Warning: Permanently added '[localhost]:58798' (ED25519) to the list of known hosts. 2025/09/23 19:06:06 parsed 1 programs syzkaller login: [ 84.347092][ T5346] cgroup: Unknown subsys name 'net' [ 84.434306][ T5346] cgroup: Unknown subsys name 'cpuset' [ 84.441846][ T5346] cgroup: Unknown subsys name 'rlimit' [ 86.101593][ T5346] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.937151][ T5355] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.208665][ T1048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.212915][ T1048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.258246][ T1044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.262953][ T1044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.369959][ T5383] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.374106][ T5383] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.377415][ T45] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.381675][ T45] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.385196][ T45] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.923434][ T10] cfg80211: failed to load regulatory.db [ 92.893583][ T5413] chnl_net:caif_netlink_parms(): no params data found [ 92.963493][ T5413] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.967873][ T5413] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.971848][ T5413] bridge_slave_0: entered allmulticast mode [ 92.975451][ T5413] bridge_slave_0: entered promiscuous mode [ 92.981992][ T5413] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.985019][ T5413] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.988190][ T5413] bridge_slave_1: entered allmulticast mode [ 92.993205][ T5413] bridge_slave_1: entered promiscuous mode [ 93.017231][ T5413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.023416][ T5413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.051822][ T5413] team0: Port device team_slave_0 added [ 93.056847][ T5413] team0: Port device team_slave_1 added [ 93.076606][ T5413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.080172][ T5413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.092552][ T5413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.100360][ T5413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.103340][ T5413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.114650][ T5413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.151225][ T5413] hsr_slave_0: entered promiscuous mode [ 93.154431][ T5413] hsr_slave_1: entered promiscuous mode [ 93.305585][ T5413] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.315760][ T5413] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.323793][ T5413] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.331199][ T5413] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.367510][ T5413] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.370636][ T5413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.374209][ T5413] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.377340][ T5413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.437923][ T5413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.453808][ T1037] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.457804][ T1037] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.468446][ T5413] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.478710][ T1044] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.482192][ T1044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.494823][ T1044] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.498029][ T1044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.729752][ T5413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.798756][ T5413] veth0_vlan: entered promiscuous mode [ 93.813159][ T5413] veth1_vlan: entered promiscuous mode [ 93.858559][ T5413] veth0_macvtap: entered promiscuous mode [ 93.873214][ T5413] veth1_macvtap: entered promiscuous mode [ 93.896422][ T5413] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.917508][ T5413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.945863][ T1041] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.960704][ T1041] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.964590][ T1041] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.968289][ T1041] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.223353][ T1041] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.370146][ T1041] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.451304][ T1041] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.512051][ T1041] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/09/23 19:06:20 executed programs: 0 [ 96.094104][ T4703] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.098212][ T4703] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.104238][ T4703] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.107950][ T4703] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.111641][ T4703] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.272587][ T5458] chnl_net:caif_netlink_parms(): no params data found [ 96.425591][ T1041] bridge_slave_1: left allmulticast mode [ 96.428236][ T1041] bridge_slave_1: left promiscuous mode [ 96.433401][ T1041] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.442531][ T1041] bridge_slave_0: left allmulticast mode [ 96.444951][ T1041] bridge_slave_0: left promiscuous mode [ 96.447576][ T1041] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.843325][ T1041] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.850130][ T1041] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.854886][ T1041] bond0 (unregistering): Released all slaves [ 96.931760][ T1041] hsr_slave_0: left promiscuous mode [ 96.934683][ T1041] hsr_slave_1: left promiscuous mode [ 96.937391][ T1041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.942189][ T1041] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.946167][ T1041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.950634][ T1041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.963024][ T1041] veth1_macvtap: left promiscuous mode [ 96.965591][ T1041] veth0_macvtap: left promiscuous mode [ 96.968124][ T1041] veth1_vlan: left promiscuous mode [ 96.971467][ T1041] veth0_vlan: left promiscuous mode [ 97.255334][ T1041] team0 (unregistering): Port device team_slave_1 removed [ 97.275671][ T1041] team0 (unregistering): Port device team_slave_0 removed [ 97.484486][ T5458] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.487545][ T5458] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.495389][ T5458] bridge_slave_0: entered allmulticast mode [ 97.512164][ T5458] bridge_slave_0: entered promiscuous mode [ 97.527107][ T5458] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.535615][ T5458] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.538799][ T5458] bridge_slave_1: entered allmulticast mode [ 97.560450][ T5458] bridge_slave_1: entered promiscuous mode [ 97.650494][ T5458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.657423][ T5458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.744885][ T5458] team0: Port device team_slave_0 added [ 97.760088][ T5458] team0: Port device team_slave_1 added [ 97.811995][ T5458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.815156][ T5458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.849764][ T5458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.096128][ T5458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.099528][ T5458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.114748][ T5458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.161395][ T4703] Bluetooth: hci0: command tx timeout [ 98.282703][ T5458] hsr_slave_0: entered promiscuous mode [ 98.292107][ T5458] hsr_slave_1: entered promiscuous mode [ 98.862732][ T5458] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.872967][ T5458] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.890759][ T5458] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.903402][ T5458] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.052490][ T5458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.084938][ T5458] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.105104][ T1044] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.108301][ T1044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.132321][ T1044] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.135491][ T1044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.196626][ T5458] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.508677][ T5458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.580674][ T5458] veth0_vlan: entered promiscuous mode [ 99.593650][ T5458] veth1_vlan: entered promiscuous mode [ 99.652260][ T5458] veth0_macvtap: entered promiscuous mode [ 99.670230][ T5458] veth1_macvtap: entered promiscuous mode [ 99.693406][ T5458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.698744][ T5458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.730828][ T1048] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.734617][ T1048] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.738369][ T1048] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.759708][ T1048] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.835127][ T1048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.838557][ T1048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.873506][ T1037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.876802][ T1037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.134817][ T5510] loop0: detected capacity change from 0 to 32768 [ 100.141800][ T5510] ======================================================= [ 100.141800][ T5510] WARNING: The mand mount option has been deprecated and [ 100.141800][ T5510] and is ignored by this kernel. Remove the mand [ 100.141800][ T5510] option from the mount to silence this warning. [ 100.141800][ T5510] ======================================================= [ 100.239676][ T4703] Bluetooth: hci0: command tx timeout [ 100.252873][ T5510] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 100.371274][ T5510] ================================================================== [ 100.374704][ T5510] BUG: KASAN: slab-out-of-bounds in crc32c+0xd0/0x460 [ 100.377589][ T5510] Read of size 8 at addr ffff888059f23a00 by task syz.0.17/5510 [ 100.381581][ T5510] [ 100.382657][ T5510] CPU: 0 UID: 0 PID: 5510 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 100.382671][ T5510] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 100.382680][ T5510] Call Trace: [ 100.382687][ T5510] [ 100.382693][ T5510] dump_stack_lvl+0x189/0x250 [ 100.382713][ T5510] ? rcu_is_watching+0x15/0xb0 [ 100.382725][ T5510] ? __kasan_check_byte+0x12/0x40 [ 100.382738][ T5510] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.382749][ T5510] ? rcu_is_watching+0x15/0xb0 [ 100.382759][ T5510] ? lock_release+0x4b/0x3e0 [ 100.382774][ T5510] ? __virt_addr_valid+0x1c8/0x5c0 [ 100.382793][ T5510] ? __virt_addr_valid+0x4a5/0x5c0 [ 100.382810][ T5510] print_report+0xca/0x240 [ 100.382820][ T5510] ? crc32c+0xd0/0x460 [ 100.382830][ T5510] kasan_report+0x118/0x150 [ 100.382845][ T5510] ? crc32c+0xd0/0x460 [ 100.382858][ T5510] crc32c+0xd0/0x460 [ 100.382869][ T5510] ? xlog_cksum+0x6b/0xf0 [ 100.382887][ T5510] xlog_cksum+0x92/0xf0 [ 100.382901][ T5510] xlog_recover_process+0x7a/0x1f0 [ 100.382915][ T5510] xlog_do_recovery_pass+0x9cd/0xc30 [ 100.382930][ T5510] ? __pfx_xlog_do_recovery_pass+0x10/0x10 [ 100.382945][ T5510] ? xlog_verify_head+0xf2/0x440 [ 100.382957][ T5510] xlog_verify_head+0x136/0x440 [ 100.382970][ T5510] xlog_find_tail+0x5ca/0x840 [ 100.382984][ T5510] xlog_recover+0x4b/0x3e0 [ 100.382995][ T5510] xfs_log_mount+0x253/0x3e0 [ 100.383012][ T5510] xfs_mountfs+0xe5e/0x2330 [ 100.383029][ T5510] ? __pfx_xfs_mountfs+0x10/0x10 [ 100.383044][ T5510] ? trace_xfs_inode_timestamp_range+0x84/0x200 [ 100.383061][ T5510] xfs_fs_fill_super+0x11b3/0x1600 [ 100.383077][ T5510] get_tree_bdev_flags+0x40e/0x4d0 [ 100.383089][ T5510] ? __pfx_xfs_fs_fill_super+0x10/0x10 [ 100.383104][ T5510] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 100.383118][ T5510] vfs_get_tree+0x92/0x2b0 [ 100.383130][ T5510] do_new_mount+0x2a2/0x9e0 [ 100.383144][ T5510] ? __pfx_do_new_mount+0x10/0x10 [ 100.383156][ T5510] ? path_mount+0x61c/0xfe0 [ 100.383170][ T5510] ? user_path_at+0x44/0x60 [ 100.383184][ T5510] __se_sys_mount+0x317/0x410 [ 100.383201][ T5510] ? __pfx___se_sys_mount+0x10/0x10 [ 100.383218][ T5510] ? do_syscall_64+0xbe/0x3b0 [ 100.383271][ T5510] ? __x64_sys_mount+0x20/0xc0 [ 100.383284][ T5510] do_syscall_64+0xfa/0x3b0 [ 100.383294][ T5510] ? lockdep_hardirqs_on+0x9c/0x150 [ 100.383303][ T5510] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.383313][ T5510] ? clear_bhb_loop+0x60/0xb0 [ 100.383324][ T5510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.383337][ T5510] RIP: 0033:0x7f4b5679066a [ 100.383349][ T5510] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.383360][ T5510] RSP: 002b:00007ffe53426368 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 100.383374][ T5510] RAX: ffffffffffffffda RBX: 00007ffe534263f0 RCX: 00007f4b5679066a [ 100.383382][ T5510] RDX: 0000200000000500 RSI: 0000200000000200 RDI: 00007ffe534263b0 [ 100.383389][ T5510] RBP: 0000200000000500 R08: 00007ffe534263f0 R09: 0000000002218a5d [ 100.383396][ T5510] R10: 