./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2057795968

<...>
Warning: Permanently added '10.128.1.2' (ECDSA) to the list of known hosts.
execve("./syz-executor2057795968", ["./syz-executor2057795968"], 0x7ffe5aa39590 /* 10 vars */) = 0
brk(NULL)                               = 0x5555567cd000
brk(0x5555567cdc40)                     = 0x5555567cdc40
arch_prctl(ARCH_SET_FS, 0x5555567cd300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor2057795968", 4096) = 28
brk(0x5555567eec40)                     = 0x5555567eec40
brk(0x5555567ef000)                     = 0x5555567ef000
mprotect(0x7f7ff4750000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
unshare(CLONE_NEWPID)                   = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 4996 attached
, child_tidptr=0x5555567cd5d0) = 4996
[pid  4996] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy)
[pid  4996] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  4996] setsid()                    = 1
[pid  4996] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0
[pid  4996] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0
[pid  4996] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0
[pid  4996] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0
[pid  4996] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0
[pid  4996] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0
[pid  4996] unshare(CLONE_NEWNS)        = 0
[pid  4996] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0
[pid  4996] unshare(CLONE_NEWIPC)       = 0
[pid  4996] unshare(CLONE_NEWCGROUP)    = 0
[pid  4996] unshare(CLONE_NEWUTS)       = 0
[pid  4996] unshare(CLONE_SYSVSEM)      = 0
[pid  4996] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3
[pid  4996] write(3, "16777216", 8)     = 8
[pid  4996] close(3)                    = 0
[pid  4996] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3
[pid  4996] write(3, "536870912", 9)    = 9
[pid  4996] close(3)                    = 0
[pid  4996] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3
[pid  4996] write(3, "1024", 4)         = 4
[pid  4996] close(3)                    = 0
[pid  4996] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3
[pid  4996] write(3, "8192", 4)         = 4
[pid  4996] close(3)                    = 0
[pid  4996] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3
[pid  4996] write(3, "1024", 4)         = 4
[pid  4996] close(3)                    = 0
[pid  4996] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3
[pid  4996] write(3, "1024", 4)         = 4
[pid  4996] close(3)                    = 0
[pid  4996] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3
[pid  4996] write(3, "1024 1048576 500 1024", 21) = 21
[pid  4996] close(3)                    = 0
[pid  4996] getpid()                    = 1
[pid  4996] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PTRACE|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_NICE|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, permitted=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PTRACE|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_NICE|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, inheritable=0}) = 0
[pid  4996] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, permitted=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, inheritable=0}) = 0
[pid  4996] unshare(CLONE_NEWNET)       = 0
[pid  4996] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3
[pid  4996] write(3, "0 65535", 7)      = 7
[pid  4996] close(3)                    = 0
[pid  4996] mkdir("/dev/binderfs", 0777) = 0
[pid  4996] mount("binder", "/dev/binderfs", "binder", 0, NULL) = 0
[pid  4996] symlink("/dev/binderfs", "./binderfs") = 0
[pid  4996] memfd_create("syzkaller", 0) = 3
[pid  4996] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7fec289000
[   64.936725][ T4996] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=4996 'syz-executor205'
[pid  4996] write(3, "\x58\x46\x53\x42\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xac\xfe\xbf\xcd\x08\x06\x4e\x27\x97\x77\x0a\xc4\xff\x5d\xdf\x54\x00\x00\x00\x00\x00\x00\x20\x04\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x11\x00\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x02\x00\x00\x20\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x02\xf4"..., 33554432) = 33554432
[pid  4996] munmap(0x7f7fec289000, 33554432) = 0
[pid  4996] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  4996] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  4996] close(3)                    = 0
[pid  4996] mkdir("./file0", 0777)      = 0
[   65.258966][ T4996] loop0: detected capacity change from 0 to 65536
[   65.275181][ T4996] XFS (loop0): Deprecated V4 format (crc=0) will not be supported after September 2030.
[   65.286159][ T4996] XFS (loop0): Mounting V4 Filesystem acfebfcd-0806-4e27-9777-0ac4ff5ddf54
[   65.297836][ T4996] XFS (loop0): Log size 756 blocks too small, minimum size is 2220 blocks
[   65.306457][ T4996] XFS (loop0): Log size out of supported range.
