Warning: Permanently added '[localhost]:4434' (ED25519) to the list of known hosts.
2025/10/07 19:52:34 parsed 1 programs
[ 137.764594][ T5553] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 137.902772][ T1314] ieee802154 phy0 wpan0: encryption failed: -22
[ 137.905586][ T1314] ieee802154 phy1 wpan1: encryption failed: -22
[ 143.039485][ T5580] chnl_net:caif_netlink_parms(): no params data found
[ 143.103844][ T5580] bridge0: port 1(bridge_slave_0) entered blocking state
[ 143.106910][ T5580] bridge0: port 1(bridge_slave_0) entered disabled state
[ 143.110034][ T5580] bridge_slave_0: entered allmulticast mode
[ 143.114855][ T5580] bridge_slave_0: entered promiscuous mode
[ 143.119591][ T5580] bridge0: port 2(bridge_slave_1) entered blocking state
[ 143.123360][ T5580] bridge0: port 2(bridge_slave_1) entered disabled state
[ 143.126595][ T5580] bridge_slave_1: entered allmulticast mode
[ 143.131020][ T5580] bridge_slave_1: entered promiscuous mode
[ 143.154985][ T5580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 143.161973][ T5580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 143.187747][ T5580] team0: Port device team_slave_0 added
[ 143.192746][ T5580] team0: Port device team_slave_1 added
[ 143.212702][ T5580] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 143.216414][ T5580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 143.228087][ T5580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 143.235002][ T5580] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 143.238076][ T5580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 143.251116][ T5580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 143.286268][ T5580] hsr_slave_0: entered promiscuous mode
[ 143.289631][ T5580] hsr_slave_1: entered promiscuous mode
[ 143.754325][ T5580] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 143.771942][ T5580] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 143.783454][ T5580] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 143.805398][ T5580] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 143.859697][ T5580] bridge0: port 2(bridge_slave_1) entered blocking state
[ 143.863125][ T5580] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 143.866825][ T5580] bridge0: port 1(bridge_slave_0) entered blocking state
[ 143.869847][ T5580] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 143.956991][ T1042] bridge0: port 1(bridge_slave_0) entered disabled state
[ 143.982186][ T1042] bridge0: port 2(bridge_slave_1) entered disabled state
[ 144.054140][ T5580] 8021q: adding VLAN 0 to HW filter on device bond0
[ 144.105287][ T5580] 8021q: adding VLAN 0 to HW filter on device team0
[ 144.136636][ T1042] bridge0: port 1(bridge_slave_0) entered blocking state
[ 144.139853][ T1042] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 144.182851][ T1042] bridge0: port 2(bridge_slave_1) entered blocking state
[ 144.186019][ T1042] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 144.258882][ T5580] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 144.653064][ T5580] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 144.736758][ T5580] veth0_vlan: entered promiscuous mode
[ 144.775404][ T5580] veth1_vlan: entered promiscuous mode
[ 144.839275][ T5580] veth0_macvtap: entered promiscuous mode
[ 144.865291][ T5580] veth1_macvtap: entered promiscuous mode
[ 144.912702][ T5580] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 144.942081][ T5580] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 144.961480][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 144.965671][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 144.969515][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 144.980911][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 145.241870][ T1148] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 145.332856][ T1148] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 145.402335][ T1148] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 145.493518][ T1148] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 147.180734][ T1148] bridge_slave_1: left allmulticast mode
[ 147.183240][ T1148] bridge_slave_1: left promiscuous mode
[ 147.185878][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state
[ 147.212072][ T1148] bridge_slave_0: left allmulticast mode
[ 147.214578][ T1148] bridge_slave_0: left promiscuous mode
[ 147.217135][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state
[ 147.711414][ T1148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 147.716822][ T1148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 147.721952][ T1148] bond0 (unregistering): Released all slaves
[ 147.838472][ T1148] hsr_slave_0: left promiscuous mode
[ 147.862344][ T1148] hsr_slave_1: left promiscuous mode
[ 147.865759][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 147.880951][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 147.891231][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 147.895464][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 147.916811][ T1148] veth1_macvtap: left promiscuous mode
[ 147.919258][ T1148] veth0_macvtap: left promiscuous mode
[ 147.931821][ T1148] veth1_vlan: left promiscuous mode
[ 147.934256][ T1148] veth0_vlan: left promiscuous mode
