[ 58.673384][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.688842][ T30] device veth1_macvtap left promiscuous mode [ 58.696862][ T30] device veth0_macvtap left promiscuous mode [ 58.704647][ T30] device veth1_vlan left promiscuous mode [ 58.712703][ T30] device veth0_vlan left promiscuous mode [ 58.943124][ T30] team0 (unregistering): Port device team_slave_1 removed [ 58.959777][ T30] team0 (unregistering): Port device team_slave_0 removed [ 58.971539][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.985219][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 59.038826][ T30] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.15.207' (ECDSA) to the list of known hosts. 2023/02/22 00:18:23 ignoring optional flag "sandboxArg"="0" 2023/02/22 00:18:23 parsed 1 programs 2023/02/22 00:18:23 executed programs: 0 [ 73.693968][ T4390] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.702767][ T4390] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.712397][ T4390] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.720999][ T4390] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.728966][ T4390] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.738212][ T4390] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.846882][ T5486] chnl_net:caif_netlink_parms(): no params data found [ 73.905661][ T5486] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.913371][ T5486] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.922040][ T5486] device bridge_slave_0 entered promiscuous mode [ 73.931532][ T5486] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.939194][ T5486] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.947842][ T5486] device bridge_slave_1 entered promiscuous mode [ 73.977705][ T5486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.990474][ T5486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.024866][ T5486] team0: Port device team_slave_0 added [ 74.034120][ T5486] team0: Port device team_slave_1 added [ 74.059204][ T5486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.068612][ T5486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.098714][ T5486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.113777][ T5486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.122989][ T5486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.152070][ T5486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.195520][ T5486] device hsr_slave_0 entered promiscuous mode [ 74.205037][ T5486] device hsr_slave_1 entered promiscuous mode [ 74.813909][ T5486] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.824597][ T5486] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.837405][ T5486] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.848400][ T5486] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.877076][ T5486] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.884476][ T5486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.892886][ T5486] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.900316][ T5486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.925574][ T5141] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.935593][ T5141] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.000036][ T5486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.018789][ T5141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.028156][ T5141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.040402][ T5486] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.055280][ T5141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.065127][ T5141] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.075855][ T5141] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.083179][ T5141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.104532][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.115457][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.125039][ T4733] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.132713][ T4733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.141332][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.151495][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.173832][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.184028][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.194067][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.203079][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.214294][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.224142][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.238211][ T5486] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.250165][ T5486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.262533][ T5526] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.272623][ T5526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.282309][ T5526] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.451325][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.458959][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.473415][ T5486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.497775][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.508714][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.532106][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.544684][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.557049][ T5486] device veth0_vlan entered promiscuous mode [ 75.565204][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.573994][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.587098][ T5486] device veth1_vlan entered promiscuous mode [ 75.612513][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.622101][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.630469][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.641198][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.653709][ T5486] device veth0_macvtap entered promiscuous mode [ 75.666856][ T5486] device veth1_macvtap entered promiscuous mode [ 75.687163][ T5486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.696251][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.705794][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.715274][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.724993][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.738556][ T5486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.747151][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.757354][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.769219][ T5486] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.780948][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 75.790440][ T5486] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.800827][ T5486] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.810131][ T5486] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.880545][ T976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.891925][ T976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.908391][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.912091][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.924263][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.940299][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.318337][ T5563] loop0: detected capacity change from 0 to 32768 [ 76.343813][ T5563] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 76.470131][ T5563] XFS (loop0): Torn write (CRC failure) detected at log block 0x180. Truncating head block from 0x200. [ 76.515682][ T5563] XFS (loop0): Starting recovery (logdev: internal) [ 76.548196][ T5563] ================================================================== [ 76.556917][ T5563] BUG: KASAN: slab-out-of-bounds in xfs_btree_lookup_get_block+0x12d/0x680 [ 76.565522][ T5563] Read of size 8 at addr ffff888070481258 by task syz-executor.0/5563 [ 76.574104][ T5563] [ 76.576442][ T5563] CPU: 0 PID: 5563 Comm: syz-executor.0 Not tainted 6.2.0-syzkaller #0 [ 76.584905][ T5563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 76.594965][ T5563] Call Trace: [ 76.598251][ T5563] [ 76.601183][ T5563] dump_stack_lvl+0x12e/0x1d0 [ 76.605928][ T5563] ? irq_work_queue+0x66/0xb0 [ 76.611752][ T5563] ? nf_tcp_handle_invalid+0x4e0/0x4e0 [ 76.617377][ T5563] ? panic+0x500/0x500 [ 76.621468][ T5563] ? _printk+0xab/0xf0 [ 76.625571][ T5563] print_report+0x163/0x4c0 [ 76.630131][ T5563] ? xfs_btree_lookup_get_block+0x12d/0x680 [ 76.636046][ T5563] kasan_report+0xce/0x100 [ 76.640611][ T5563] ? xfs_btree_lookup_get_block+0x12d/0x680 [ 76.646608][ T5563] xfs_btree_lookup_get_block+0x12d/0x680 [ 76.652647][ T5563] ? xfs_btree_decrement+0xa40/0xa40 [ 76.658052][ T5563] ? lockdep_hardirqs_on_prepare+0x418/0x780 [ 76.664307][ T5563] ? print_irqtrace_events+0x220/0x220 [ 76.669883][ T5563] xfs_btree_lookup+0x2f7/0xfe0 [ 76.674748][ T5563] ? _raw_spin_unlock_irqrestore+0x8f/0x120 [ 76.680745][ T5563] ? stack_trace_save+0x10a/0x1e0 [ 76.685780][ T5563] ? xfs_btree_lookup_get_block+0x680/0x680 [ 76.692126][ T5563] ? __stack_depot_save+0x3f9/0x470 [ 76.697623][ T5563] ? kasan_set_track+0x55/0x70 [ 76.702409][ T5563] ? kasan_set_track+0x40/0x70 [ 76.707275][ T5563] ? __kasan_slab_alloc+0x69/0x80 [ 76.712308][ T5563] ? slab_post_alloc_hook+0x68/0x3a0 [ 76.717604][ T5563] ? kmem_cache_alloc+0x12c/0x280 [ 76.722731][ T5563] ? xfs_refcount_recover_cow_leftovers+0x1e0/0xc00 [ 76.731393][ T5563] ? xfs_reflink_recover_cow+0x7e/0x140 [ 76.737043][ T5563] ? xlog_recover_finish+0x71f/0x7f0 [ 76.742693][ T5563] ? xfs_log_mount_finish+0x1c1/0x360 [ 76.748863][ T5563] xfs_btree_simple_query_range+0xde/0x5a0 [ 76.755191][ T5563] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 76.761582][ T5563] ? xfs_refcount_recover_cow_leftovers+0xc00/0xc00 [ 76.768493][ T5563] ? mark_lock+0x9a/0x340 [ 76.772836][ T5563] ? xfs_btree_query_range+0x360/0x360 [ 76.778390][ T5563] ? lockdep_hardirqs_on_prepare+0x418/0x780 [ 76.784448][ T5563] xfs_btree_query_range+0x2b7/0x360 [ 76.789953][ T5563] ? xfs_refcount_recover_cow_leftovers+0xc00/0xc00 [ 76.796552][ T5563] ? xfs_btree_space_to_height+0x80/0x80 [ 76.802393][ T5563] ? rcu_read_lock_sched_held+0x8b/0x110 [ 76.808032][ T5563] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 76.814027][ T5563] ? slab_post_alloc_hook+0x83/0x3a0 [ 76.819424][ T5563] ? xfs_refcountbt_init_cursor+0x82/0x340 [ 76.825338][ T5563] ? trace_kmem_cache_alloc+0x3c/0xf0 [ 76.830731][ T5563] ? kmem_cache_alloc+0x14c/0x280 [ 76.835785][ T5563] ? xfs_refcountbt_init_cursor+0x15e/0x340 [ 76.841867][ T5563] xfs_refcount_recover_cow_leftovers+0x29a/0xc00 [ 76.848418][ T5563] ? xfs_refcount_free_cow_extent+0x170/0x170 [ 76.854859][ T5563] ? xfs_reflink_recover_cow+0x52/0x140 [ 76.860603][ T5563] ? rcu_read_lock_sched_held+0x8b/0x110 [ 76.866433][ T5563] ? xfs_perag_get+0x183/0x320 [ 76.871660][ T5563] xfs_reflink_recover_cow+0x7e/0x140 [ 76.878013][ T5563] xlog_recover_finish+0x71f/0x7f0 [ 76.883187][ T5563] ? xlog_do_recover+0x4e0/0x4e0 [ 76.889168][ T5563] ? __xfs_ag_resv_free+0x760/0x760 [ 76.894439][ T5563] ? xfs_fs_reserve_ag_blocks+0xe2/0x1a0 [ 76.900472][ T5563] ? xfs_perag_put+0xfe/0x2a0 [ 76.905207][ T5563] xfs_log_mount_finish+0x1c1/0x360 [ 76.910543][ T5563] xfs_mountfs+0x116e/0x1cd0 [ 76.915767][ T5563] ? xfs_default_resblks+0x60/0x60 [ 76.921016][ T5563] ? rcu_read_lock_sched_held+0x8b/0x110 [ 76.927597][ T5563] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 76.933981][ T5563] ? xfs_mru_cache_create+0x3b3/0x4d0 [ 76.941115][ T5563] ? trace_xfs_inode_timestamp_range+0xa1/0x230 [ 76.947572][ T5563] xfs_fs_fill_super+0xb55/0xed0 [ 76.952706][ T5563] get_tree_bdev+0x3d7/0x620 [ 76.957577][ T5563] ? xfs_fs_warn_deprecated+0x160/0x160 [ 76.963198][ T5563] vfs_get_tree+0x7f/0x220 [ 76.967715][ T5563] do_new_mount+0x1e5/0x940 [ 76.972226][ T5563] ? security_capable+0x3f/0x90 [ 76.977178][ T5563] ? ns_capable+0x5d/0xc0 [ 76.981700][ T5563] ? do_move_mount_old+0x110/0x110 [ 76.987177][ T5563] ? user_path_at_empty+0xf1/0x140 [ 76.992538][ T5563] __se_sys_mount+0x20d/0x2a0 [ 76.997327][ T5563] ? print_irqtrace_events+0x220/0x220 [ 77.002810][ T5563] ? __x64_sys_mount+0xc0/0xc0 [ 77.007834][ T5563] ? syscall_enter_from_user_mode+0x32/0x2c0 [ 77.013926][ T5563] ? lockdep_hardirqs_on+0x90/0x130 [ 77.019406][ T5563] ? syscall_enter_from_user_mode+0x32/0x2c0 [ 77.025602][ T5563] do_syscall_64+0x41/0xc0 [ 77.030049][ T5563] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 77.036305][ T5563] RIP: 0033:0x7f377968d5da [ 77.040730][ T5563] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 77.060876][ T5563] RSP: 002b:00007f377a3c3f88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 77.069395][ T5563] RAX: ffffffffffffffda RBX: 0000000000009712 RCX: 00007f377968d5da [ 77.077431][ T5563] RDX: 0000000020000100 RSI: 0000000020009640 RDI: 00007f377a3c3fe0 [ 77.085416][ T5563] RBP: 00007f377a3c4020 R08: 00007f377a3c4020 R09: 0000000000200800 [ 77.093487][ T5563] R10: 0000000000200800 R11: 0000000000000246 R12: 0000000020000100 [ 77.101567][ T5563] R13: 0000000020009640 R14: 00007f377a3c3fe0 R15: 0000000020000240 [ 77.109730][ T5563] [ 77.112972][ T5563] [ 77.115405][ T5563] The buggy address belongs to the object at ffff888070481210 [ 77.115405][ T5563] which belongs to the cache xfs_refcbt_cur of size 200 [ 77.129982][ T5563] The buggy address is located 72 bytes inside of [ 77.129982][ T5563] 200-byte region [ffff888070481210, ffff8880704812d8) [ 77.143585][ T5563] [ 77.146083][ T5563] The buggy address belongs to the physical page: [ 77.152927][ T5563] page:ffffea0001c12040 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x70481 [ 77.164009][ T5563] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 77.172207][ T5563] raw: 00fff00000000200 ffff8881408c0500 dead000000000122 0000000000000000 [ 77.180973][ T5563] raw: 0000000000000000 00000000800f000f 00000001ffffffff 0000000000000000 [ 77.189963][ T5563] page dumped because: kasan: bad access detected [ 77.197074][ T5563] page_owner tracks the page as allocated [ 77.202812][ T5563] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 5563, tgid 5562 (syz-executor.0), ts 76548179324, free_ts 76544345667 [ 77.223462][ T5563] get_page_from_freelist+0x3434/0x35b0 [ 77.229293][ T5563] __alloc_pages+0x291/0x7f0 [ 77.234074][ T5563] alloc_slab_page+0x6a/0x160 [ 77.239419][ T5563] new_slab+0x84/0x2f0 [ 77.243674][ T5563] ___slab_alloc+0xa07/0x1000 [ 77.248559][ T5563] kmem_cache_alloc+0x1b0/0x280 [ 77.253514][ T5563] xfs_refcountbt_init_cursor+0x82/0x340 [ 77.259244][ T5563] xfs_refcount_recover_cow_leftovers+0x1e0/0xc00 [ 77.266029][ T5563] xfs_reflink_recover_cow+0x7e/0x140 [ 77.271777][ T5563] xlog_recover_finish+0x71f/0x7f0 [ 77.277440][ T5563] xfs_log_mount_finish+0x1c1/0x360 [ 77.282644][ T5563] xfs_mountfs+0x116e/0x1cd0 [ 77.287334][ T5563] xfs_fs_fill_super+0xb55/0xed0 [ 77.292373][ T5563] get_tree_bdev+0x3d7/0x620 [ 77.297102][ T5563] vfs_get_tree+0x7f/0x220 [ 77.302150][ T5563] do_new_mount+0x1e5/0x940 [ 77.304287][ T899] cfg80211: failed to load regulatory.db [ 77.306646][ T5563] page last free stack trace: [ 77.306652][ T5563] __free_pages_ok+0xcda/0xd40 [ 77.322463][ T5563] free_large_kmalloc+0xef/0x180 [ 77.327834][ T5563] xlog_do_recovery_pass+0x994/0xc00 [ 77.333219][ T5563] xlog_do_log_recovery+0x4c/0x60 [ 77.338288][ T5563] xlog_do_recover+0x11e/0x4e0 [ 77.343061][ T5563] xlog_recover+0x386/0x450 [ 77.347631][ T5563] xfs_log_mount+0x331/0x640 [ 77.352401][ T5563] xfs_mountfs+0xb36/0x1cd0 [ 77.356915][ T5563] xfs_fs_fill_super+0xb55/0xed0 [ 77.362136][ T5563] get_tree_bdev+0x3d7/0x620 [ 77.366817][ T5563] vfs_get_tree+0x7f/0x220 [ 77.371464][ T5563] do_new_mount+0x1e5/0x940 [ 77.376059][ T5563] __se_sys_mount+0x20d/0x2a0 [ 77.380838][ T5563] do_syscall_64+0x41/0xc0 [ 77.385266][ T5563] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 77.391269][ T5563] [ 77.393619][ T5563] Memory state around the buggy address: [ 77.399461][ T5563] ffff888070481100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 77.407617][ T5563] ffff888070481180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 77.415866][ T5563] >ffff888070481200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 77.424073][ T5563] ^ [ 77.431164][ T5563] ffff888070481280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 77.439440][ T5563] ffff888070481300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 77.448041][ T5563] ================================================================== [ 77.462685][ T5563] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 77.469923][ T5563] CPU: 1 PID: 5563 Comm: syz-executor.0 Not tainted 6.2.0-syzkaller #0 [ 77.478254][ T5563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 77.488840][ T5563] Call Trace: [ 77.492215][ T5563] [ 77.495332][ T5563] dump_stack_lvl+0x12e/0x1d0 [ 77.500460][ T5563] ? nf_tcp_handle_invalid+0x4e0/0x4e0 [ 77.506024][ T5563] ? panic+0x500/0x500 [ 77.510181][ T5563] panic+0x1f2/0x500 [ 77.514312][ T5563] ? memcpy_page_flushcache+0xe0/0xe0 [ 77.519867][ T5563] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 77.526561][ T5563] check_panic_on_warn+0x58/0x70 [ 77.531529][ T5563] ? xfs_btree_lookup_get_block+0x12d/0x680 [ 77.537715][ T5563] end_report+0xbb/0x170 [ 77.542064][ T5563] kasan_report+0xdb/0x100 [ 77.546928][ T5563] ? xfs_btree_lookup_get_block+0x12d/0x680 [ 77.553070][ T5563] xfs_btree_lookup_get_block+0x12d/0x680 [ 77.558773][ T5563] ? xfs_btree_decrement+0xa40/0xa40 [ 77.564209][ T5563] ? lockdep_hardirqs_on_prepare+0x418/0x780 [ 77.570169][ T5563] ? print_irqtrace_events+0x220/0x220 [ 77.575691][ T5563] xfs_btree_lookup+0x2f7/0xfe0 [ 77.580630][ T5563] ? _raw_spin_unlock_irqrestore+0x8f/0x120 [ 77.586702][ T5563] ? stack_trace_save+0x10a/0x1e0 [ 77.591790][ T5563] ? xfs_btree_lookup_get_block+0x680/0x680 [ 77.597741][ T5563] ? __stack_depot_save+0x3f9/0x470 [ 77.603062][ T5563] ? kasan_set_track+0x55/0x70 [ 77.608083][ T5563] ? kasan_set_track+0x40/0x70 [ 77.612916][ T5563] ? __kasan_slab_alloc+0x69/0x80 [ 77.617913][ T5563] ? slab_post_alloc_hook+0x68/0x3a0 [ 77.623605][ T5563] ? kmem_cache_alloc+0x12c/0x280 [ 77.628780][ T5563] ? xfs_refcount_recover_cow_leftovers+0x1e0/0xc00 [ 77.635449][ T5563] ? xfs_reflink_recover_cow+0x7e/0x140 [ 77.640978][ T5563] ? xlog_recover_finish+0x71f/0x7f0 [ 77.646976][ T5563] ? xfs_log_mount_finish+0x1c1/0x360 [ 