[   65.312711][ T4996] XFS (loop0): Continuing onwards, but if log hangs are experienced then please report this message in the bug report.
[   65.330658][ T4996] XFS (loop0): Torn write (CRC failure) detected at log block 0x10. Truncating head block from 0x20.
[   65.352479][ T4996] XFS (loop0): Ending clean mount
[pid  4996] mount("/dev/loop0", "./file0", "xfs", MS_DIRSYNC|MS_SILENT|MS_I_VERSION, ",nouuid") = 0
[pid  4996] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  4996] chdir("./file0")            = 0
[pid  4996] ioctl(4, LOOP_CLR_FD)       = 0
[pid  4996] close(4)                    = 0
[pid  4996] exit_group(1)               = ?
[   65.358050][ T4996] xfs filesystem being mounted at /root/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   65.419212][ T4996] XFS (loop0): Unmounting Filesystem acfebfcd-0806-4e27-9777-0ac4ff5ddf54
[   65.436296][ T4996] ==================================================================
[   65.444399][ T4996] BUG: KASAN: slab-out-of-bounds in xlog_pack_data+0x370/0x540
[   65.451965][ T4996] Read of size 4 at addr ffff888075c64e00 by task syz-executor205/4996
[   65.460196][ T4996] 
[   65.462515][ T4996] CPU: 0 PID: 4996 Comm: syz-executor205 Not tainted 6.4.0-rc6-syzkaller-00035-g15adb51c04cc #0
[   65.472921][ T4996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023
[   65.482980][ T4996] Call Trace:
[   65.486267][ T4996]  <TASK>
[   65.489202][ T4996]  dump_stack_lvl+0x1e7/0x2d0
[   65.493886][ T4996]  ? irq_work_queue+0xca/0x150
[   65.498675][ T4996]  ? nf_tcp_handle_invalid+0x650/0x650
[   65.504223][ T4996]  ? panic+0x770/0x770
[   65.508299][ T4996]  ? _printk+0xd5/0x120
[   65.512464][ T4996]  print_report+0x163/0x540
[   65.516977][ T4996]  ? __virt_addr_valid+0x22f/0x2e0
[   65.522115][ T4996]  ? __phys_addr+0xba/0x170
[   65.526647][ T4996]  ? xlog_pack_data+0x370/0x540
[   65.531527][ T4996]  kasan_report+0x176/0x1b0
[   65.536073][ T4996]  ? xlog_pack_data+0x370/0x540
[   65.540956][ T4996]  xlog_pack_data+0x370/0x540
[   65.545657][ T4996]  xlog_sync+0x366/0xd50
[   65.549916][ T4996]  xlog_state_release_iclog+0x46d/0x7f0
[   65.555485][ T4996]  ? xlog_force_lsn+0x5e5/0x770
[   65.560359][ T4996]  xlog_force_lsn+0x5e5/0x770
[   65.565059][ T4996]  xfs_log_force_seq+0x1da/0x450
[   65.570013][ T4996]  __xfs_trans_commit+0xb38/0x11d0
[   65.575138][ T4996]  ? rcu_is_watching+0x15/0xb0
[   65.579911][ T4996]  ? xfs_trans_commit+0x20/0x20
[   65.584779][ T4996]  xfs_sync_sb+0x140/0x190
[   65.589205][ T4996]  ? xfs_log_sb+0x1b0/0x1b0
[   65.593721][ T4996]  xfs_log_quiesce+0x38f/0x680
[   65.598503][ T4996]  xfs_log_clean+0xa4/0xc10
[   65.603034][ T4996]  ? mark_lock+0x9a/0x340
[   65.607373][ T4996]  ? xfs_log_quiesce+0x680/0x680
[   65.612315][ T4996]  ? lockdep_hardirqs_on_prepare+0x43c/0x7a0
[   65.618306][ T4996]  ? print_irqtrace_events+0x220/0x220
[   65.623782][ T4996]  ? _raw_spin_unlock_irqrestore+0x8f/0x140
[   65.629692][ T4996]  ? lockdep_hardirqs_on+0x98/0x140
[   65.634906][ T4996]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[   65.640803][ T4996]  ? _raw_spin_unlock+0x40/0x40
[   65.645667][ T4996]  xfs_log_unmount+0x2c/0x1c0
[   65.650370][ T4996]  xfs_unmountfs+0x1d6/0x280
[   65.654982][ T4996]  ? xfs_uuid_unmount+0x120/0x120