[ 148.479958][ T1148] team0 (unregistering): Port device team_slave_1 removed
[ 148.522958][ T1148] team0 (unregistering): Port device team_slave_0 removed
[ 148.982907][ T4665] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 148.987019][ T4665] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 148.991665][ T4665] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 148.995338][ T4665] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 148.998778][ T4665] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 149.846959][ T1042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 149.864191][ T1042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 149.941823][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 149.946034][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2025/10/07 19:52:53 executed programs: 0
[ 152.620602][ T47] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 152.624668][ T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 152.628495][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 152.634117][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 152.638215][ T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 152.863232][ T5749] chnl_net:caif_netlink_parms(): no params data found
[ 152.928912][ T5749] bridge0: port 1(bridge_slave_0) entered blocking state
[ 152.932462][ T5749] bridge0: port 1(bridge_slave_0) entered disabled state
[ 152.935720][ T5749] bridge_slave_0: entered allmulticast mode
[ 152.939726][ T5749] bridge_slave_0: entered promiscuous mode
[ 152.945499][ T5749] bridge0: port 2(bridge_slave_1) entered blocking state
[ 152.948658][ T5749] bridge0: port 2(bridge_slave_1) entered disabled state
[ 152.952088][ T5749] bridge_slave_1: entered allmulticast mode
[ 152.956870][ T5749] bridge_slave_1: entered promiscuous mode
[ 152.978723][ T5749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 152.985044][ T5749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 153.007799][ T5749] team0: Port device team_slave_0 added
[ 153.012664][ T5749] team0: Port device team_slave_1 added
[ 153.034139][ T5749] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 153.037115][ T5749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 153.048919][ T5749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 153.055407][ T5749] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 153.058446][ T5749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 153.069846][ T5749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 153.103272][ T5749] hsr_slave_0: entered promiscuous mode
[ 153.106941][ T5749] hsr_slave_1: entered promiscuous mode
[ 153.576218][ T5749] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 153.594101][ T5749] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 153.612461][ T5749] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 153.623571][ T5749] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 153.674460][ T5749] bridge0: port 2(bridge_slave_1) entered blocking state
[ 153.677672][ T5749] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 153.681006][ T5749] bridge0: port 1(bridge_slave_0) entered blocking state
[ 153.684149][ T5749] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 153.804541][ T5749] 8021q: adding VLAN 0 to HW filter on device bond0
[ 153.829246][ T5749] 8021q: adding VLAN 0 to HW filter on device team0
[ 153.842231][ T31] bridge0: port 1(bridge_slave_0) entered disabled state
[ 153.851389][ T31] bridge0: port 2(bridge_slave_1) entered disabled state
[ 153.866338][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state
[ 153.869604][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 153.885940][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state
[ 153.889236][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 154.219723][ T5749] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 154.283124][ T5749] veth0_vlan: entered promiscuous mode
[ 154.309727][ T5749] veth1_vlan: entered promiscuous mode
[ 154.361016][ T5749] veth0_macvtap: entered promiscuous mode
[ 154.366622][ T5749] veth1_macvtap: entered promiscuous mode
[ 154.406064][ T5749] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 154.422071][ T5749] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 154.437772][ T1044] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 154.464629][ T1044] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 154.468508][ T1044] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 154.492455][ T1044] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 154.582034][ T1044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 154.585496][ T1044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 154.642086][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 154.646446][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 154.701418][ T47] Bluetooth: hci0: command tx timeout
[ 155.185935][ T5792] loop0: detected capacity change from 0 to 32768
[ 155.198639][ T5792] =======================================================
[ 155.198639][ T5792] WARNING: The mand mount option has been deprecated and
[ 155.198639][ T5792] and is ignored by this kernel. Remove the mand
[ 155.198639][ T5792] option from the mount to silence this warning.
