[ 132.878422][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[ 132.878514][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
Warning: Permanently added '10.128.1.173' (ED25519) to the list of known hosts.
2025/11/06 04:52:41 parsed 1 programs
[ 140.273402][ T6159] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 143.672187][ T1178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 143.672210][ T1178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 143.830519][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 143.830539][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 147.227009][ T6211] chnl_net:caif_netlink_parms(): no params data found
[ 147.593287][ T6211] bridge0: port 1(bridge_slave_0) entered blocking state
[ 147.593468][ T6211] bridge0: port 1(bridge_slave_0) entered disabled state
[ 147.593642][ T6211] bridge_slave_0: entered allmulticast mode
[ 147.595707][ T6211] bridge_slave_0: entered promiscuous mode
[ 147.598199][ T6211] bridge0: port 2(bridge_slave_1) entered blocking state
[ 147.598392][ T6211] bridge0: port 2(bridge_slave_1) entered disabled state
[ 147.598548][ T6211] bridge_slave_1: entered allmulticast mode
[ 147.609001][ T6211] bridge_slave_1: entered promiscuous mode
[ 147.757190][ T6211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 147.763780][ T6211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 148.022980][ T6211] team0: Port device team_slave_0 added
[ 148.133474][ T6211] team0: Port device team_slave_1 added
[ 148.382297][ T6211] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 148.382312][ T6211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 148.382333][ T6211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 148.384729][ T6211] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 148.384741][ T6211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 148.384755][ T6211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 148.599548][ T6211] hsr_slave_0: entered promiscuous mode
[ 148.600337][ T6211] hsr_slave_1: entered promiscuous mode
[ 150.120146][ T6211] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 150.161826][ T6211] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 150.196132][ T6211] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 150.239162][ T6211] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 150.388185][ T6211] 8021q: adding VLAN 0 to HW filter on device bond0
[ 150.417905][ T6211] 8021q: adding VLAN 0 to HW filter on device team0
[ 150.433761][ T1178] bridge0: port 1(bridge_slave_0) entered blocking state
[ 150.433890][ T1178] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 150.451676][ T1539] bridge0: port 2(bridge_slave_1) entered blocking state
[ 150.451820][ T1539] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 150.815731][ T6211] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 150.886807][ T6211] veth0_vlan: entered promiscuous mode
[ 150.903977][ T6211] veth1_vlan: entered promiscuous mode
[ 150.956681][ T6211] veth0_macvtap: entered promiscuous mode
[ 150.964193][ T6211] veth1_macvtap: entered promiscuous mode
[ 150.986839][ T6211] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 150.999431][ T6211] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 151.012838][ T1539] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 151.013069][ T1539] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 151.013105][ T1539] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 151.013139][ T1539] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 151.859336][ T1178] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 152.135855][ T1178] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 152.552742][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 152.555360][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 152.556214][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 152.558934][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 152.560910][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 153.065482][ T1178] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 153.876801][ T1178] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 154.291474][ T1178] bridge_slave_1: left allmulticast mode
[ 154.291501][ T1178] bridge_slave_1: left promiscuous mode