[   65.660030][ T4996]  ? __kmem_cache_free+0x264/0x3c0
[   65.665165][ T4996]  ? xfs_fs_put_super+0x6c/0x2d0
[   65.670133][ T4996]  xfs_fs_put_super+0x74/0x2d0
[   65.674917][ T4996]  ? generic_shutdown_super+0x12f/0x340
[   65.680505][ T4996]  ? xfs_fs_drop_inode+0xe0/0xe0
[   65.685468][ T4996]  generic_shutdown_super+0x134/0x340
[   65.690876][ T4996]  kill_block_super+0x84/0xf0
[   65.695765][ T4996]  deactivate_locked_super+0xa4/0x110
[   65.701326][ T4996]  cleanup_mnt+0x426/0x4c0
[   65.705771][ T4996]  ? _raw_spin_unlock_irq+0x23/0x50
[   65.710991][ T4996]  task_work_run+0x24a/0x300
[   65.715737][ T4996]  ? kasan_quarantine_put+0xd8/0x230
[   65.721069][ T4996]  ? task_work_cancel+0x2b0/0x2b0
[   65.726204][ T4996]  ? kmem_cache_free+0x297/0x520
[   65.731154][ T4996]  ? do_exit+0x68a/0x2290
[   65.735506][ T4996]  do_exit+0x68f/0x2290
[   65.739684][ T4996]  ? put_task_struct+0x80/0x80
[   65.744456][ T4996]  ? lockdep_hardirqs_on_prepare+0x43c/0x7a0
[   65.750537][ T4996]  ? print_irqtrace_events+0x220/0x220
[   65.756008][ T4996]  ? _raw_spin_unlock_irq+0x23/0x50
[   65.761219][ T4996]  ? lockdep_hardirqs_on+0x98/0x140
[   65.766424][ T4996]  do_group_exit+0x206/0x2c0
[   65.771020][ T4996]  __x64_sys_exit_group+0x3f/0x40
[   65.776049][ T4996]  do_syscall_64+0x41/0xc0
[   65.780503][ T4996]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   65.786414][ T4996] RIP: 0033:0x7f7ff46d4999
[   65.790836][ T4996] Code: Unable to access opcode bytes at 0x7f7ff46d496f.
[   65.797860][ T4996] RSP: 002b:00007ffde997c8a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[   65.806286][ T4996] RAX: ffffffffffffffda RBX: 00007f7ff4756330 RCX: 00007f7ff46d4999
[   65.814267][ T4996] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001
[   65.822242][ T4996] RBP: 0000000000000001 R08: ffffffffffffffc0 R09: 000000000000c157
[   65.830217][ T4996] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ff4756330
[   65.838191][ T4996] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001
[   65.846184][ T4996]  </TASK>
[   65.849236][ T4996] 
[   65.851557][ T4996] The buggy address belongs to the physical page:
[   65.857974][ T4996] page:ffffea0001d71000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x75c40
[   65.868128][ T4996] head:ffffea0001d71000 order:6 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   65.877063][ T4996] flags: 0xfff00000010000(head|node=0|zone=1|lastcpupid=0x7ff)
[   65.884619][ T4996] page_type: 0xffffffff()
[   65.888948][ T4996] raw: 00fff00000010000 0000000000000000 dead000000000122 0000000000000000
[   65.897619][ T4996] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[   65.906194][ T4996] page dumped because: kasan: bad access detected
[   65.912601][ T4996] page_owner tracks the page as allocated
[   65.918311][ T4996] page last allocated via order 6, migratetype Unmovable, gfp_mask 0x46dc0(GFP_KERNEL|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP|__GFP_ZERO), pid 4996, tgid 4996 (syz-executor205), ts 65296013335, free_ts 18373394447
[   65.939324][ T4996]  post_alloc_hook+0x1e6/0x210
[   65.944095][ T4996]  get_page_from_freelist+0x321c/0x33a0
[   65.949648][ T4996]  __alloc_pages+0x255/0x670
[   65.954240][ T4996]  __kmalloc_large_node+0x91/0x1d0
