Warning: Permanently added '[localhost]:32157' (ED25519) to the list of known hosts.
2025/12/12 02:46:56 parsed 1 programs
syzkaller login: [ 90.099040][ T5323] cgroup: Unknown subsys name 'net'
[ 90.187631][ T5323] cgroup: Unknown subsys name 'cpuset'
[ 90.193087][ T5323] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 92.034985][ T5323] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 97.006908][ T785] cfg80211: failed to load regulatory.db
[ 97.681419][ T5339] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 99.491009][ T1040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 99.499870][ T1040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 99.551533][ T3719] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 99.555790][ T3719] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 103.178322][ T5395] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 103.182526][ T5395] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 103.186322][ T5395] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 103.190206][ T5395] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 103.193188][ T5395] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 104.045916][ T5409] chnl_net:caif_netlink_parms(): no params data found
[ 104.140408][ T5409] bridge0: port 1(bridge_slave_0) entered blocking state
[ 104.144541][ T5409] bridge0: port 1(bridge_slave_0) entered disabled state
[ 104.147874][ T5409] bridge_slave_0: entered allmulticast mode
[ 104.151716][ T5409] bridge_slave_0: entered promiscuous mode
[ 104.157333][ T5409] bridge0: port 2(bridge_slave_1) entered blocking state
[ 104.160350][ T5409] bridge0: port 2(bridge_slave_1) entered disabled state
[ 104.163280][ T5409] bridge_slave_1: entered allmulticast mode
[ 104.167652][ T5409] bridge_slave_1: entered promiscuous mode
[ 104.201683][ T5409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 104.217951][ T5409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 104.259716][ T5409] team0: Port device team_slave_0 added
[ 104.266249][ T5409] team0: Port device team_slave_1 added
[ 104.311290][ T5409] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 104.324592][ T5409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 104.344322][ T5409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 104.354859][ T5409] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 104.358052][ T5409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 104.375962][ T5409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 104.435585][ T5409] hsr_slave_0: entered promiscuous mode
[ 104.445093][ T5409] hsr_slave_1: entered promiscuous mode
[ 104.610440][ T5409] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 104.623570][ T5409] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 104.632699][ T5409] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 104.640707][ T5409] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 104.688261][ T5409] bridge0: port 2(bridge_slave_1) entered blocking state
[ 104.691577][ T5409] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 104.695798][ T5409] bridge0: port 1(bridge_slave_0) entered blocking state
[ 104.699075][ T5409] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 104.811741][ T5409] 8021q: adding VLAN 0 to HW filter on device bond0
[ 104.839122][ T2775] bridge0: port 1(bridge_slave_0) entered disabled state
[ 104.843336][ T2775] bridge0: port 2(bridge_slave_1) entered disabled state
[ 104.863468][ T5409] 8021q: adding VLAN 0 to HW filter on device team0
[ 104.891156][ T2700] bridge0: port 1(bridge_slave_0) entered blocking state
[ 104.894594][ T2700] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 104.915410][ T2775] bridge0: port 2(bridge_slave_1) entered blocking state
[ 104.918159][ T2775] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 105.158527][ T5409] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 105.226403][ T5409] veth0_vlan: entered promiscuous mode
[ 105.241230][ T5409] veth1_vlan: entered promiscuous mode
[ 105.288396][ T5409] veth0_macvtap: entered promiscuous mode
[ 105.299915][ T5409] veth1_macvtap: entered promiscuous mode
[ 105.312876][ T5409] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 105.327378][ T5409] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 105.338927][ T2700] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.349893][ T2700] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.365512][ T2700] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.380691][ T2700] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.499843][ T2700] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 105.567232][ T2700] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 105.615826][ T2700] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 105.687255][ T2700] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2025/12/12 02:47:15 executed programs: 0
[ 106.529955][ T46] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 106.536820][ T46] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 106.540907][ T46] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 106.547758][ T46] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 106.552527][ T46] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 106.735263][ T5436] chnl_net:caif_netlink_parms(): no params data found
