Warning: Permanently added '10.128.0.51' (ECDSA) to the list of known hosts. [ 195.349852][ T5080] cgroup: Unknown subsys name 'net' [ 195.464001][ T5080] cgroup: Unknown subsys name 'rlimit' executing program [ 195.807099][ T5084] loop0: detected capacity change from 0 to 40427 [ 195.822621][ T5084] F2FS-fs (loop0): Found nat_bits in checkpoint [ 195.849120][ T5084] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 195.863696][ T27] audit: type=1804 audit(1674831622.603:2): pid=5084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor122" name="/root/syzkaller.8GZrdk/0/file0/bus" dev="loop0" ino=10 res=1 errno=0 [ 195.897608][ T5084] syz-executor122: attempt to access beyond end of device [ 195.897608][ T5084] loop0: rw=2049, sector=77824, nr_sectors = 2048 limit=40427 [ 195.924056][ T5081] syz-executor122: attempt to access beyond end of device [ 195.924056][ T5081] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 executing program [ 196.245398][ T5091] loop0: detected capacity change from 0 to 40427 [ 196.256975][ T5091] F2FS-fs (loop0): Found nat_bits in checkpoint [ 196.282248][ T5091] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 196.292986][ T27] audit: type=1804 audit(1674831623.033:3): pid=5091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor122" name="/root/syzkaller.8GZrdk/1/file0/bus" dev="loop0" ino=10 res=1 errno=0 [ 196.325488][ T5091] syz-executor122: attempt to access beyond end of device [ 196.325488][ T5091] loop0: rw=2049, sector=77824, nr_sectors = 2048 limit=40427 [ 196.350161][ T5081] syz-executor122: attempt to access beyond end of device [ 196.350161][ T5081] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 executing program [ 196.678742][ T5097] loop0: detected capacity change from 0 to 40427 [ 196.689870][ T5097] F2FS-fs (loop0): Found nat_bits in checkpoint [ 196.714656][ T5097] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 196.725439][ T27] audit: type=1804 audit(1674831623.463:4): pid=5097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor122" name="/root/syzkaller.8GZrdk/2/file0/bus" dev="loop0" ino=10 res=1 errno=0 [ 196.759647][ T5097] syz-executor122: attempt to access beyond end of device [ 196.759647][ T5097] loop0: rw=2049, sector=77824, nr_sectors = 2048 limit=40427 [ 196.784785][ T5081] syz-executor122: attempt to access beyond end of device [ 196.784785][ T5081] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 executing program [ 197.109113][ T5103] loop0: detected capacity change from 0 to 40427 [ 197.120827][ T5103] F2FS-fs (loop0): Found nat_bits in checkpoint [ 197.145043][ T5103] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 197.155196][ T27] audit: type=1804 audit(1674831623.893:5): pid=5103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor122" name="/root/syzkaller.8GZrdk/3/file0/bus" dev="loop0" ino=10 res=1 errno=0 [ 197.195099][ T5103] syz-executor122: attempt to access beyond end of device [ 197.195099][ T5103] loop0: rw=2049, sector=77824, nr_sectors = 2048 limit=40427 [ 197.219121][ T5081] syz-executor122: attempt to access beyond end of device [ 197.219121][ T5081] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 executing program [ 197.539076][ T5109] loop0: detected capacity change from 0 to 40427 [ 197.551201][ T5109] F2FS-fs (loop0): Found nat_bits in checkpoint [ 197.576521][ T5109] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 197.587029][ T27] audit: type=1804 audit(1674831624.333:6): pid=5109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor122" name="/root/syzkaller.8GZrdk/4/file0/bus" dev="loop0" ino=10 res=1 errno=0 [ 197.632188][ T5109] syz-executor122: attempt to access beyond end of device [ 197.632188][ T5109] loop0: rw=2049, sector=77824, nr_sectors = 2048 limit=40427 [ 197.656916][ T5081] syz-executor122: attempt to access beyond end of device [ 197.656916][ T5081] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 executing program [ 197.978443][ T5115] loop0: detected capacity change from 0 to 40427 [ 197.989771][ T5115] F2FS-fs (loop0): Found nat_bits in checkpoint [ 198.014709][ T5115] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 198.029843][ T27] audit: type=1804 audit(1674831624.773:7): pid=5115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor122" name="/root/syzkaller.8GZrdk/5/file0/bus" dev="loop0" ino=10 res=1 errno=0 executing program [ 198.380186][ T5121] loop0: detected capacity change from 0 to 40427 [ 198.392395][ T5121] F2FS-fs (loop0): Found nat_bits in checkpoint [ 198.416687][ T5121] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 198.426289][ T27] audit: type=1804 audit(1674831625.163:8): pid=5121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor122" name="/root/syzkaller.8GZrdk/6/file0/bus" dev="loop0" ino=10 res=1 errno=0 executing program [ 198.776982][ T5127] loop0: detected capacity change from 0 to 40427 [ 198.788504][ T5127] F2FS-fs (loop0): Found nat_bits in checkpoint [ 198.813010][ T5127] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 198.823869][ T27] audit: type=1804 audit(1674831625.563:9): pid=5127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor122" name="/root/syzkaller.8GZrdk/7/file0/bus" dev="loop0" ino=10 res=1 