[ 154.291764][ T1178] bridge0: port 2(bridge_slave_1) entered disabled state
[ 154.393120][ T1178] bridge_slave_0: left allmulticast mode
[ 154.393148][ T1178] bridge_slave_0: left promiscuous mode
[ 154.393392][ T1178] bridge0: port 1(bridge_slave_0) entered disabled state
2025/11/06 04:52:59 executed programs: 0
[ 154.699195][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 154.701888][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 154.703235][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 154.704310][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 154.705281][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 156.311832][ T1178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 156.372020][ T1178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 156.393854][ T1178] bond0 (unregistering): Released all slaves
[ 156.781205][ T1178] hsr_slave_0: left promiscuous mode
[ 156.791295][ T61] Bluetooth: hci0: command tx timeout
[ 156.832636][ T1178] hsr_slave_1: left promiscuous mode
[ 156.833634][ T1178] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 156.833657][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 156.892223][ T1178] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 156.892250][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 156.987335][ T1178] veth1_macvtap: left promiscuous mode
[ 156.987402][ T1178] veth0_macvtap: left promiscuous mode
[ 156.987552][ T1178] veth1_vlan: left promiscuous mode
[ 156.987653][ T1178] veth0_vlan: left promiscuous mode
[ 158.873396][ T61] Bluetooth: hci0: command tx timeout
[ 159.061836][ T1178] team0 (unregistering): Port device team_slave_1 removed
[ 159.261949][ T1178] team0 (unregistering): Port device team_slave_0 removed
[ 160.951214][ T61] Bluetooth: hci0: command tx timeout
[ 161.286047][ T6401] chnl_net:caif_netlink_parms(): no params data found
[ 161.672664][ T6401] bridge0: port 1(bridge_slave_0) entered blocking state
[ 161.672914][ T6401] bridge0: port 1(bridge_slave_0) entered disabled state
[ 161.673130][ T6401] bridge_slave_0: entered allmulticast mode
[ 161.676445][ T6401] bridge_slave_0: entered promiscuous mode
[ 161.680071][ T6401] bridge0: port 2(bridge_slave_1) entered blocking state
[ 161.680299][ T6401] bridge0: port 2(bridge_slave_1) entered disabled state
[ 161.680477][ T6401] bridge_slave_1: entered allmulticast mode
[ 161.730001][ T6401] bridge_slave_1: entered promiscuous mode
[ 161.912345][ T6401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 161.935862][ T6401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 162.104958][ T6401] team0: Port device team_slave_0 added
[ 162.114674][ T6401] team0: Port device team_slave_1 added
[ 162.443347][ T6401] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 162.443362][ T6401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 162.443388][ T6401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 162.445930][ T6401] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 162.445943][ T6401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 162.445968][ T6401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 162.940051][ T6401] hsr_slave_0: entered promiscuous mode
[ 162.940804][ T6401] hsr_slave_1: entered promiscuous mode
[ 163.031409][ T61] Bluetooth: hci0: command tx timeout
[ 164.706734][ T6401] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 164.746149][ T6401] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 164.786429][ T6401] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 164.827884][ T6401] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 164.986586][ T6401] 8021q: adding VLAN 0 to HW filter on device bond0
[ 165.020594][ T6401] 8021q: adding VLAN 0 to HW filter on device team0
[ 165.037744][ T1178] bridge0: port 1(bridge_slave_0) entered blocking state
[ 165.038226][ T1178] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 165.067705][ T1178] bridge0: port 2(bridge_slave_1) entered blocking state
[ 165.067901][ T1178] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 165.395373][ T6401] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 165.488628][ T6401] veth0_vlan: entered promiscuous mode
[ 165.506016][ T6401] veth1_vlan: entered promiscuous mode
[ 165.553153][ T6401] veth0_macvtap: entered promiscuous mode