[ 106.888959][ T5436] bridge0: port 1(bridge_slave_0) entered blocking state
[ 106.892924][ T5436] bridge0: port 1(bridge_slave_0) entered disabled state
[ 106.896894][ T5436] bridge_slave_0: entered allmulticast mode
[ 106.900814][ T5436] bridge_slave_0: entered promiscuous mode
[ 106.905865][ T5436] bridge0: port 2(bridge_slave_1) entered blocking state
[ 106.909035][ T5436] bridge0: port 2(bridge_slave_1) entered disabled state
[ 106.912124][ T5436] bridge_slave_1: entered allmulticast mode
[ 106.916354][ T5436] bridge_slave_1: entered promiscuous mode
[ 106.956318][ T5436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 106.962629][ T5436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 107.015670][ T5436] team0: Port device team_slave_0 added
[ 107.021126][ T5436] team0: Port device team_slave_1 added
[ 107.043639][ T5436] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 107.047067][ T5436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 107.057688][ T5436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 107.062868][ T5436] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 107.065986][ T5436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 107.077704][ T5436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 107.117107][ T5436] hsr_slave_0: entered promiscuous mode
[ 107.124654][ T5436] hsr_slave_1: entered promiscuous mode
[ 107.128378][ T5436] debugfs: 'hsr0' already exists in 'hsr'
[ 107.130881][ T5436] Cannot create hsr debugfs directory
[ 107.594360][ T2700] bridge_slave_1: left allmulticast mode
[ 107.597089][ T2700] bridge_slave_1: left promiscuous mode
[ 107.600012][ T2700] bridge0: port 2(bridge_slave_1) entered disabled state
[ 107.639566][ T2700] bridge_slave_0: left allmulticast mode
[ 107.642204][ T2700] bridge_slave_0: left promiscuous mode
[ 107.650736][ T2700] bridge0: port 1(bridge_slave_0) entered disabled state
[ 107.831474][ T2700] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 107.837599][ T2700] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 107.842735][ T2700] bond0 (unregistering): Released all slaves
[ 107.938858][ T2700] hsr_slave_0: left promiscuous mode
[ 107.941947][ T2700] hsr_slave_1: left promiscuous mode
[ 107.955189][ T2700] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 107.958421][ T2700] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 107.965001][ T2700] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 107.968128][ T2700] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 108.014465][ T2700] veth1_macvtap: left promiscuous mode
[ 108.017228][ T2700] veth0_macvtap: left promiscuous mode
[ 108.019675][ T2700] veth1_vlan: left promiscuous mode
[ 108.021908][ T2700] veth0_vlan: left promiscuous mode
[ 108.451072][ T2700] team0 (unregistering): Port device team_slave_1 removed
[ 108.478343][ T2700] team0 (unregistering): Port device team_slave_0 removed
[ 108.604934][ T46] Bluetooth: hci0: command tx timeout
[ 109.139602][ T5436] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 109.161012][ T5436] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 109.185458][ T5436] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 109.197524][ T5436] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 109.345245][ T5436] 8021q: adding VLAN 0 to HW filter on device bond0
[ 109.370328][ T5436] 8021q: adding VLAN 0 to HW filter on device team0
[ 109.410080][ T1040] bridge0: port 1(bridge_slave_0) entered blocking state
[ 109.413303][ T1040] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 109.427479][ T1040] bridge0: port 2(bridge_slave_1) entered blocking state
[ 109.430753][ T1040] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 109.480646][ T5436] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 109.504934][ T5436] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 109.681370][ T5436] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 109.741774][ T5436] veth0_vlan: entered promiscuous mode
[ 109.767814][ T5436] veth1_vlan: entered promiscuous mode
[ 109.802949][ T5436] veth0_macvtap: entered promiscuous mode
[ 109.811637][ T5436] veth1_macvtap: entered promiscuous mode
[ 109.828130][ T5436] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 109.836743][ T5436] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 109.845674][ T2700] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 109.856505][ T2700] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 109.860019][ T2700] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 109.863034][ T2700] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 109.922053][ T2700] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 109.932544][ T2700] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 109.956846][ T3719] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 109.960315][ T3719] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 110.186414][ T5474] loop0: detected capacity change from 0 to 32768
[ 110.194933][ T5474] =======================================================
[ 110.194933][ T5474] WARNING: The mand mount option has been deprecated and
[ 110.194933][ T5474] and is ignored by this kernel. Remove the mand
[ 110.194933][ T5474] option from the mount to silence this warning.