[ 155.198639][ T5792] =======================================================
[ 155.279118][ T5792] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 155.411936][ T5792] ==================================================================
[ 155.415226][ T5792] BUG: KASAN: slab-out-of-bounds in crc32c+0xcd/0x480
[ 155.418212][ T5792] Read of size 8 at addr ffff88804deb3200 by task syz.0.17/5792
[ 155.422416][ T5792]
[ 155.423483][ T5792] CPU: 0 UID: 0 PID: 5792 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 155.423497][ T5792] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 155.423509][ T5792] Call Trace:
[ 155.423517][ T5792]
[ 155.423522][ T5792] dump_stack_lvl+0x189/0x250
[ 155.423538][ T5792] ? __virt_addr_valid+0x1c8/0x5c0
[ 155.423552][ T5792] ? rcu_is_watching+0x15/0xb0
[ 155.423564][ T5792] ? __kasan_check_byte+0x12/0x40
[ 155.423578][ T5792] ? __pfx_dump_stack_lvl+0x10/0x10
[ 155.423588][ T5792] ? rcu_is_watching+0x15/0xb0
[ 155.423599][ T5792] ? lock_release+0x4b/0x3e0
[ 155.423610][ T5792] ? __virt_addr_valid+0x1c8/0x5c0
[ 155.423623][ T5792] ? __virt_addr_valid+0x4a5/0x5c0
[ 155.423637][ T5792] print_report+0xca/0x240
[ 155.423651][ T5792] ? crc32c+0xcd/0x480
[ 155.423665][ T5792] kasan_report+0x118/0x150
[ 155.423678][ T5792] ? crc32c+0xcd/0x480
[ 155.423688][ T5792] crc32c+0xcd/0x480
[ 155.423696][ T5792] ? xlog_cksum+0x6a/0xf0
[ 155.423706][ T5792] xlog_cksum+0x91/0xf0
[ 155.423718][ T5792] xlog_recover_process+0x90/0x2f0
[ 155.423730][ T5792] xlog_do_recovery_pass+0x9cd/0xc30
[ 155.423743][ T5792] ? __pfx_xlog_do_recovery_pass+0x10/0x10
[ 155.423755][ T5792] ? kfree+0x19a/0x6d0
[ 155.423768][ T5792] xlog_verify_head+0x136/0x440
[ 155.423780][ T5792] xlog_find_tail+0x5ca/0x840
[ 155.423797][ T5792] xlog_recover+0x4b/0x3e0
[ 155.423813][ T5792] xfs_log_mount+0x253/0x3e0
[ 155.423833][ T5792] xfs_mountfs+0xe5e/0x22c0
[ 155.423852][ T5792] ? __pfx_xfs_mountfs+0x10/0x10
[ 155.423869][ T5792] ? trace_xfs_inode_timestamp_range+0x84/0x200
[ 155.423880][ T5792] xfs_fs_fill_super+0x11b3/0x1600
[ 155.423890][ T5792] get_tree_bdev_flags+0x40e/0x4d0
[ 155.423899][ T5792] ? __pfx_xfs_fs_fill_super+0x10/0x10
[ 155.423907][ T5792] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 155.423917][ T5792] vfs_get_tree+0x92/0x2b0
[ 155.423925][ T5792] do_new_mount+0x302/0xa10
[ 155.423939][ T5792] ? __pfx_do_new_mount+0x10/0x10
[ 155.423952][ T5792] ? kmem_cache_free+0x19b/0x690
[ 155.423967][ T5792] __se_sys_mount+0x313/0x410
[ 155.423983][ T5792] ? __pfx___se_sys_mount+0x10/0x10
[ 155.424003][ T5792] ? do_syscall_64+0xbe/0xfa0
[ 155.424053][ T5792] ? __x64_sys_mount+0x20/0xc0
[ 155.424062][ T5792] do_syscall_64+0xfa/0xfa0
[ 155.424070][ T5792] ? lockdep_hardirqs_on+0x9c/0x150
[ 155.424081][ T5792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 155.424091][ T5792] ? clear_bhb_loop+0x60/0xb0
[ 155.424103][ T5792] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 155.424114][ T5792] RIP: 0033:0x7fa6e2d9066a
