ T5866] xlog_verify_head+0x136/0x440 [ 146.000360][ T5866] xlog_find_tail+0x5ca/0x840 [ 146.000375][ T5866] xlog_recover+0x4b/0x3e0 [ 146.000389][ T5866] xfs_log_mount+0x253/0x3e0 [ 146.000406][ T5866] xfs_mountfs+0xe5e/0x22c0 [ 146.000422][ T5866] ? __pfx_xfs_mountfs+0x10/0x10 [ 146.000436][ T5866] ? trace_xfs_inode_timestamp_range+0x84/0x1e0 [ 146.000448][ T5866] xfs_fs_fill_super+0x11f1/0x1640 [ 146.000461][ T5866] get_tree_bdev_flags+0x40e/0x4d0 [ 146.000477][ T5866] ? __pfx_xfs_fs_fill_super+0x10/0x10 [ 146.000488][ T5866] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 146.000505][ T5866] vfs_get_tree+0x92/0x2a0 [ 146.000520][ T5866] do_new_mount+0x302/0xa10 [ 146.000533][ T5866] ? __pfx_do_new_mount+0x10/0x10 [ 146.000545][ T5866] ? kmem_cache_free+0x197/0x620 [ 146.000562][ T5866] __se_sys_mount+0x313/0x410 [ 146.000575][ T5866] ? __pfx___se_sys_mount+0x10/0x10 [ 146.000588][ T5866] ? __x64_sys_mount+0x20/0xc0 [ 146.000599][ T5866] do_syscall_64+0xec/0xf80 [ 146.000656][ T5866] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.000667][ T5866] ? trace_irq_disable+0x37/0x100 [ 146.000681][ T5866] ? clear_bhb_loop+0x60/0xb0 [ 146.000693][ T5866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.000704][ T5866] RIP: 0033:0x7f9f5f38e90a [ 146.000715][ T5866] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.000724][ T5866] RSP: 002b:00007f9f60198e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 146.000737][ T5866] RAX: ffffffffffffffda RBX: 00007f9f60198ef0 RCX: 00007f9f5f38e90a [ 146.000746][ T5866] RDX: 0000400000000500 RSI: 0000400000000200 RDI: 00007f9f60198eb0 [ 146.000753][ T5866] RBP: 0000400000000500 R08: 00007f9f60198ef0 R09: 0000000002218a5d [ 146.000760][ T5866] R10: 0000000002218a5d R11: 0000000000000246 R12: 0000400000000200 [ 146.000767][ T5866] R13: 00007f9f60198eb0 R14: 0000000000009706 R15: 0000400000000100 [ 146.000779][ T5866] [ 146.000783][ T5866] [ 146.122370][ T5866] Allocated by task 5866: [ 146.124295][ T5866] kasan_save_track+0x3e/0x80 [ 146.126415][ T5866] __kasan_kmalloc+0x93/0xb0 [ 146.128454][ T5866] __kvmalloc_node_noprof+0x5d5/0x920 [ 146.130722][ T5866] xlog_do_recovery_pass+0x106/0xc30 [ 146.133093][ T5866] xlog_verify_head+0x136/0x440 [ 146.135761][ T5866] xlog_find_tail+0x5ca/0x840 [ 146.138390][ T5866] xlog_recover+0x4b/0x3e0 [ 146.140364][ T5866] xfs_log_mount+0x253/0x3e0 [ 146.142460][ T5866] xfs_mountfs+0xe5e/0x22c0 [ 146.144422][ T5866] xfs_fs_fill_super+0x11f1/0x1640 [ 146.146602][ T5866] get_tree_bdev_flags+0x40e/0x4d0 [ 146.148593][ T5866] vfs_get_tree+0x92/0x2a0 [ 146.150583][ T5866] do_new_mount+0x302/0xa10 [ 146.153003][ T5866] __se_sys_mount+0x313/0x410 [ 146.155488][ T5866] do_syscall_64+0xec/0xf80 [ 146.157578][ T5866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.160309][ T5866] [ 146.161385][ T5866] The buggy address belongs to the object at ffff888042021400 [ 146.161385][ T5866] which belongs to the cache kmalloc-512 of size 512 [ 146.167461][ T5866] The buggy address is located 0 bytes to the right of [ 146.167461][ T5866] allocated 512-byte region [ffff888042021400, ffff888042021600) [ 146.173885][ T5866] [ 146.174998][ T5866] The buggy address belongs to the physical page: [ 146.177792][ T5866] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x42020 [ 146.181921][ T5866] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 146.186496][ T5866] anon flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 146.190465][ T5866] page_type: f5(slab) [ 146.192630][ T5866] raw: 04fff00000000040 ffff88801a441c80 ffffea0000d88300 0000000000000005 [ 146.196400][ T5866] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 146.200191][ T5866] head: 04fff00000000040 ffff88801a441c80 ffffea0000d88300 0000000000000005 [ 146.203831][ T5866] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 146.207715][ T5866] head: 04fff00000000001 ffffea0001080801 00000000ffffffff 00000000ffffffff [ 146.211667][ T5866] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 146.215401][ T5866] page dumped because: kasan: bad access detected [ 146.218188][ T5866] page_owner tracks the page as allocated [ 146.220583][ T5866] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3990, tgid 3990 (kworker/u4:22), ts 144434047369, free_ts 143044294577 [ 146.229715][ T5866] post_alloc_hook+0x234/0x290 [ 146.231730][ T5866] get_page_from_freelist+0x24e0/0x2580 [ 146.234057][ T5866] __alloc_frozen_pages_noprof+0x181/0x370 [ 146.236495][ T5866] alloc_pages_mpol+0x232/0x4a0 [ 146.238370][ T5866] allocate_slab+0x86/0x3b0 [ 146.240150][ T5866] ___slab_alloc+0xe53/0x1820 [ 146.242102][ T5866] __slab_alloc+0x65/0x100 [ 146.243898][ T5866] __kmalloc_noprof+0x47d/0x800 [ 146.245963][ T5866] fib6_info_alloc+0x30/0xf0 [ 146.247965][ T5866] ip6_route_info_create+0x142/0x860 [ 146.250122][ T5866] addrconf_f6i_alloc+0x1d2/0x450 [ 146.252099][ T5866] ipv6_add_addr+0x56e/0x1090 [ 146.254042][ T5866] addrconf_add_linklocal+0x28c/0x6c0 [ 146.256024][ T5866] addrconf_addr_gen+0x490/0x580 [ 146.258127][ T5866] addrconf_init_auto_addrs+0x5c2/0xa00 [ 146.260392][ T5866] addrconf_notify+0xb1e/0x1050 [ 146.262433][ T5866] page last free pid 5818 tgid 5818 stack trace: [ 146.264759][ T5866] __free_frozen_pages+0xbc8/0xd30 [ 146.266955][ T5866] __slab_free+0x2ce/0x320 [ 146.268905][ T5866] qlist_free_all+0x97/0x100 [ 146.271021][ T5866] kasan_quarantine_reduce+0x148/0x160 [ 146.273322][ T5866] __kasan_slab_alloc+0x22/0x80 [ 146.275387][ T5866] kmem_cache_alloc_noprof+0x37d/0x710 [ 146.277751][ T5866] getname_kernel+0x5a/0x2f0 [ 146.279707][ T5866] kern_path+0x1d/0x50 [ 146.281424][ T5866] tomoyo_mount_permission+0x776/0x970 [ 146.283716][ T5866] security_sb_mount+0xec/0x350 [ 146.285783][ T5866] path_mount+0xbc/0xff0 [ 146.287595][ T5866] __se_sys_mount+0x313/0x410 [ 146.289633][ T5866] do_syscall_64+0xec/0xf80 [ 146.291542][ T5866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.294072][ T5866] [ 146.295109][ T5866] Memory state around the buggy address: [ 146.297481][ T5866] ffff888042021500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 146.300791][ T5866] ffff888042021580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 146.304106][ T5866] >ffff888042021600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 146.307461][ T5866] ^ [ 146.309271][ T5866] ffff888042021680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 146.312646][ T5866] ffff888042021700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 146.316044][ T5866] ================================================================== [ 146.421976][ T5866] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 146.425007][ T5866] CPU: 0 UID: 0 PID: 5866 Comm: syz.0.16 Not tainted syzkaller #0 PREEMPT(full) [ 146.428790][ T5866] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 146.433309][ T5866] Call Trace: [ 146.434815][ T5866] [ 146.436096][ T5866] vpanic+0x1e0/0x670 [ 146.437834][ T5866] panic+0xb9/0xc0 [ 146.439488][ T5866] ? __pfx_panic+0x10/0x10 [ 146.441471][ T5866] ? preempt_schedule_thunk+0x16/0x30 [ 146.443736][ T5866] ? crc32c+0xcd/0x480 [ 146.445479][ T5866] ? preempt_schedule_thunk+0x16/0x30 [ 146.447667][ T5866] ? crc32c+0xcd/0x480 [ 146.449482][ T5866] check_panic_on_warn+0x89/0xb0 [ 146.451593][ T5866] ? crc32c+0xcd/0x480 [ 146.453318][ T5866] end_report+0x6f/0x140 [ 146.455135][ T5866] kasan_report+0x129/0x150 [ 146.457011][ T5866] ? crc32c+0xcd/0x480 [ 146.458775][ T5866] crc32c+0xcd/0x480 [ 146.460470][ T5866] ? xlog_cksum+0x6a/0x100 [ 146.462359][ T5866] xlog_cksum+0x93/0x100 [ 146.464132][ T5866] xlog_recover_process+0x90/0x2f0 [ 146.466281][ T5866] xlog_do_recovery_pass+0x9cd/0xc30 [ 146.468521][ T5866] ? __pfx_xlog_do_recovery_pass+0x10/0x10 [ 146.471035][ T5866] ? kfree+0x1c0/0x660 [ 146.472810][ T5866] xlog_verify_head+0x136/0x440 [ 146.474947][ T5866] xlog_find_tail+0x5ca/0x840 [ 146.476927][ T5866] xlog_recover+0x4b/0x3e0 [ 146.478921][ T5866] xfs_log_mount+0x253/0x3e0 [ 146.480956][ T5866] xfs_mountfs+0xe5e/0x22c0 [ 146.482956][ T5866] ? __pfx_xfs_mountfs+0x10/0x10 [ 146.485095][ T5866] ? trace_xfs_inode_timestamp_range+0x84/0x1e0 [ 146.487847][ T5866] xfs_fs_fill_super+0x11f1/0x1640 [ 146.490054][ T5866] get_tree_bdev_flags+0x40e/0x4d0 [ 146.492234][ T5866] ? __pfx_xfs_fs_fill_super+0x10/0x10 [ 146.494612][ T5866] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 146.497083][ T5866] vfs_get_tree+0x92/0x2a0 [ 146.499068][ T5866] do_new_mount+0x302/0xa10 [ 146.501041][ T5866] ? __pfx_do_new_mount+0x10/0x10 [ 146.503225][ T5866] ? kmem_cache_free+0x197/0x620 [ 146.505348][ T5866] __se_sys_mount+0x313/0x410 [ 146.507418][ T5866] ? __pfx___se_sys_mount+0x10/0x10 [ 146.509665][ T5866] ? __x64_sys_mount+0x20/0xc0 [ 146.511682][ T5866] do_syscall_64+0xec/0xf80 [ 146.513641][ T5866] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.516196][ T5866] ? trace_irq_disable+0x37/0x100 [ 146.518384][ T5866] ? clear_bhb_loop+0x60/0xb0 [ 146.520415][ T5866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.522909][ T5866] RIP: 0033:0x7f9f5f38e90a [ 146.524847][ T5866] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.532943][ T5866] RSP: 002b:00007f9f60198e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 146.536575][ T5866] RAX: ffffffffffffffda RBX: 00007f9f60198ef0 RCX: 00007f9f5f38e90a [ 146.540023][ T5866] RDX: 0000400000000500 RSI: 0000400000000200 RDI: 00007f9f60198eb0 [ 146.543561][ T5866] RBP: 0000400000000500 R08: 00007f9f60198ef0 R09: 0000000002218a5d [ 146.546988][ T5866] R10: 0000000002218a5d R11: 0000000000000246 R12: 0000400000000200 [ 146.550433][ T5866] R13: 00007f9f60198eb0 R14: 0000000000009706 R15: 0000400000000100 [ 146.553933][ T5866] [ 146.555715][ T5866] Kernel Offset: disabled [ 146.557652][ T5866] Rebooting in 86400 seconds..