Warning: Permanently added '[localhost]:38144' (ED25519) to the list of known hosts. 2025/07/31 05:30:35 ignoring optional flag "sandboxArg"="0" 2025/07/31 05:30:37 parsed 1 programs [ 137.921358][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.924356][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.341553][ T5729] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 145.546917][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.559036][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.597294][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.602720][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.846419][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 147.910492][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.913788][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.917117][ T5787] bridge_slave_0: entered allmulticast mode [ 147.921006][ T5787] bridge_slave_0: entered promiscuous mode [ 147.925916][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.930250][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.933769][ T5787] bridge_slave_1: entered allmulticast mode [ 147.938347][ T5787] bridge_slave_1: entered promiscuous mode [ 147.965468][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.973106][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.002874][ T5787] team0: Port device team_slave_0 added [ 148.007973][ T5787] team0: Port device team_slave_1 added [ 148.034563][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.038394][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.050966][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.057663][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.061358][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.074020][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.112283][ T5787] hsr_slave_0: entered promiscuous mode [ 148.115795][ T5787] hsr_slave_1: entered promiscuous mode [ 148.812882][ T5787] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 148.831833][ T5787] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 148.838327][ T5787] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 148.863011][ T5787] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 149.008241][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.050667][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.091077][ T1054] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.094236][ T1054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.101351][ T1054] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.104599][ T1054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.433578][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.508205][ T5787] veth0_vlan: entered promiscuous mode [ 149.537203][ T5787] veth1_vlan: entered promiscuous mode [ 149.592150][ T5787] veth0_macvtap: entered promiscuous mode [ 149.611198][ T5787] veth1_macvtap: entered promiscuous mode [ 149.635851][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.664456][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.687669][ T1157] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.693805][ T1157] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.698273][ T1157] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.724798][ T1157] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.983052][ T1054] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.053717][ T1054] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.141564][ T1054] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.213446][ T1054] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.837545][ T45] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 150.843497][ T45] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 150.848253][ T45] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 150.852582][ T45] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 150.856262][ T45] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2025/07/31 05:30:52 executed programs: 0 [ 152.076263][ T4681] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 152.082789][ T4681] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 152.086890][ T4681] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 