[ 110.194933][ T5474] =======================================================
[ 110.263504][ T5474] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 110.323825][ T5474] ==================================================================
[ 110.327473][ T5474] BUG: KASAN: slab-out-of-bounds in crc32c+0xcd/0x480
[ 110.330712][ T5474] Read of size 8 at addr ffff8880110d2a00 by task syz.0.17/5474
[ 110.334808][ T5474]
[ 110.335823][ T5474] CPU: 0 UID: 0 PID: 5474 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 110.335838][ T5474] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 110.335845][ T5474] Call Trace:
[ 110.335852][ T5474]
[ 110.335858][ T5474] dump_stack_lvl+0x189/0x250
[ 110.335876][ T5474] ? __virt_addr_valid+0x1c8/0x5c0
[ 110.335892][ T5474] ? rcu_is_watching+0x15/0xb0
[ 110.335905][ T5474] ? __kasan_check_byte+0x12/0x40
[ 110.335916][ T5474] ? __pfx_dump_stack_lvl+0x10/0x10
[ 110.335928][ T5474] ? rcu_is_watching+0x15/0xb0
[ 110.335940][ T5474] ? lock_release+0x4b/0x3b0
[ 110.335951][ T5474] ? __virt_addr_valid+0x1c8/0x5c0
[ 110.335963][ T5474] ? __virt_addr_valid+0x4a5/0x5c0
[ 110.335978][ T5474] print_report+0xca/0x240
[ 110.335989][ T5474] ? crc32c+0xcd/0x480
[ 110.336001][ T5474] kasan_report+0x118/0x150
[ 110.336013][ T5474] ? crc32c+0xcd/0x480
[ 110.336027][ T5474] crc32c+0xcd/0x480
[ 110.336047][ T5474] ? xlog_cksum+0x6a/0x100
[ 110.336058][ T5474] xlog_cksum+0x93/0x100
[ 110.336067][ T5474] xlog_recover_process+0x90/0x2f0
[ 110.336083][ T5474] xlog_do_recovery_pass+0x9cd/0xc30
[ 110.336098][ T5474] ? __pfx_xlog_do_recovery_pass+0x10/0x10
[ 110.336116][ T5474] ? kfree+0x1c0/0x660
[ 110.336130][ T5474] xlog_verify_head+0x136/0x440
[ 110.336146][ T5474] xlog_find_tail+0x5ca/0x840
[ 110.336160][ T5474] xlog_recover+0x4b/0x3e0
[ 110.336174][ T5474] xfs_log_mount+0x253/0x3e0
[ 110.336190][ T5474] xfs_mountfs+0xe5e/0x22c0
[ 110.336206][ T5474] ? __pfx_xfs_mountfs+0x10/0x10
[ 110.336219][ T5474] ? trace_xfs_inode_timestamp_range+0x84/0x1e0
[ 110.336230][ T5474] xfs_fs_fill_super+0x11f1/0x1640
[ 110.336243][ T5474] get_tree_bdev_flags+0x40e/0x4d0
[ 110.336258][ T5474] ? __pfx_xfs_fs_fill_super+0x10/0x10
[ 110.336268][ T5474] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 110.336285][ T5474] vfs_get_tree+0x92/0x2a0
[ 110.336300][ T5474] do_new_mount+0x302/0xa10
[ 110.336313][ T5474] ? __pfx_do_new_mount+0x10/0x10
[ 110.336324][ T5474] ? kmem_cache_free+0x197/0x620
[ 110.336339][ T5474] __se_sys_mount+0x313/0x410
[ 110.336350][ T5474] ? __pfx___se_sys_mount+0x10/0x10
[ 110.336362][ T5474] ? do_syscall_64+0xbe/0xf80
[ 110.336423][ T5474] ? __x64_sys_mount+0x20/0xc0
[ 110.336434][ T5474] do_syscall_64+0xfa/0xf80
[ 110.336447][ T5474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 110.336458][ T5474] ? clear_bhb_loop+0x60/0xb0
[ 110.336469][ T5474] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 110.336479][ T5474] RIP: 0033:0x7f5f99790f6a
[ 110.336489][ T5474] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 110.336497][ T5474] RSP: 002b:00007fffac8d1a48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 110.336509][ T5474] RAX: ffffffffffffffda RBX: 00007fffac8d1ad0 RCX: 00007f5f99790f6a