[ 165.558968][ T6401] veth1_macvtap: entered promiscuous mode
[ 165.588811][ T6401] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 165.607803][ T6401] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 165.620210][ T1178] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 165.620469][ T1178] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 165.620503][ T1178] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 165.620538][ T1178] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 165.845026][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 165.845047][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 165.919835][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 165.919855][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2025/11/06 04:53:10 executed programs: 2
[ 166.548345][ T6560] loop0: detected capacity change from 0 to 32768
[ 166.560301][ T6560] =======================================================
[ 166.560301][ T6560] WARNING: The mand mount option has been deprecated and
[ 166.560301][ T6560] and is ignored by this kernel. Remove the mand
[ 166.560301][ T6560] option from the mount to silence this warning.
[ 166.560301][ T6560] =======================================================
[ 166.660466][ T6560] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 166.754117][ T6560] ==================================================================
[ 166.754133][ T6560] BUG: KASAN: slab-out-of-bounds in crc32c+0xcd/0x480
[ 166.754161][ T6560] Read of size 8 at addr ffff888046df6200 by task syz.0.17/6560
[ 166.754176][ T6560]
[ 166.754194][ T6560] CPU: 0 UID: 0 PID: 6560 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 166.754207][ T6560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 166.754218][ T6560] Call Trace:
[ 166.754225][ T6560]
[ 166.754230][ T6560] dump_stack_lvl+0x189/0x250
[ 166.754248][ T6560] ? __virt_addr_valid+0x1c8/0x5c0
[ 166.754264][ T6560] ? rcu_is_watching+0x15/0xb0
[ 166.754272][ T6560] ? __kasan_check_byte+0x12/0x40
[ 166.754287][ T6560] ? __pfx_dump_stack_lvl+0x10/0x10
[ 166.754301][ T6560] ? rcu_is_watching+0x15/0xb0
[ 166.754310][ T6560] ? lock_release+0x4b/0x3e0
[ 166.754324][ T6560] ? __virt_addr_valid+0x1c8/0x5c0
[ 166.754338][ T6560] ? __virt_addr_valid+0x4a5/0x5c0
[ 166.754353][ T6560] print_report+0xca/0x240
[ 166.754367][ T6560] ? crc32c+0xcd/0x480
[ 166.754375][ T6560] kasan_report+0x118/0x150
[ 166.754389][ T6560] ? crc32c+0xcd/0x480
[ 166.754399][ T6560] crc32c+0xcd/0x480
[ 166.754407][ T6560] ? xlog_cksum+0x6a/0xf0
[ 166.754421][ T6560] xlog_cksum+0x91/0xf0
[ 166.754434][ T6560] xlog_recover_process+0x90/0x2f0
[ 166.754447][ T6560] xlog_do_recovery_pass+0x9cd/0xc30
[ 166.754460][ T6560] ? __pfx_xlog_do_recovery_pass+0x10/0x10
[ 166.754474][ T6560] ? kfree+0x197/0x950
[ 166.754487][ T6560] xlog_verify_head+0x136/0x440
[ 166.754499][ T6560] xlog_find_tail+0x5b4/0x830
[ 166.754511][ T6560] xlog_recover+0x4b/0x3e0
[ 166.754523][ T6560] xfs_log_mount+0x253/0x3e0
[ 166.754536][ T6560] xfs_mountfs+0xe5e/0x22c0
[ 166.754548][ T6560] ? __pfx_xfs_mountfs+0x10/0x10
[ 166.754559][ T6560] ? trace_xfs_inode_timestamp_range+0x84/0x200
[ 166.754574][ T6560] xfs_fs_fill_super+0x1185/0x15d0
[ 166.754590][ T6560] get_tree_bdev_flags+0x40e/0x4d0
[ 166.754603][ T6560] ? __pfx_xfs_fs_fill_super+0x10/0x10
[ 166.754616][ T6560] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 166.754628][ T6560] ? cap_capable+0x11f/0x460
[ 166.754637][ T6560] ? safesetid_security_capable+0xa9/0x1a0
[ 166.754648][ T6560] vfs_get_tree+0x92/0x2b0
[ 166.754661][ T6560] do_new_mount+0x302/0xa10
[ 166.754676][ T6560] ? __pfx_do_new_mount+0x10/0x10
[ 166.754692][ T6560] __se_sys_mount+0x313/0x410
[ 166.754707][ T6560] ? __pfx___se_sys_mount+0x10/0x10
[ 166.754721][ T6560] ? do_syscall_64+0xbe/0xfa0
[ 166.754734][ T6560] ? __x64_sys_mount+0x20/0xc0
[ 166.754748][ T6560] do_syscall_64+0xfa/0xfa0
[ 166.754760][ T6560] ? lockdep_hardirqs_on+0x9c/0x150
[ 166.754779][ T6560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 166.754789][ T6560] ? clear_bhb_loop+0x60/0xb0
[ 166.754800][ T6560] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 166.754810][ T6560] RIP: 0033:0x7f0300dc034a