[ 155.424126][ T5792] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 155.424136][ T5792] RSP: 002b:00007fa6e3c09e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 155.424147][ T5792] RAX: ffffffffffffffda RBX: 00007fa6e3c09ef0 RCX: 00007fa6e2d9066a
[ 155.424154][ T5792] RDX: 0000200000000500 RSI: 0000200000000200 RDI: 00007fa6e3c09eb0
[ 155.424161][ T5792] RBP: 0000200000000500 R08: 00007fa6e3c09ef0 R09: 0000000002218a5d
[ 155.424168][ T5792] R10: 0000000002218a5d R11: 0000000000000246 R12: 0000200000000200
[ 155.424175][ T5792] R13: 00007fa6e3c09eb0 R14: 0000000000009706 R15: 0000200000000100
[ 155.424186][ T5792]
[ 155.424190][ T5792]
[ 155.561400][ T5792] Allocated by task 5792:
[ 155.563295][ T5792] kasan_save_track+0x3e/0x80
[ 155.565302][ T5792] __kasan_kmalloc+0x93/0xb0
[ 155.567293][ T5792] __kvmalloc_node_noprof+0x5cd/0x910
[ 155.569657][ T5792] xlog_do_recovery_pass+0x106/0xc30
[ 155.571974][ T5792] xlog_verify_head+0x136/0x440
[ 155.574141][ T5792] xlog_find_tail+0x5ca/0x840
[ 155.576198][ T5792] xlog_recover+0x4b/0x3e0
[ 155.578197][ T5792] xfs_log_mount+0x253/0x3e0
[ 155.580266][ T5792] xfs_mountfs+0xe5e/0x22c0
[ 155.582266][ T5792] xfs_fs_fill_super+0x11b3/0x1600
[ 155.584599][ T5792] get_tree_bdev_flags+0x40e/0x4d0
[ 155.587087][ T5792] vfs_get_tree+0x92/0x2b0
[ 155.589018][ T5792] do_new_mount+0x302/0xa10
[ 155.591066][ T5792] __se_sys_mount+0x313/0x410
[ 155.593073][ T5792] do_syscall_64+0xfa/0xfa0
[ 155.595053][ T5792] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 155.597611][ T5792]
[ 155.598657][ T5792] The buggy address belongs to the object at ffff88804deb3000
[ 155.598657][ T5792] which belongs to the cache kmalloc-512 of size 512
[ 155.604599][ T5792] The buggy address is located 0 bytes to the right of
[ 155.604599][ T5792] allocated 512-byte region [ffff88804deb3000, ffff88804deb3200)
[ 155.610823][ T5792]
[ 155.611897][ T5792] The buggy address belongs to the physical page:
[ 155.614630][ T5792] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4deb2
[ 155.618361][ T5792] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 155.621912][ T5792] ksm flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff)
[ 155.625564][ T5792] page_type: f5(slab)
[ 155.627436][ T5792] raw: 04fff00000000040 ffff88801a441c80 ffffea0001016980 0000000000000003
[ 155.631193][ T5792] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000
[ 155.634795][ T5792] head: 04fff00000000040 ffff88801a441c80 ffffea0001016980 0000000000000003
[ 155.638370][ T5792] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000
[ 155.642091][ T5792] head: 04fff00000000001 ffffea000137ac81 00000000ffffffff 00000000ffffffff
[ 155.645751][ T5792] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[ 155.649451][ T5792] page dumped because: kasan: bad access detected
[ 155.652290][ T5792] page_owner tracks the page as allocated
[ 155.654699][ T5792] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1148, tgid 1148 (kworker/u4:10), ts 153929377395, free_ts 151596303986