[ 110.336517][ T5474] RDX: 0000200000000500 RSI: 0000200000000200 RDI: 00007fffac8d1a90
[ 110.336523][ T5474] RBP: 0000200000000500 R08: 00007fffac8d1ad0 R09: 0000000002218a5d
[ 110.336530][ T5474] R10: 0000000002218a5d R11: 0000000000000246 R12: 0000200000000200
[ 110.336537][ T5474] R13: 00007fffac8d1a90 R14: 0000000000009706 R15: 0000200000000100
[ 110.336548][ T5474]
[ 110.336552][ T5474]
[ 110.471824][ T5474] Allocated by task 5474:
[ 110.473709][ T5474] kasan_save_track+0x3e/0x80
[ 110.475758][ T5474] __kasan_kmalloc+0x93/0xb0
[ 110.477793][ T5474] __kvmalloc_node_noprof+0x5d5/0x920
[ 110.480311][ T5474] xlog_do_recovery_pass+0x106/0xc30
[ 110.482631][ T5474] xlog_verify_head+0x136/0x440
[ 110.484935][ T5474] xlog_find_tail+0x5ca/0x840
[ 110.487037][ T5474] xlog_recover+0x4b/0x3e0
[ 110.489124][ T5474] xfs_log_mount+0x253/0x3e0
[ 110.491253][ T5474] xfs_mountfs+0xe5e/0x22c0
[ 110.493175][ T5474] xfs_fs_fill_super+0x11f1/0x1640
[ 110.495533][ T5474] get_tree_bdev_flags+0x40e/0x4d0
[ 110.497756][ T5474] vfs_get_tree+0x92/0x2a0
[ 110.499832][ T5474] do_new_mount+0x302/0xa10
[ 110.502451][ T5474] __se_sys_mount+0x313/0x410
[ 110.504755][ T5474] do_syscall_64+0xfa/0xf80
[ 110.506833][ T5474] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 110.509424][ T5474]
[ 110.510560][ T5474] The buggy address belongs to the object at ffff8880110d2800
[ 110.510560][ T5474] which belongs to the cache kmalloc-512 of size 512
[ 110.516428][ T5474] The buggy address is located 0 bytes to the right of
[ 110.516428][ T5474] allocated 512-byte region [ffff8880110d2800, ffff8880110d2a00)
[ 110.522744][ T5474]
[ 110.523826][ T5474] The buggy address belongs to the physical page:
[ 110.526486][ T5474] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x110d2
[ 110.530283][ T5474] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 110.533849][ T5474] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 110.537075][ T5474] page_type: f5(slab)
[ 110.538808][ T5474] raw: 00fff00000000040 ffff88801a441c80 dead000000000100 dead000000000122
[ 110.542484][ T5474] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000
[ 110.546084][ T5474] head: 00fff00000000040 ffff88801a441c80 dead000000000100 dead000000000122
[ 110.549956][ T5474] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000
[ 110.553792][ T5474] head: 00fff00000000001 ffffea0000443481 00000000ffffffff 00000000ffffffff
[ 110.557518][ T5474] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[ 110.561470][ T5474] page dumped because: kasan: bad access detected
[ 110.564255][ T5474] page_owner tracks the page as allocated
[ 110.566700][ T5474] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5409, tgid 5409 (syz-executor), ts 104117150153, free_ts 101344215420
[ 110.575836][ T5474] post_alloc_hook+0x234/0x290
[ 110.578109][ T5474] get_page_from_freelist+0x2365/0x2440
[ 110.580569][ T5474] __alloc_frozen_pages_noprof+0x181/0x370
[ 110.583176][ T5474] alloc_pages_mpol+0x232/0x4a0
[ 110.585265][ T5474] allocate_slab+0x86/0x3b0
[ 110.587317][ T5474] ___slab_alloc+0xf2b/0x1960