77.652344][ T5563] xfs_btree_simple_query_range+0xde/0x5a0 [ 77.658397][ T5563] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 77.664576][ T5563] ? xfs_refcount_recover_cow_leftovers+0xc00/0xc00 [ 77.671146][ T5563] ? mark_lock+0x9a/0x340 [ 77.675453][ T5563] ? xfs_btree_query_range+0x360/0x360 [ 77.680893][ T5563] ? lockdep_hardirqs_on_prepare+0x418/0x780 [ 77.686848][ T5563] xfs_btree_query_range+0x2b7/0x360 [ 77.692189][ T5563] ? xfs_refcount_recover_cow_leftovers+0xc00/0xc00 [ 77.699575][ T5563] ? xfs_btree_space_to_height+0x80/0x80 [ 77.705482][ T5563] ? rcu_read_lock_sched_held+0x8b/0x110 [ 77.711437][ T5563] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 77.717388][ T5563] ? slab_post_alloc_hook+0x83/0x3a0 [ 77.722761][ T5563] ? xfs_refcountbt_init_cursor+0x82/0x340 [ 77.728927][ T5563] ? trace_kmem_cache_alloc+0x3c/0xf0 [ 77.734853][ T5563] ? kmem_cache_alloc+0x14c/0x280 [ 77.739875][ T5563] ? xfs_refcountbt_init_cursor+0x15e/0x340 [ 77.746203][ T5563] xfs_refcount_recover_cow_leftovers+0x29a/0xc00 [ 77.752772][ T5563] ? xfs_refcount_free_cow_extent+0x170/0x170 [ 77.758909][ T5563] ? xfs_reflink_recover_cow+0x52/0x140 [ 77.764435][ T5563] ? rcu_read_lock_sched_held+0x8b/0x110 [ 77.770299][ T5563] ? xfs_perag_get+0x183/0x320 [ 77.775036][ T5563] xfs_reflink_recover_cow+0x7e/0x140 [ 77.780662][ T5563] xlog_recover_finish+0x71f/0x7f0 [ 77.785867][ T5563] ? xlog_do_recover+0x4e0/0x4e0 [ 77.791060][ T5563] ? __xfs_ag_resv_free+0x760/0x760 [ 77.796344][ T5563] ? xfs_fs_reserve_ag_blocks+0xe2/0x1a0 [ 77.802048][ T5563] ? xfs_perag_put+0xfe/0x2a0 [ 77.806707][ T5563] xfs_log_mount_finish+0x1c1/0x360 [ 77.812168][ T5563] xfs_mountfs+0x116e/0x1cd0 [ 77.816752][ T5563] ? xfs_default_resblks+0x60/0x60 [ 77.822562][ T5563] ? rcu_read_lock_sched_held+0x8b/0x110 [ 77.828297][ T5563] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 77.834530][ T5563] ? xfs_mru_cache_create+0x3b3/0x4d0 [ 77.839898][ T5563] ? trace_xfs_inode_timestamp_range+0xa1/0x230 [ 77.846228][ T5563] xfs_fs_fill_super+0xb55/0xed0 [ 77.851426][ T5563] get_tree_bdev+0x3d7/0x620 [ 77.856168][ T5563] ? xfs_fs_warn_deprecated+0x160/0x160 [ 77.861860][ T5563] vfs_get_tree+0x7f/0x220 [ 77.867043][ T5563] do_new_mount+0x1e5/0x940 [ 77.871624][ T5563] ? security_capable+0x3f/0x90 [ 77.876634][ T5563] ? ns_capable+0x5d/0xc0 [ 77.881030][ T5563] ? do_move_mount_old+0x110/0x110 [ 77.886223][ T5563] ? user_path_at_empty+0xf1/0x140 [ 77.891505][ T5563] __se_sys_mount+0x20d/0x2a0 [ 77.896275][ T5563] ? print_irqtrace_events+0x220/0x220 [ 77.901821][ T5563] ? __x64_sys_mount+0xc0/0xc0 [ 77.906613][ T5563] ? syscall_enter_from_user_mode+0x32/0x2c0 [ 77.912605][ T5563] ? lockdep_hardirqs_on+0x90/0x130 [ 77.917790][ T5563] ? syscall_enter_from_user_mode+0x32/0x2c0 [ 77.923765][ T5563] do_syscall_64+0x41/0xc0 [ 77.928197][ T5563] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 77.934374][ T5563] RIP: 0033:0x7f377968d5da [ 77.938777][ T5563] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 77.958548][ T5563] RSP: 002b:00007f377a3c3f88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 77.966969][ T5563] RAX: ffffffffffffffda RBX: 0000000000009712 RCX: 00007f377968d5da [ 77.974957][ T5563] RDX: 0000000020000100 RSI: 0000000020009640 RDI: 00007f377a3c3fe0 [ 77.983253][ T5563] RBP: 00007f377a3c4020 R08: 00007f377a3c4020 R09: 0000000000200800 [ 77.991464][ T5563] R10: 0000000000200800 R11: 0000000000000246 R12: 0000000020000100 [ 77.999409][ T5563] R13: 0000000020009640 R14: 00007f377a3c3fe0 R15: 0000000020000240 [ 78.007397][ T5563] [ 78.010660][ T5563] Kernel Offset: disabled [ 78.015003][ T5563] Rebooting in 86400 seconds..