[ 155.663822][ T5792] post_alloc_hook+0x240/0x2a0
[ 155.665853][ T5792] get_page_from_freelist+0x2365/0x2440
[ 155.668082][ T5792] __alloc_frozen_pages_noprof+0x181/0x370
[ 155.670613][ T5792] alloc_pages_mpol+0x232/0x4a0
[ 155.672739][ T5792] allocate_slab+0x96/0x3a0
[ 155.674755][ T5792] ___slab_alloc+0xe94/0x1920
[ 155.676820][ T5792] __slab_alloc+0x65/0x100
[ 155.678873][ T5792] __kmalloc_noprof+0x471/0x7f0
[ 155.681057][ T5792] fib6_info_alloc+0x30/0xf0
[ 155.683637][ T5792] ip6_route_info_create+0x142/0x860
[ 155.686258][ T5792] addrconf_f6i_alloc+0x1d2/0x450
[ 155.688827][ T5792] ipv6_add_addr+0x56e/0x1090
[ 155.690994][ T5792] addrconf_add_linklocal+0x28c/0x6c0
[ 155.693313][ T5792] addrconf_addr_gen+0x490/0x580
[ 155.695477][ T5792] addrconf_init_auto_addrs+0x62d/0xa30
[ 155.697846][ T5792] addrconf_notify+0xacc/0x1010
[ 155.700009][ T5792] page last free pid 5730 tgid 5730 stack trace:
[ 155.702776][ T5792] __free_frozen_pages+0xbc4/0xd30
[ 155.704996][ T5792] __slab_free+0x2e7/0x390
[ 155.706947][ T5792] qlist_free_all+0x97/0x140
[ 155.708913][ T5792] kasan_quarantine_reduce+0x148/0x160
[ 155.711353][ T5792] __kasan_slab_alloc+0x22/0x80
[ 155.713560][ T5792] kmem_cache_alloc_lru_noprof+0x35d/0x6d0
[ 155.716159][ T5792] shmem_alloc_inode+0x28/0x40
[ 155.718260][ T5792] alloc_inode+0x67/0x1b0
[ 155.720090][ T5792] new_inode+0x22/0x170
[ 155.721898][ T5792] shmem_get_inode+0x346/0xe90
[ 155.723915][ T5792] shmem_mknod+0x18c/0x3e0
[ 155.725824][ T5792] shmem_mkdir+0x33/0x70
[ 155.727598][ T5792] vfs_mkdir+0x303/0x510
[ 155.729488][ T5792] do_mkdirat+0x247/0x590
[ 155.731441][ T5792] __x64_sys_mkdirat+0x87/0xa0
[ 155.733485][ T5792] do_syscall_64+0xfa/0xfa0
[ 155.735425][ T5792]
[ 155.736509][ T5792] Memory state around the buggy address:
[ 155.738982][ T5792] ffff88804deb3100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 155.742485][ T5792] ffff88804deb3180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 155.746008][ T5792] >ffff88804deb3200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 155.749480][ T5792] ^
[ 155.751313][ T5792] ffff88804deb3280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 155.754823][ T5792] ffff88804deb3300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 155.758338][ T5792] ==================================================================
[ 155.931031][ T5792] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 155.934304][ T5792] CPU: 0 UID: 0 PID: 5792 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 155.938187][ T5792] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 155.942770][ T5792] Call Trace:
[ 155.944277][ T5792]
[ 155.945597][ T5792] dump_stack_lvl+0x99/0x250
[ 155.947642][ T5792] ? __asan_memcpy+0x40/0x70
[ 155.949712][ T5792] ? __pfx_dump_stack_lvl+0x10/0x10
[ 155.952027][ T5792] ? __pfx__printk+0x10/0x10
[ 155.954100][ T5792] vpanic+0x237/0x6d0
[ 155.955887][ T5792] ? __pfx_vpanic+0x10/0x10