[ 110.589576][ T5474] __slab_alloc+0x65/0x100
[ 110.591568][ T5474] __kmalloc_noprof+0x47d/0x800
[ 110.593569][ T5474] __alloc_workqueue+0x108/0x1b80
[ 110.595756][ T5474] alloc_workqueue_noprof+0xd4/0x210
[ 110.597956][ T5474] wg_newlink+0x1f1/0x670
[ 110.599884][ T5474] rtnl_newlink_create+0x310/0xb00
[ 110.602150][ T5474] rtnl_newlink+0x16e7/0x1c90
[ 110.604355][ T5474] rtnetlink_rcv_msg+0x7cf/0xb70
[ 110.606617][ T5474] netlink_rcv_skb+0x208/0x470
[ 110.608728][ T5474] netlink_unicast+0x82f/0x9e0
[ 110.610899][ T5474] page last free pid 79 tgid 79 stack trace:
[ 110.613645][ T5474] free_unref_folios+0xdb3/0x14f0
[ 110.615977][ T5474] shrink_folio_list+0x291c/0x4a10
[ 110.618361][ T5474] evict_folios+0x471e/0x57c0
[ 110.620514][ T5474] try_to_shrink_lruvec+0x8a3/0xb50
[ 110.622847][ T5474] shrink_one+0x25c/0x720
[ 110.624669][ T5474] shrink_node+0x2f7d/0x35b0
[ 110.626706][ T5474] kswapd+0x145a/0x2820
[ 110.628536][ T5474] kthread+0x711/0x8a0
[ 110.630446][ T5474] ret_from_fork+0x599/0xb30
[ 110.632582][ T5474] ret_from_fork_asm+0x1a/0x30
[ 110.634850][ T5474]
[ 110.636006][ T5474] Memory state around the buggy address:
[ 110.638602][ T5474] ffff8880110d2900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 110.642049][ T5474] ffff8880110d2980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 110.645537][ T5474] >ffff8880110d2a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 110.648845][ T5474] ^
[ 110.650546][ T5474] ffff8880110d2a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 110.653812][ T5474] ffff8880110d2b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 110.657036][ T5474] ==================================================================
[ 110.690777][ T46] Bluetooth: hci0: command tx timeout
[ 110.695700][ T5474] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 110.699070][ T5474] CPU: 0 UID: 0 PID: 5474 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 110.703887][ T5474] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 110.709668][ T5474] Call Trace:
[ 110.711290][ T5474]
[ 110.712636][ T5474] dump_stack_lvl+0x99/0x250
[ 110.714787][ T5474] ? __asan_memcpy+0x40/0x70
[ 110.717149][ T5474] ? __pfx_dump_stack_lvl+0x10/0x10
[ 110.719544][ T5474] ? __pfx__printk+0x10/0x10
[ 110.721479][ T5474] vpanic+0x237/0x6d0
[ 110.723140][ T5474] ? __pfx_vpanic+0x10/0x10
[ 110.725161][ T5474] ? preempt_schedule_common+0x83/0xd0
[ 110.727510][ T5474] ? preempt_schedule+0xae/0xc0
[ 110.730059][ T5474] panic+0xb9/0xc0
[ 110.731813][ T5474] ? __pfx_panic+0x10/0x10
[ 110.733836][ T5474] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 110.736570][ T5474] ? crc32c+0xcd/0x480
[ 110.738038][ T5474] check_panic_on_warn+0x89/0xb0
[ 110.740078][ T5474] ? crc32c+0xcd/0x480
[ 110.741562][ T5474] end_report+0x6f/0x140
[ 110.743149][ T5474] kasan_report+0x129/0x150
[ 110.744976][ T5474] ? crc32c+0xcd/0x480
[ 110.746798][ T5474] crc32c+0xcd/0x480
[ 110.748616][ T5474] ? xlog_cksum+0x6a/0x100
[ 110.750583][ T5474] xlog_cksum+0x93/0x100
[ 110.752468][ T5474] xlog_recover_process+0x90/0x2f0
[ 110.754675][ T5474] xlog_do_recovery_pass+0x9cd/0xc30
[ 110.756853][ T5474] ? __pfx_xlog_do_recovery_pass+0x10/0x10