0000000002218a5d R11: 0000000000000246 R12: 0000200000000200 [ 100.383403][ T5510] R13: 00007ffe534263b0 R14: 0000000000009706 R15: 0000200000000100 [ 100.383414][ T5510] [ 100.383417][ T5510] [ 100.515538][ T5510] Allocated by task 5510: [ 100.517370][ T5510] kasan_save_track+0x3e/0x80 [ 100.519410][ T5510] __kasan_kmalloc+0x93/0xb0 [ 100.521415][ T5510] __kvmalloc_node_noprof+0x30d/0x5f0 [ 100.523717][ T5510] xlog_do_recovery_pass+0x106/0xc30 [ 100.525905][ T5510] xlog_verify_head+0x136/0x440 [ 100.528012][ T5510] xlog_find_tail+0x5ca/0x840 [ 100.530042][ T5510] xlog_recover+0x4b/0x3e0 [ 100.531968][ T5510] xfs_log_mount+0x253/0x3e0 [ 100.533906][ T5510] xfs_mountfs+0xe5e/0x2330 [ 100.535818][ T5510] xfs_fs_fill_super+0x11b3/0x1600 [ 100.538026][ T5510] get_tree_bdev_flags+0x40e/0x4d0 [ 100.540114][ T5510] vfs_get_tree+0x92/0x2b0 [ 100.541997][ T5510] do_new_mount+0x2a2/0x9e0 [ 100.543926][ T5510] __se_sys_mount+0x317/0x410 [ 100.545903][ T5510] do_syscall_64+0xfa/0x3b0 [ 100.547830][ T5510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.550229][ T5510] [ 100.551271][ T5510] The buggy address belongs to the object at ffff888059f23800 [ 100.551271][ T5510] which belongs to the cache kmalloc-512 of size 512 [ 100.556957][ T5510] The buggy address is located 0 bytes to the right of [ 100.556957][ T5510] allocated 512-byte region [ffff888059f23800, ffff888059f23a00) [ 100.562960][ T5510] [ 100.563978][ T5510] The buggy address belongs to the physical page: [ 100.566763][ T5510] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x59f22 [ 100.570446][ T5510] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 100.573818][ T5510] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 100.576811][ T5510] page_type: f5(slab) [ 100.578400][ T5510] raw: 04fff00000000040 ffff88801a841c80 ffffea00010e0400 dead000000000002 [ 100.581645][ T5510] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 100.584913][ T5510] head: 04fff00000000040 ffff88801a841c80 ffffea00010e0400 dead000000000002 [ 100.588395][ T5510] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 100.591992][ T5510] head: 04fff00000000001 ffffea000167c881 00000000ffffffff 00000000ffffffff [ 100.595530][ T5510] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 100.599175][ T5510] page dumped because: kasan: bad access detected [ 100.601894][ T5510] page_owner tracks the page as allocated [ 100.604364][ T5510] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5368, tgid 5368 (syz-executor), ts 90696300856, free_ts 0 [ 100.612986][ T5510] post_alloc_hook+0x240/0x2a0 [ 100.615067][ T5510] get_page_from_freelist+0x21e4/0x22c0 [ 100.617487][ T5510] __alloc_frozen_pages_noprof+0x181/0x370 [ 100.619967][ T5510] alloc_pages_mpol+0x232/0x4a0 [ 100.622033][ T5510] allocate_slab+0x8a/0x370 [ 100.623971][ T5510] ___slab_alloc+0xbeb/0x1420 [ 100.625997][ T5510] __kmalloc_cache_noprof+0x296/0x3d0 [ 100.628212][ T5510] inetdev_init+0x7d/0x500 [ 100.630178][ T5510] inetdev_event+0x301/0x15b0 [ 100.632168][ T5510] notifier_call_chain+0x1b3/0x3e0 [ 100.634297][ T5510] register_netdevice+0x1608/0x1ae0 [ 100.636518][ T5510] register_netdev+0x40/0x60 [ 100.638450][ T5510] sit_init_net+0x228/0x5c0 [ 100.640341][ T5510] ops_init+0x359/0x5c0 [ 100.642079][ T5510] setup_net+0x10c/0x320 [ 100.643922][ T5510] copy_net_ns+0x31b/0x4d0 [ 100.645831][ T5510] page_owner free stack trace missing [ 100.648121][ T5510] [ 100.649157][ T5510] Memory state around the buggy address: [ 100.651574][ T5510] ffff888059f23900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 100.654823][ T5510] ffff888059f23980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 100.658238][ T5510] >ffff888059f23a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 100.661663][ T5510] ^ [ 100.663507][ T5510] ffff888059f23a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 100.667084][ T5510] ffff888059f23b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 100.670652][ T5510] ================================================================== [ 100.710386][ T5510] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 100.713388][ T5510] CPU: 0 UID: 0 PID: 5510 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 100.717183][ T5510] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 100.721662][ T5510] Call Trace: [ 100.723125][ T5510] [ 100.724406][ T5510] dump_stack_lvl+0x99/0x250 [ 100.726405][ T5510] ? __asan_memcpy+0x40/0x70 [ 100.728467][ T5510] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.730781][ T5510] ? __pfx__printk+0x10/0x10 [ 100.732768][ T5510] vpanic+0x281/0x750 [ 100.734471][ T5510] ? preempt_schedule+0xae/0xc0 [ 100.736617][ T5510] ? __pfx_vpanic+0x10/0x10 [ 100.738579][ T5510] ? preempt_schedule_common+0x83/0xd0 [ 100.740937][ T5510] ? preempt_schedule+0xae/0xc0 [ 100.743162][ T5510] ? __pfx_preempt_schedule+0x10/0x10 [ 100.745484][ T5510] panic+0xb9/0xc0 [ 100.747188][ T5510] ? __pfx_panic+0x10/0x10 [ 100.749136][ T5510] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 100.751775][ T5510] ? crc32c+0xd0/0x460 [ 100.753638][ T5510] check_panic_on_warn+0x89/0xb0 [ 100.755843][ T5510] ? crc32c+0xd0/0x460 [ 100.757552][ T5510] end_report+0x78/0x160 [ 100.759366][ T5510] kasan_report+0x129/0x150 [ 100.761293][ T5510] ? crc32c+0xd0/0x460 [ 100.763098][ T5510] crc32c+0xd0/0x460 [ 100.764801][ T5510] ? xlog_cksum+0x6b/0xf0 [ 100.766711][ T5510] xlog_cksum+0x92/0xf0 [ 100.768450][ T5510] xlog_recover_process+0x7a/0x1f0 [ 100.770703][ T5510] xlog_do_recovery_pass+0x9cd/0xc30 [ 100.773039][ T5510] ? __pfx_xlog_do_recovery_pass+0x10/0x10 [ 100.775596][ T5510] ? xlog_verify_head+0xf2/0x440 [ 100.777716][ T5510] xlog_verify_head+0x136/0x440 [ 100.779913][ T5510] xlog_find_tail+0x5ca/0x840 [ 100.781926][ T5510] xlog_recover+0x4b/0x3e0 [ 100.783922][ T5510] xfs_log_mount+0x253/0x3e0 [ 100.785955][ T5510] xfs_mountfs+0xe5e/0x2330 [ 100.787916][ T5510] ? __pfx_xfs_mountfs+0x10/0x10 [ 100.790097][ T5510] ? trace_xfs_inode_timestamp_range+0x84/0x200 [ 100.792898][ T5510] xfs_fs_fill_super+0x11b3/0x1600 [ 100.795157][ T5510] get_tree_bdev_flags+0x40e/0x4d0 [ 100.797341][ T5510] ? __pfx_xfs_fs_fill_super+0x10/0x10 [ 100.799741][ T5510] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 100.802171][ T5510] vfs_get_tree+0x92/0x2b0 [ 100.804179][ T5510] do_new_mount+0x2a2/0x9e0 [ 100.806189][ T5510] ? __pfx_do_new_mount+0x10/0x10 [ 100.808391][ T5510] ? path_mount+0x61c/0xfe0 [ 100.810269][ T5510] ? user_path_at+0x44/0x60 [ 100.812106][ T5510] __se_sys_mount+0x317/0x410 [ 100.813996][ T5510] ? __pfx___se_sys_mount+0x10/0x10 [ 100.816066][ T5510] ? do_syscall_64+0xbe/0x3b0 [ 100.817963][ T5510] ? __x64_sys_mount+0x20/0xc0 [ 100.819943][ T5510] do_syscall_64+0xfa/0x3b0 [ 100.821757][ T5510] ? lockdep_hardirqs_on+0x9c/0x150 [ 100.823516][ T5510] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.825633][ T5510] ? clear_bhb_loop+0x60/0xb0 [ 100.827725][ T5510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.830122][ T5510] RIP: 0033:0x7f4b5679066a [ 100.831996][ T5510] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.839714][ T5510] RSP: 002b:00007ffe53426368 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 100.842970][ T5510] RAX: ffffffffffffffda RBX: 00007ffe534263f0 RCX: 00007f4b5679066a [ 100.846210][ T5510] RDX: 0000200000000500 RSI: 0000200000000200 RDI: 00007ffe534263b0 [ 100.849579][ T5510] RBP: 0000200000000500 R08: 00007ffe534263f0 R09: 0000000002218a5d [ 100.852906][ T5510] R10: 0000000002218a5d R11: 0000000000000246 R12: 0000200000000200 [ 100.856146][ T5510] R13: 00007ffe534263b0 R14: 0000000000009706 R15: 0000200000000100 [ 100.859239][ T5510] [ 100.861011][ T5510] Kernel Offset: disabled [ 100.862947][ T5510] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:06:24 Registers: info registers vcpu 0 CPU#0 RAX=1ffffffff3400760 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff9a003af0 RSP=ffffc90002afeeb0 R8 =ffff888033bc0237 R9 =1ffff11006778046 R10=dffffc0000000000 R11=ffffffff85513b90 R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff9a003860 R15=0000000000000000 RIP=ffffffff85513c07 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555587df500 ffffffff 00c00000 GS =0000 ffff88808d007000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd8c71909c0 CR3=0000000059e01000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe53426810 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe53426996 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe53426996 00007ffe5342699c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4b56812fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4b56812fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4b56812fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4b56812fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4b5681305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4b5681313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000