[   65.959357][ T4996]  __kmalloc_node+0x116/0x230
[   65.964123][ T4996]  kvmalloc_node+0x72/0x180
[   65.968627][ T4996]  xlog_alloc_log+0x638/0x13a0
[   65.973398][ T4996]  xfs_log_mount+0xe7/0x770
[   65.977903][ T4996]  xfs_mountfs+0xcbf/0x1f10
[   65.982413][ T4996]  xfs_fs_fill_super+0xfd7/0x1230
[   65.987440][ T4996]  get_tree_bdev+0x405/0x620
[   65.992030][ T4996]  vfs_get_tree+0x8c/0x270
[   65.996450][ T4996]  do_new_mount+0x28f/0xae0
[   66.000956][ T4996]  __se_sys_mount+0x2d9/0x3c0
[   66.005634][ T4996]  do_syscall_64+0x41/0xc0
[   66.010046][ T4996]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   66.015943][ T4996] page last free stack trace:
[   66.020605][ T4996]  free_unref_page_prepare+0x903/0xa30
[   66.026068][ T4996]  free_unref_page+0x37/0x3f0
[   66.030747][ T4996]  free_contig_range+0x9e/0x150
[   66.035601][ T4996]  destroy_args+0x102/0x9a0
[   66.040104][ T4996]  debug_vm_pgtable+0x405/0x490
[   66.044954][ T4996]  do_one_initcall+0x23d/0x7d0
[   66.049724][ T4996]  do_initcall_level+0x157/0x210
[   66.054666][ T4996]  do_initcalls+0x3f/0x80
[   66.058999][ T4996]  kernel_init_freeable+0x43b/0x5d0
[   66.064204][ T4996]  kernel_init+0x1d/0x2a0
[   66.068545][ T4996]  ret_from_fork+0x1f/0x30
[   66.072972][ T4996] 
[   66.075293][ T4996] Memory state around the buggy address:
[   66.080916][ T4996]  ffff888075c64d00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   66.088977][ T4996]  ffff888075c64d80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   66.097037][ T4996] >ffff888075c64e00: 01 fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe
[   66.105091][ T4996]                    ^
[   66.109152][ T4996]  ffff888075c64e80: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe
[   66.117208][ T4996]  ffff888075c64f00: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe
[   66.125261][ T4996] ==================================================================
[   66.135101][ T4996] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   66.142322][ T4996] CPU: 0 PID: 4996 Comm: syz-executor205 Not tainted 6.4.0-rc6-syzkaller-00035-g15adb51c04cc #0
[   66.152739][ T4996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023
[   66.162793][ T4996] Call Trace:
[   66.166073][ T4996]  <TASK>
[   66.169003][ T4996]  dump_stack_lvl+0x1e7/0x2d0
[   66.173690][ T4996]  ? nf_tcp_handle_invalid+0x650/0x650
[   66.179153][ T4996]  ? panic+0x770/0x770
[   66.183227][ T4996]  ? preempt_schedule_common+0x83/0xc0
[   66.188701][ T4996]  ? vscnprintf+0x5d/0x80
[   66.193042][ T4996]  panic+0x30f/0x770
[   66.196946][ T4996]  ? check_panic_on_warn+0x21/0xa0
[   66.202067][ T4996]  ? __memcpy_flushcache+0x2b0/0x2b0
[   66.207357][ T4996]  ? _raw_spin_unlock_irqrestore+0x12c/0x140
[   66.213344][ T4996]  ? _raw_spin_unlock+0x40/0x40
[   66.218195][ T4996]  ? print_report+0x4fb/0x540
[   66.222879][ T4996]  check_panic_on_warn+0x82/0xa0
[   66.227913][ T4996]  ? xlog_pack_data+0x370/0x540
[   66.232771][ T4996]  end_report+0x63/0x110
[   66.237029][ T4996]  kasan_report+0x183/0x1b0
[   66.241573][ T4996]  ? xlog_pack_data+0x370/0x540
[   66.246439][ T4996]  xlog_pack_data+0x370/0x540
[   66.251133][ T4996]  xlog_sync+0x366/0xd50
[   66.255386][ T4996]  xlog_state_release_iclog+0x46d/0x7f0