[ 110.759289][ T5474] ? kfree+0x1c0/0x660
[ 110.761180][ T5474] xlog_verify_head+0x136/0x440
[ 110.763252][ T5474] xlog_find_tail+0x5ca/0x840
[ 110.765358][ T5474] xlog_recover+0x4b/0x3e0
[ 110.767384][ T5474] xfs_log_mount+0x253/0x3e0
[ 110.769509][ T5474] xfs_mountfs+0xe5e/0x22c0
[ 110.771499][ T5474] ? __pfx_xfs_mountfs+0x10/0x10
[ 110.773771][ T5474] ? trace_xfs_inode_timestamp_range+0x84/0x1e0
[ 110.776528][ T5474] xfs_fs_fill_super+0x11f1/0x1640
[ 110.778836][ T5474] get_tree_bdev_flags+0x40e/0x4d0
[ 110.781085][ T5474] ? __pfx_xfs_fs_fill_super+0x10/0x10
[ 110.783280][ T5474] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 110.785670][ T5474] vfs_get_tree+0x92/0x2a0
[ 110.787622][ T5474] do_new_mount+0x302/0xa10
[ 110.789647][ T5474] ? __pfx_do_new_mount+0x10/0x10
[ 110.791828][ T5474] ? kmem_cache_free+0x197/0x620
[ 110.793930][ T5474] __se_sys_mount+0x313/0x410
[ 110.795962][ T5474] ? __pfx___se_sys_mount+0x10/0x10
[ 110.798133][ T5474] ? do_syscall_64+0xbe/0xf80
[ 110.800076][ T5474] ? __x64_sys_mount+0x20/0xc0
[ 110.801968][ T5474] do_syscall_64+0xfa/0xf80
[ 110.803754][ T5474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 110.806252][ T5474] ? clear_bhb_loop+0x60/0xb0
[ 110.808185][ T5474] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 110.810658][ T5474] RIP: 0033:0x7f5f99790f6a
[ 110.812249][ T5474] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 110.820056][ T5474] RSP: 002b:00007fffac8d1a48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 110.823391][ T5474] RAX: ffffffffffffffda RBX: 00007fffac8d1ad0 RCX: 00007f5f99790f6a
[ 110.826610][ T5474] RDX: 0000200000000500 RSI: 0000200000000200 RDI: 00007fffac8d1a90
[ 110.829743][ T5474] RBP: 0000200000000500 R08: 00007fffac8d1ad0 R09: 0000000002218a5d
[ 110.832950][ T5474] R10: 0000000002218a5d R11: 0000000000000246 R12: 0000200000000200
[ 110.836475][ T5474] R13: 00007fffac8d1a90 R14: 0000000000009706 R15: 0000200000000100
[ 110.839928][ T5474]
[ 110.841629][ T5474] Kernel Offset: disabled
[ 110.843579][ T5474] Rebooting in 86400 seconds..
VM DIAGNOSIS:
02:47:19 Registers:
info registers vcpu 0
CPU#0
RAX=000000000000007a RBX=000000000000007a RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000299eeb0
R8 =ffff888033d88237 R9 =1ffff110067b1046 R10=dffffc0000000000 R11=ffffffff851c6d20
R12=dffffc0000000000 R13=ffffffff99ae5a02 R14=ffffffff99dfa680 R15=0000000000000000
RIP=ffffffff851c6d9c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055556368c500 ffffffff 00c00000
GS =0000 ffff88808d22f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007f7c41d909c0 CR3=0000000055c3e000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffac8d1ef0 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5f99815050
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5f9981505d
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5f99815057
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5f9981506b
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5f998150f1
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5f998151cf
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000