152.092261][ T4681] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 152.095928][ T4681] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 152.137472][ T1054] bridge_slave_1: left allmulticast mode [ 152.150192][ T1054] bridge_slave_1: left promiscuous mode [ 152.153571][ T1054] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.174433][ T1054] bridge_slave_0: left allmulticast mode [ 152.177143][ T1054] bridge_slave_0: left promiscuous mode [ 152.189981][ T1054] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.709134][ T1054] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.724667][ T1054] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.739895][ T1054] bond0 (unregistering): Released all slaves [ 152.876412][ T1054] hsr_slave_0: left promiscuous mode [ 152.882668][ T1054] hsr_slave_1: left promiscuous mode [ 152.885836][ T1054] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.890835][ T1054] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.894743][ T1054] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.898262][ T1054] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.909720][ T1054] veth1_macvtap: left promiscuous mode [ 152.912415][ T1054] veth0_macvtap: left promiscuous mode [ 152.915922][ T1054] veth1_vlan: left promiscuous mode [ 152.918775][ T1054] veth0_vlan: left promiscuous mode [ 153.235382][ T1054] team0 (unregistering): Port device team_slave_1 removed [ 153.262161][ T1054] team0 (unregistering): Port device team_slave_0 removed [ 153.872632][ T5873] chnl_net:caif_netlink_parms(): no params data found [ 154.163447][ T4681] Bluetooth: hci0: command tx timeout [ 154.301865][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.320650][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.323996][ T5873] bridge_slave_0: entered allmulticast mode [ 154.347847][ T5873] bridge_slave_0: entered promiscuous mode [ 154.384736][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.387989][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.419577][ T5873] bridge_slave_1: entered allmulticast mode [ 154.427923][ T5873] bridge_slave_1: entered promiscuous mode [ 154.562201][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.568339][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.641806][ T5873] team0: Port device team_slave_0 added [ 154.665081][ T5873] team0: Port device team_slave_1 added [ 154.717665][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.730044][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.759940][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.769876][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.773038][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.810062][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.884959][ T5873] hsr_slave_0: entered promiscuous mode [ 154.899788][ T5873] hsr_slave_1: entered promiscuous mode [ 155.425263][ T5873] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 155.434695][ T5873] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 155.452334][ T5873] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 155.463381][ T5873] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 155.633492][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.657004][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.694021][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.697587][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.711892][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.715497][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.794289][ T5873] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 156.122469][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.198825][ T5873] veth0_vlan: entered promiscuous mode [ 156.222390][ T5873] veth1_vlan: entered promiscuous mode [ 156.240740][ T4681] Bluetooth: hci0: command tx timeout [ 156.280536][ T5873] veth0_macvtap: entered promiscuous mode [ 156.301800][ T5873] veth1_macvtap: entered promiscuous mode [ 156.332340][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.348274][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.372578][ T1144] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.381255][ T1144] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.404583][ T1144] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.419748][ T1144] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.523570][ T1054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.527135][ T1054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.585163][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.592193][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.173817][ T5942] loop0: detected capacity change from 0 to 32768 [ 157.185592][ T5942] ======================================================= [ 157.185592][ T5942] WARNING: The mand mount option has been deprecated and [ 157.185592][ T5942] and is ignored by this kernel. Remove the mand [ 157.185592][ T5942] option from the mount to silence this warning. [ 157.185592][ T5942] ======================================================= [ 157.301160][ T5942] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 157.447330][ T5942] ================================================================== [ 157.451030][ T5942] BUG: KASAN: slab-out-of-bounds in crc32c+0xd0/0x460 [ 157.454672][ T5942] Read of size 8 at addr ffff88804036be00 by task syz.0.16/5942 [ 157.459360][ T5942] [ 157.460501][ T5942] CPU: 0 UID: 0 PID: 5942 Comm: syz.0.16 Not tainted 6.16.0-syzkaller-g260f6f4fda93 #0 PREEMPT(full) [ 157.460516][ T5942] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 157.460524][ T5942] Call Trace: [ 157.460531][ T5942] [ 157.460537][ T5942] dump_stack_lvl+0x189/0x250 [ 157.460553][ T5942] ? rcu_is_watching+0x15/0xb0 [ 157.460568][ T5942] ? __kasan_check_byte+0x12/0x40 [ 157.460579][ T5942] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.460589][ T5942] ? rcu_is_watching+0x15/0xb0 [ 157.460603][ T5942] ? lock_release+0x4b/0x3e0 [ 157.460618][ T5942] ? __virt_addr_valid+0x1c8/0x5c0 [ 157.460628][ T5942] ? __virt_addr_valid+0x4a5/0x5c0 [ 157.460639][ T5942] print_report+0xca/0x240 [ 157.460654][ T5942] ? crc32c+0xd0/0x460 [ 157.460668][ T5942] kasan_report+0x118/0x150 [ 157.460680][ T5942] ? crc32c+0xd0/0x460 [ 157.460695][ T5942] crc32c+0xd0/0x460 [ 157.460709][ T5942] ? xlog_cksum+0x6b/0xf0 [ 157.460719][ T5942] xlog_cksum+0x92/0xf0 [ 157.460729][ T5942] xlog_recover_process+0x7a/0x1f0 [ 157.460744][ T5942] xlog_do_recovery_pass+0x9cd/0xc30 [ 157.460759][ T5942] ? __pfx_xlog_do_recovery_pass+0x10/0x10 [ 157.460775][ T5942] ? xlog_verify_head+0xf2/0x440 [ 157.460789][ T5942] xlog_verify_head+0x136/0x440 [ 157.460804][ T5942] xlog_find_tail+0x5ca/0x840 [ 157.460819][ T5942] xlog_recover+0x4b/0x3e0 [ 157.460833][ T5942] xfs_log_mount+0x253/0x3e0 [ 157.460848][ T5942] xfs_mountfs+0xe5e/0x2330 [ 157.460863][ T5942] ? __pfx_xfs_mountfs+0x10/0x10 [ 157.460877][ T5942] ? trace_xfs_inode_timestamp_range+0x84/0x200 [ 157.460889][ T5942] xfs_fs_fill_super+0x11b3/0x1600 [ 157.460900][ T5942] get_tree_bdev_flags+0x40e/0x4d0 [ 157.460910][ T5942] ? __pfx_xfs_fs_fill_super+0x10/0x10 [ 157.460921][ T5942] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 157.460934][ T5942] vfs_get_tree+0x8f/0x2b0 [ 157.460944][ T5942] do_new_mount+0x2a2/0x9e0 [ 157.460957][ T5942] ? __pfx_do_new_mount+0x10/0x10 [ 157.460968][ T5942] ? path_mount+0x61c/0xfe0 [ 157.460977][ T5942] ? user_path_at+0x44/0x60 [ 157.460994][ T5942] __se_sys_mount+0x317/0x410 [ 157.461008][ T5942] ? __pfx___se_sys_mount+0x10/0x10 [ 157.461027][ T5942] ? do_syscall_64+0xbe/0x3b0 [ 157.461093][ T5942] ? __x64_sys_mount+0x20/0xc0 [ 157.461105][ T5942] do_syscall_64+0xfa/0x3b0 [ 157.461116][ T5942] ? lockdep_hardirqs_on+0x9c/0x150 [ 157.461126][ T5942] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.461137][ T5942] ? clear_bhb_loop+0x60/0xb0 [ 157.461148][ T5942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.461159][ T5942] RIP: 0033:0x7f960778e90a [ 157.461171][ T5942] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.461181][ T5942] RSP: 002b:00007f9608543e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 157.461193][ T5942] RAX: ffffffffffffffda RBX: 00007f9608543ef0 RCX: 00007f960778e90a [ 157.461200][ T5942] RDX: 0000400000000500 RSI: 0000400000000200 RDI: 00007f9608543eb0 [ 157.461207][ T5942] RBP: 0000400000000500 R08: 00007f9608543ef0 R09: 0000000002218a5d [ 157.461212][ T5942] R10: 0000000002218a5d R11: 0000000000000246 R12: 0000400000000200 [ 157.461219][ T5942] R13: 00007f9608543eb0 R14: 0000000000009706 R15: 0000400000000100 [ 157.461228][ T5942] [ 157.461232][ T5942] [ 157.607053][ T5942] Allocated by task 5942: [ 157.609183][ T5942] kasan_save_track+0x3e/0x80 [ 157.611244][ T5942] __kasan_kmalloc+0x93/0xb0 [ 157.613309][ T5942] __kvmalloc_node_noprof+0x30d/0x5f0 [ 157.615616][ T5942] xlog_do_recovery_pass+0x106/0xc30 [ 157.617960][ T5942] xlog_verify_head+0x136/0x440 [ 157.620159][ T5942] xlog_find_tail+0x5ca/0x840 [ 157.622262][ T5942] xlog_recover+0x4b/0x3e0 [ 157.624213][ T5942] xfs_log_mount+0x253/0x3e0 [ 157.626272][ T5942] xfs_mountfs+0xe5e/0x2330 [ 157.628388][ T5942] xfs_fs_fill_super+0x11b3/0x1600 [ 157.630740][ T5942] get_tree_bdev_flags+0x40e/0x4d0 [ 157.633073][ T5942] vfs_get_tree+0x8f/0x2b0 [ 157.635137][ T5942] do_new_mount+0x2a2/0x9e0 [ 157.637263][ T5942] __se_sys_mount+0x317/0x410 [ 157.639459][ T5942] do_syscall_64+0xfa/0x3b0 [ 157.641498][ T5942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.644046][ T5942] [ 157.645150][ T5942] The buggy address belongs to the object at ffff88804036bc00 [ 157.645150][ T5942] which belongs to the cache kmalloc-512 of size 512 [ 157.651668][ T5942] The buggy address is located 0 bytes to the right of [ 157.651668][ T5942] allocated 512-byte region [ffff88804036bc00, ffff88804036be00) [ 157.658227][ T5942] [ 157.659484][ T5942] The buggy address belongs to the physical page: [ 157.662480][ T5942] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4036a [ 157.666437][ T5942] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 157.670359][ T5942] anon flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 157.673996][ T5942] page_type: f5(slab) [ 157.675795][ T5942] raw: 04fff00000000040 ffff88801a441c80 0000000000000000 dead000000000001 [ 157.679823][ T5942] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 157.683700][ T5942] head: 04fff00000000040 ffff88801a441c80 0000000000000000 dead000000000001 [ 157.687964][ T5942] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 157.692367][ T5942] head: 04fff00000000001 ffffea000100da81 00000000ffffffff 00000000ffffffff [ 157.696598][ T5942] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 157.700467][ T5942] page dumped because: kasan: bad access detected [ 157.703376][ T5942] page_owner tracks the page as allocated [ 157.705960][ T5942] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5787, tgid 5787 (syz-executor), ts 147896329212, free_ts 144777864184 [ 157.715598][ T5942] post_alloc_hook+0x240/0x2a0 [ 157.717879][ T5942] get_page_from_freelist+0x21e4/0x22c0 [ 157.720135][ T5942] __alloc_frozen_pages_noprof+0x181/0x370 [ 157.722593][ T5942] alloc_pages_mpol+0x232/0x4a0 [ 157.724531][ T5942] allocate_slab+0x8a/0x370 [ 157.726542][ T5942] ___slab_alloc+0xbeb/0x1410 [ 157.728668][ T5942] __kmalloc_cache_noprof+0x296/0x3d0 [ 157.731090][ T5942] __ipv6_dev_mc_inc+0x44f/0xa50 [ 157.733341][ T5942] ipv6_add_dev+0xe63/0x1370 [ 157.735427][ T5942] addrconf_notify+0x794/0x1010 [ 157.737631][ T5942] notifier_call_chain+0x1b6/0x3e0 [ 157.739936][ T5942] register_netdevice+0x1608/0x1ae0 [ 157.742226][ T5942] veth_newlink+0x42f/0xa50 [ 157.744195][ T5942] rtnl_newlink_create+0x310/0xb00 [ 157.746501][ T5942] rtnl_newlink+0x16d6/0x1c70 [ 157.748562][ T5942] rtnetlink_rcv_msg+0x7cf/0xb70 [ 157.750768][ T5942] page last free pid 5742 tgid 5742 stack trace: [ 157.753727][ T5942] __free_frozen_pages+0xc71/0xe70 [ 157.756477][ T5942] vfree+0x25a/0x400 [ 157.758385][ T5942] kcov_close+0x28/0x50 [ 157.760326][ T5942] __fput+0x44c/0xa70 [ 157.762187][ T5942] task_work_run+0x1d1/0x260 [ 157.764255][ T5942] do_exit+0x6b5/0x2300 [ 157.766091][ T5942] do_group_exit+0x21c/0x2d0 [ 157.768192][ T5942] get_signal+0x1286/0x1340 [ 157.770255][ T5942] arch_do_signal_or_restart+0x9a/0x750 [ 157.772631][ T5942] exit_to_user_mode_loop+0x75/0x110 [ 157.775021][ T5942] do_syscall_64+0x2bd/0x3b0 [ 157.777147][ T5942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.779815][ T5942] [ 157.780989][ T5942] Memory state around the buggy address: [ 157.783896][ T5942] ffff88804036bd00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.787977][ T5942] ffff88804036bd80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.791538][ T5942] >ffff88804036be00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 157.794915][ T5942] ^ [ 157.796786][ T5942] ffff88804036be80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 157.800365][ T5942] ffff88804036bf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 157.804103][ T5942] ================================================================== [ 157.971057][ T5942] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 157.974377][ T5942] CPU: 0 UID: 0 PID: 5942 Comm: syz.0.16 Not tainted 6.16.0-syzkaller-g260f6f4fda93 #0 PREEMPT(full) [ 157.979810][ T5942] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 157.985080][ T5942] Call Trace: [ 157.986671][ T5942] [ 157.988356][ T5942] dump_stack_lvl+0x99/0x250 [ 157.990857][ T5942] ? __asan_memcpy+0x40/0x70 [ 157.993160][ T5942] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.995707][ T5942] ? __pfx__printk+0x10/0x10 [ 157.997750][ T5942] vpanic+0x27a/0x730 [ 157.999534][ T5942] ? preempt_schedule+0xae/0xc0 [ 158.001586][ T5942] ? __pfx_vpanic+0x10/0x10 [ 158.003643][ T5942] ? preempt_schedule_common+0x83/0xd0 [ 158.006074][ T5942] ? preempt_schedule+0xae/0xc0 [ 158.008256][ T5942] ? __pfx_preempt_schedule+0x10/0x10 [ 158.010673][ T5942] panic+0xb9/0xc0 [ 158.012538][ T5942] ? __pfx_panic+0x10/0x10 [ 158.014725][ T5942] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 158.017620][ T5942] ? crc32c+0xd0/0x460 [ 158.019562][ T5942] check_panic_on_warn+0x89/0xb0 [ 158.021626][ T5942] ? crc32c+0xd0/0x460 [ 158.023425][ T5942] end_report+0x78/0x160 [ 158.025408][ T5942] kasan_report+0x129/0x150 [ 158.027585][ T5942] ? crc32c+0xd0/0x460 [ 158.029861][ T5942] crc32c+0xd0/0x460 [ 158.031966][ T5942] ? xlog_cksum+0x6b/0xf0 [ 158.034288][ T5942] xlog_cksum+0x92/0xf0 [ 158.036323][ T5942] xlog_recover_process+0x7a/0x1f0 [ 158.038670][ T5942] xlog_do_recovery_pass+0x9cd/0xc30 [ 158.041134][ T5942] ? __pfx_xlog_do_recovery_pass+0x10/0x10 [ 158.043913][ T5942] ? xlog_verify_head+0xf2/0x440 [ 158.046479][ T5942] xlog_verify_head+0x136/0x440 [ 158.048901][ T5942] xlog_find_tail+0x5ca/0x840 [ 158.051160][ T5942] xlog_recover+0x4b/0x3e0 [ 158.053427][ T5942] xfs_log_mount+0x253/0x3e0 [ 158.055991][ T5942] xfs_mountfs+0xe5e/0x2330 [ 158.058368][ T5942] ? __pfx_xfs_mountfs+0x10/0x10 [ 158.060499][ T5942] ? trace_xfs_inode_timestamp_range+0x84/0x200 [ 158.063281][ T5942] xfs_fs_fill_super+0x11b3/0x1600 [ 158.065571][ T5942] get_tree_bdev_flags+0x40e/0x4d0 [ 158.067872][ T5942] ? __pfx_xfs_fs_fill_super+0x10/0x10 [ 158.070394][ T5942] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 158.072889][ T5942] vfs_get_tree+0x8f/0x2b0 [ 158.074973][ T5942] do_new_mount+0x2a2/0x9e0 [ 158.077775][ T5942] ? __pfx_do_new_mount+0x10/0x10 [ 158.080374][ T5942] ? path_mount+0x61c/0xfe0 [ 158.082379][ T5942] ? user_path_at+0x44/0x60 [ 158.084386][ T5942] __se_sys_mount+0x317/0x410 [ 158.086807][ T5942] ? __pfx___se_sys_mount+0x10/0x10 [ 158.089102][ T5942] ? do_syscall_64+0xbe/0x3b0 [ 158.091292][ T5942] ? __x64_sys_mount+0x20/0xc0 [ 158.093476][ T5942] do_syscall_64+0xfa/0x3b0 [ 158.095548][ T5942] ? lockdep_hardirqs_on+0x9c/0x150 [ 158.098501][ T5942] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.101226][ T5942] ? clear_bhb_loop+0x60/0xb0 [ 158.103417][ T5942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.106387][ T5942] RIP: 0033:0x7f960778e90a [ 158.108618][ T5942] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.116902][ T5942] RSP: 002b:00007f9608543e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 158.120603][ T5942] RAX: ffffffffffffffda RBX: 00007f9608543ef0 RCX: 00007f960778e90a [ 158.124459][ T5942] RDX: 0000400000000500 RSI: 0000400000000200 RDI: 00007f9608543eb0 [ 158.128266][ T5942] RBP: 0000400000000500 R08: 00007f9608543ef0 R09: 0000000002218a5d [ 158.131611][ T5942] R10: 0000000002218a5d R11: 0000000000000246 R12: 0000400000000200 [ 158.135131][ T5942] R13: 00007f9608543eb0 R14: 0000000000009706 R15: 0000400000000100 [ 158.138625][ T5942] [ 158.140353][ T5942] Kernel Offset: disabled [ 158.142299][ T5942] Rebooting in 86400 seconds..