[ 166.754823][ T6560] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 166.754832][ T6560] RSP: 002b:00007f0300425e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 166.754844][ T6560] RAX: ffffffffffffffda RBX: 00007f0300425ef0 RCX: 00007f0300dc034a
[ 166.754852][ T6560] RDX: 0000200000000500 RSI: 0000200000000200 RDI: 00007f0300425eb0
[ 166.754859][ T6560] RBP: 0000200000000500 R08: 00007f0300425ef0 R09: 0000000002218a5d
[ 166.754866][ T6560] R10: 0000000002218a5d R11: 0000000000000246 R12: 0000200000000200
[ 166.754873][ T6560] R13: 00007f0300425eb0 R14: 00000000000096bf R15: 0000200000000380
[ 166.754884][ T6560]
[ 166.754887][ T6560]
[ 166.754892][ T6560] Allocated by task 6560:
[ 166.754897][ T6560] kasan_save_track+0x3e/0x80
[ 166.754909][ T6560] __kasan_kmalloc+0x93/0xb0
[ 166.754920][ T6560] __kvmalloc_node_noprof+0x3fd/0x920
[ 166.754933][ T6560] xlog_do_recovery_pass+0x106/0xc30
[ 166.754942][ T6560] xlog_verify_head+0x136/0x440
[ 166.754950][ T6560] xlog_find_tail+0x5b4/0x830
[ 166.754958][ T6560] xlog_recover+0x4b/0x3e0
[ 166.754965][ T6560] xfs_log_mount+0x253/0x3e0
[ 166.754975][ T6560] xfs_mountfs+0xe5e/0x22c0
[ 166.754982][ T6560] xfs_fs_fill_super+0x1185/0x15d0
[ 166.754995][ T6560] get_tree_bdev_flags+0x40e/0x4d0
[ 166.755005][ T6560] vfs_get_tree+0x92/0x2b0
[ 166.755016][ T6560] do_new_mount+0x302/0xa10
[ 166.755027][ T6560] __se_sys_mount+0x313/0x410
[ 166.755039][ T6560] do_syscall_64+0xfa/0xfa0
[ 166.755051][ T6560] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 166.755059][ T6560]
[ 166.755062][ T6560] The buggy address belongs to the object at ffff888046df6000
[ 166.755062][ T6560] which belongs to the cache kmalloc-512 of size 512
[ 166.755071][ T6560] The buggy address is located 0 bytes to the right of
[ 166.755071][ T6560] allocated 512-byte region [ffff888046df6000, ffff888046df6200)
[ 166.755082][ T6560]
[ 166.755084][ T6560] The buggy address belongs to the physical page:
[ 166.755095][ T6560] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x46df4
[ 166.755105][ T6560] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 166.755113][ T6560] anon flags: 0x80000000000040(head|node=0|zone=1)
[ 166.755124][ T6560] page_type: f5(slab)
[ 166.755133][ T6560] raw: 0080000000000040 ffff88813ff26c80 0000000000000000 dead000000000001
[ 166.755141][ T6560] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[ 166.755150][ T6560] head: 0080000000000040 ffff88813ff26c80 0000000000000000 dead000000000001
[ 166.755158][ T6560] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[ 166.755166][ T6560] head: 0080000000000002 ffffea00011b7d01 00000000ffffffff 00000000ffffffff
[ 166.755174][ T6560] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000004
[ 166.755179][ T6560] page dumped because: kasan: bad access detected
[ 166.755186][ T6560] page_owner tracks the page as allocated
[ 166.755190][ T6560] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5902, tgid 5902 (syz-executor), ts 98500222769, free_ts 91905063867
[ 166.755209][ T6560] post_alloc_hook+0x240/0x2a0
[ 166.755221][ T6560] get_page_from_freelist+0x28c0/0x2960
[ 166.755235][ T6560] __alloc_frozen_pages_noprof+0x181/0x370
[ 166.755249][ T6560] alloc_pages_mpol+0xd1/0x380
[ 166.755261][ T6560] allocate_slab+0x96/0x350
[ 166.755270][ T6560] ___slab_alloc+0xb12/0x13f0
[ 166.755278][ T6560] __slab_alloc+0xc6/0x1f0
[ 166.755285][ T6560] __kmalloc_noprof+0x14b/0x7d0
[ 166.755296][ T6560] fib6_info_alloc+0x30/0xf0
[ 166.755310][ T6560] ip6_route_net_init+0x85/0x7a0
[ 166.755323][ T6560] ops_init+0x35c/0x5c0
[ 166.755331][ T6560] setup_net+0xfe/0x320
[ 166.755338][ T6560] copy_net_ns+0x34e/0x4e0
[ 166.755345][ T6560] create_new_namespaces+0x3f3/0x720
[ 166.755356][ T6560] unshare_nsproxy_namespaces+0x11c/0x170
[ 166.755366][ T6560] ksys_unshare+0x4c8/0x8c0
[ 166.755379][ T6560] page last free pid 5845 tgid 5845 stack trace:
[ 166.755385][ T6560] __free_frozen_pages+0xfb6/0x1140
[ 166.755397][ T6560] vfree+0x2ad/0x470
[ 166.755407][ T6560] kcov_close+0x2e/0x60
[ 166.755420][ T6560] __fput+0x45b/0xa80
[ 166.755428][ T6560] task_work_run+0x1d4/0x260
[ 166.755435][ T6560] do_exit+0x6b5/0x2300
[ 166.755448][ T6560] do_group_exit+0x21c/0x2d0
[ 166.755456][ T6560] get_signal+0x125d/0x1310
[ 166.755466][ T6560] arch_do_signal_or_restart+0xa0/0x790
[ 166.755475][ T6560] exit_to_user_mode_loop+0x72/0x130
[ 166.755487][ T6560] do_syscall_64+0x2bd/0xfa0