[   66.260943][ T4996]  ? xlog_force_lsn+0x5e5/0x770
[   66.265805][ T4996]  xlog_force_lsn+0x5e5/0x770
[   66.270495][ T4996]  xfs_log_force_seq+0x1da/0x450
[   66.275451][ T4996]  __xfs_trans_commit+0xb38/0x11d0
[   66.280572][ T4996]  ? rcu_is_watching+0x15/0xb0
[   66.285351][ T4996]  ? xfs_trans_commit+0x20/0x20
[   66.290217][ T4996]  xfs_sync_sb+0x140/0x190
[   66.294643][ T4996]  ? xfs_log_sb+0x1b0/0x1b0
[   66.299158][ T4996]  xfs_log_quiesce+0x38f/0x680
[   66.303931][ T4996]  xfs_log_clean+0xa4/0xc10
[   66.308439][ T4996]  ? mark_lock+0x9a/0x340
[   66.312776][ T4996]  ? xfs_log_quiesce+0x680/0x680
[   66.317720][ T4996]  ? lockdep_hardirqs_on_prepare+0x43c/0x7a0
[   66.323726][ T4996]  ? print_irqtrace_events+0x220/0x220
[   66.329191][ T4996]  ? _raw_spin_unlock_irqrestore+0x8f/0x140
[   66.335088][ T4996]  ? lockdep_hardirqs_on+0x98/0x140
[   66.340298][ T4996]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[   66.346195][ T4996]  ? _raw_spin_unlock+0x40/0x40
[   66.351057][ T4996]  xfs_log_unmount+0x2c/0x1c0
[   66.355743][ T4996]  xfs_unmountfs+0x1d6/0x280
[   66.360353][ T4996]  ? xfs_uuid_unmount+0x120/0x120
[   66.365477][ T4996]  ? __kmem_cache_free+0x264/0x3c0
[   66.370592][ T4996]  ? xfs_fs_put_super+0x6c/0x2d0
[   66.375539][ T4996]  xfs_fs_put_super+0x74/0x2d0
[   66.380308][ T4996]  ? generic_shutdown_super+0x12f/0x340
[   66.385856][ T4996]  ? xfs_fs_drop_inode+0xe0/0xe0
[   66.390804][ T4996]  generic_shutdown_super+0x134/0x340
[   66.396182][ T4996]  kill_block_super+0x84/0xf0
[   66.400866][ T4996]  deactivate_locked_super+0xa4/0x110
[   66.406351][ T4996]  cleanup_mnt+0x426/0x4c0
[   66.410776][ T4996]  ? _raw_spin_unlock_irq+0x23/0x50
[   66.416155][ T4996]  task_work_run+0x24a/0x300
[   66.420745][ T4996]  ? kasan_quarantine_put+0xd8/0x230
[   66.426042][ T4996]  ? task_work_cancel+0x2b0/0x2b0
[   66.431068][ T4996]  ? kmem_cache_free+0x297/0x520
[   66.436022][ T4996]  ? do_exit+0x68a/0x2290
[   66.440359][ T4996]  do_exit+0x68f/0x2290
[   66.444523][ T4996]  ? put_task_struct+0x80/0x80
[   66.449297][ T4996]  ? lockdep_hardirqs_on_prepare+0x43c/0x7a0
[   66.455289][ T4996]  ? print_irqtrace_events+0x220/0x220
[   66.460756][ T4996]  ? _raw_spin_unlock_irq+0x23/0x50
[   66.465961][ T4996]  ? lockdep_hardirqs_on+0x98/0x140
[   66.471166][ T4996]  do_group_exit+0x206/0x2c0
[   66.475765][ T4996]  __x64_sys_exit_group+0x3f/0x40
[   66.480798][ T4996]  do_syscall_64+0x41/0xc0
[   66.485235][ T4996]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   66.491160][ T4996] RIP: 0033:0x7f7ff46d4999
[   66.495591][ T4996] Code: Unable to access opcode bytes at 0x7f7ff46d496f.
[   66.502608][ T4996] RSP: 002b:00007ffde997c8a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[   66.511031][ T4996] RAX: ffffffffffffffda RBX: 00007f7ff4756330 RCX: 00007f7ff46d4999
[   66.519004][ T4996] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001
[   66.526975][ T4996] RBP: 0000000000000001 R08: ffffffffffffffc0 R09: 000000000000c157
[   66.534945][ T4996] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ff4756330
[   66.542922][ T4996] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001
[   66.550932][ T4996]  </TASK>
[   66.554121][ T4996] Kernel Offset: disabled
[   66.558448][ T4996] Rebooting in 86400 seconds..