[ 155.957926][ T5792] ? preempt_schedule_common+0x83/0xd0
[ 155.960254][ T5792] ? preempt_schedule+0xae/0xc0
[ 155.962375][ T5792] panic+0xb9/0xc0
[ 155.964038][ T5792] ? __pfx_panic+0x10/0x10
[ 155.966055][ T5792] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 155.968815][ T5792] ? crc32c+0xcd/0x480
[ 155.970701][ T5792] check_panic_on_warn+0x89/0xb0
[ 155.972898][ T5792] ? crc32c+0xcd/0x480
[ 155.974748][ T5792] end_report+0x78/0x160
[ 155.976651][ T5792] kasan_report+0x129/0x150
[ 155.978712][ T5792] ? crc32c+0xcd/0x480
[ 155.980556][ T5792] crc32c+0xcd/0x480
[ 155.982261][ T5792] ? xlog_cksum+0x6a/0xf0
[ 155.984077][ T5792] xlog_cksum+0x91/0xf0
[ 155.985915][ T5792] xlog_recover_process+0x90/0x2f0
[ 155.988146][ T5792] xlog_do_recovery_pass+0x9cd/0xc30
[ 155.990481][ T5792] ? __pfx_xlog_do_recovery_pass+0x10/0x10
[ 155.992984][ T5792] ? kfree+0x19a/0x6d0
[ 155.994813][ T5792] xlog_verify_head+0x136/0x440
[ 155.996884][ T5792] xlog_find_tail+0x5ca/0x840
[ 155.998925][ T5792] xlog_recover+0x4b/0x3e0
[ 156.000864][ T5792] xfs_log_mount+0x253/0x3e0
[ 156.002987][ T5792] xfs_mountfs+0xe5e/0x22c0
[ 156.005075][ T5792] ? __pfx_xfs_mountfs+0x10/0x10
[ 156.007340][ T5792] ? trace_xfs_inode_timestamp_range+0x84/0x200
[ 156.010103][ T5792] xfs_fs_fill_super+0x11b3/0x1600
[ 156.012362][ T5792] get_tree_bdev_flags+0x40e/0x4d0
[ 156.014616][ T5792] ? __pfx_xfs_fs_fill_super+0x10/0x10
[ 156.017019][ T5792] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 156.019522][ T5792] vfs_get_tree+0x92/0x2b0
[ 156.021562][ T5792] do_new_mount+0x302/0xa10
[ 156.023561][ T5792] ? __pfx_do_new_mount+0x10/0x10
[ 156.025790][ T5792] ? kmem_cache_free+0x19b/0x690
[ 156.028006][ T5792] __se_sys_mount+0x313/0x410
[ 156.030101][ T5792] ? __pfx___se_sys_mount+0x10/0x10
[ 156.032383][ T5792] ? do_syscall_64+0xbe/0xfa0
[ 156.034450][ T5792] ? __x64_sys_mount+0x20/0xc0
[ 156.036478][ T5792] do_syscall_64+0xfa/0xfa0
[ 156.038502][ T5792] ? lockdep_hardirqs_on+0x9c/0x150
[ 156.040836][ T5792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 156.043496][ T5792] ? clear_bhb_loop+0x60/0xb0
[ 156.045609][ T5792] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 156.048194][ T5792] RIP: 0033:0x7fa6e2d9066a
[ 156.050259][ T5792] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 156.058350][ T5792] RSP: 002b:00007fa6e3c09e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 156.061838][ T5792] RAX: ffffffffffffffda RBX: 00007fa6e3c09ef0 RCX: 00007fa6e2d9066a
[ 156.065146][ T5792] RDX: 0000200000000500 RSI: 0000200000000200 RDI: 00007fa6e3c09eb0
[ 156.068685][ T5792] RBP: 0000200000000500 R08: 00007fa6e3c09ef0 R09: 0000000002218a5d
[ 156.072221][ T5792] R10: 0000000002218a5d R11: 0000000000000246 R12: 0000200000000200
[ 156.075730][ T5792] R13: 00007fa6e3c09eb0 R14: 0000000000009706 R15: 0000200000000100
[ 156.079243][ T5792]
[ 156.080978][ T5792] Kernel Offset: disabled
[ 156.082879][ T5792] Rebooting in 86400 seconds..