[ 166.755499][ T6560] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 166.755507][ T6560]
[ 166.755509][ T6560] Memory state around the buggy address:
[ 166.755517][ T6560] ffff888046df6100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 166.755523][ T6560] ffff888046df6180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 166.755529][ T6560] >ffff888046df6200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 166.755534][ T6560] ^
[ 166.755539][ T6560] ffff888046df6280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 166.755545][ T6560] ffff888046df6300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 166.755550][ T6560] ==================================================================
[ 166.755560][ T6560] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 166.755567][ T6560] CPU: 0 UID: 0 PID: 6560 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 166.755578][ T6560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 166.755584][ T6560] Call Trace:
[ 166.755587][ T6560]
[ 166.755591][ T6560] dump_stack_lvl+0x99/0x250
[ 166.755606][ T6560] ? __asan_memcpy+0x40/0x70
[ 166.755617][ T6560] ? __pfx_dump_stack_lvl+0x10/0x10
[ 166.755631][ T6560] ? __pfx__printk+0x10/0x10
[ 166.755645][ T6560] vpanic+0x237/0x6d0
[ 166.755655][ T6560] ? __pfx_vpanic+0x10/0x10
[ 166.755666][ T6560] panic+0xb9/0xc0
[ 166.755674][ T6560] ? __pfx_panic+0x10/0x10
[ 166.755683][ T6560] ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 166.755697][ T6560] ? lockdep_hardirqs_on+0x9c/0x150
[ 166.755710][ T6560] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 166.755724][ T6560] ? crc32c+0xcd/0x480
[ 166.755733][ T6560] check_panic_on_warn+0x89/0xb0
[ 166.755742][ T6560] ? crc32c+0xcd/0x480
[ 166.755750][ T6560] end_report+0x78/0x160
[ 166.755769][ T6560] kasan_report+0x129/0x150
[ 166.755783][ T6560] ? crc32c+0xcd/0x480
[ 166.755793][ T6560] crc32c+0xcd/0x480
[ 166.755801][ T6560] ? xlog_cksum+0x6a/0xf0
[ 166.755813][ T6560] xlog_cksum+0x91/0xf0
[ 166.755826][ T6560] xlog_recover_process+0x90/0x2f0
[ 166.755838][ T6560] xlog_do_recovery_pass+0x9cd/0xc30
[ 166.755851][ T6560] ? __pfx_xlog_do_recovery_pass+0x10/0x10
[ 166.755865][ T6560] ? kfree+0x197/0x950
[ 166.755877][ T6560] xlog_verify_head+0x136/0x440
[ 166.755889][ T6560] xlog_find_tail+0x5b4/0x830
[ 166.755900][ T6560] xlog_recover+0x4b/0x3e0
[ 166.755910][ T6560] xfs_log_mount+0x253/0x3e0
[ 166.755923][ T6560] xfs_mountfs+0xe5e/0x22c0
[ 166.755934][ T6560] ? __pfx_xfs_mountfs+0x10/0x10
[ 166.755945][ T6560] ? trace_xfs_inode_timestamp_range+0x84/0x200
[ 166.755960][ T6560] xfs_fs_fill_super+0x1185/0x15d0
[ 166.755975][ T6560] get_tree_bdev_flags+0x40e/0x4d0
[ 166.755987][ T6560] ? __pfx_xfs_fs_fill_super+0x10/0x10
[ 166.756000][ T6560] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 166.756012][ T6560] ? cap_capable+0x11f/0x460
[ 166.756021][ T6560] ? safesetid_security_capable+0xa9/0x1a0
[ 166.756032][ T6560] vfs_get_tree+0x92/0x2b0
[ 166.756044][ T6560] do_new_mount+0x302/0xa10
[ 166.756058][ T6560] ? __pfx_do_new_mount+0x10/0x10
[ 166.756075][ T6560] __se_sys_mount+0x313/0x410
[ 166.756090][ T6560] ? __pfx___se_sys_mount+0x10/0x10
[ 166.756104][ T6560] ? do_syscall_64+0xbe/0xfa0
[ 166.756116][ T6560] ? __x64_sys_mount+0x20/0xc0
[ 166.756130][ T6560] do_syscall_64+0xfa/0xfa0
[ 166.756142][ T6560] ? lockdep_hardirqs_on+0x9c/0x150
[ 166.756154][ T6560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 166.756164][ T6560] ? clear_bhb_loop+0x60/0xb0
[ 166.756174][ T6560] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 166.756184][ T6560] RIP: 0033:0x7f0300dc034a
[ 166.756191][ T6560] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 166.756199][ T6560] RSP: 002b:00007f0300425e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 166.756209][ T6560] RAX: ffffffffffffffda RBX: 00007f0300425ef0 RCX: 00007f0300dc034a
[ 166.756217][ T6560] RDX: 0000200000000500 RSI: 0000200000000200 RDI: 00007f0300425eb0
[ 166.756224][ T6560] RBP: 0000200000000500 R08: 00007f0300425ef0 R09: 0000000002218a5d
[ 166.756231][ T6560] R10: 0000000002218a5d R11: 0000000000000246 R12: 0000200000000200
[ 166.756237][ T6560] R13: 00007f0300425eb0 R14: 00000000000096bf R15: 0000200000000380
[ 166.756248][ T6560]
[ 166.756517][ T6560] Kernel Offset: disabled