errno=0 executing program [ 199.185498][ T5133] loop0: detected capacity change from 0 to 40427 [ 199.196753][ T5133] F2FS-fs (loop0): Found nat_bits in checkpoint [ 199.221509][ T5133] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 199.236280][ T27] audit: type=1804 audit(1674831625.973:10): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor122" name="/root/syzkaller.8GZrdk/8/file0/bus" dev="loop0" ino=10 res=1 errno=0 executing program [ 199.578120][ T5139] loop0: detected capacity change from 0 to 40427 [ 199.589605][ T5139] F2FS-fs (loop0): Found nat_bits in checkpoint [ 199.613996][ T5139] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 199.626410][ T27] audit: type=1804 audit(1674831626.363:11): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor122" name="/root/syzkaller.8GZrdk/9/file0/bus" dev="loop0" ino=10 res=1 errno=0 executing program [ 199.975910][ T5145] loop0: detected capacity change from 0 to 40427 [ 199.987280][ T5145] F2FS-fs (loop0): Found nat_bits in checkpoint [ 200.011322][ T5145] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 executing program [ 200.364616][ T5151] loop0: detected capacity change from 0 to 40427 [ 200.377500][ T5151] F2FS-fs (loop0): Found nat_bits in checkpoint [ 200.402526][ T5151] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 executing program [ 200.751492][ T5157] loop0: detected capacity change from 0 to 40427 [ 200.762914][ T5157] F2FS-fs (loop0): Found nat_bits in checkpoint [ 200.787220][ T5157] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 executing program [ 201.138937][ T5163] loop0: detected capacity change from 0 to 40427 [ 201.150621][ T5163] F2FS-fs (loop0): Found nat_bits in checkpoint [ 201.175034][ T5163] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 201.187953][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 201.187965][ T27] audit: type=1804 audit(1674831627.933:15): pid=5163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor122" name="/root/syzkaller.8GZrdk/13/file0/bus" dev="loop0" ino=10 res=1 errno=0 [ 201.225222][ T5163] bio_check_eod: 16 callbacks suppressed [ 201.225236][ T5163] syz-executor122: attempt to access beyond end of device [ 201.225236][ T5163] loop0: rw=2049, sector=77824, nr_sectors = 2048 limit=40427 [ 201.254609][ T5081] syz-executor122: attempt to access beyond end of device [ 201.254609][ T5081] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 executing program [ 201.567983][ T5170] loop0: detected capacity change from 0 to 40427 [ 201.579383][ T5170] F2FS-fs (loop0): Found nat_bits in checkpoint [ 201.603572][ T5170] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 201.618350][ T27] audit: type=1804 audit(1674831628.363:16): pid=5170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor122" name="/root/syzkaller.8GZrdk/14/file0/bus" dev="loop0" ino=10 res=1 errno=0 [ 201.655392][ T5170] syz-executor122: attempt to access beyond end of device [ 201.655392][ T5170] loop0: rw=2049, sector=77824, nr_sectors = 2048 limit=40427 [ 201.678429][ T5081] syz-executor122: attempt to access beyond end of device [ 201.678429][ T5081] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 executing program [ 201.993994][ T5176] loop0: detected capacity change from 0 to 40427 [ 202.005330][ T5176] F2FS-fs (loop0): Found nat_bits in checkpoint [ 202.029445][ T5176] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 202.039225][ T27] audit: type=1804 audit(1674831628.783:17): pid=5176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor122" name="/root/syzkaller.8GZrdk/15/file0/bus" dev="loop0" ino=10 res=1 errno=0 [ 202.082070][ T5176] syz-executor122: attempt to access beyond end of device [ 202.082070][ T5176] loop0: rw=2049, sector=77824, nr_sectors = 2048 limit=40427 [ 202.104774][ T5081] syz-executor122: attempt to access beyond end of device [ 202.104774][ T5081] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 executing program [ 202.424077][ T5182] loop0: detected capacity change from 0 to 40427 [ 202.437400][ T5182] F2FS-fs (loop0): Found nat_bits in checkpoint [ 202.462063][ T5182] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 202.472050][ T27] audit: type=1804 audit(1674831629.213:18): pid=5182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor122" name="/root/syzkaller.8GZrdk/16/file0/bus" dev="loop0" ino=10 res=1 errno=0 [ 202.513874][ T5182] syz-executor122: attempt to access beyond end of device [ 202.513874][ T5182] loop0: rw=2049, sector=77824, nr_sectors = 2048 limit=40427 [ 202.538129][ T5081] syz-executor122: attempt to access beyond end of device [ 202.538129][ T5081] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 executing program [ 202.848743][ T5188] loop0: detected capacity change from 0 to 40427 [ 202.859823][ T5188] F2FS-fs (loop0): Found nat_bits in checkpoint [ 202.884105][ T5188] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 202.893580][ T27] audit: type=1804 audit(1674831629.633:19): pid=5188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor122" name="/root/syzkaller.8GZrdk/17/file0/bus" dev="loop0" ino=10 res=1 errno=0 [ 202.934055][ T5188] syz-executor122: attempt to access beyond end of device [ 202.934055][ T5188] loop0: rw=2049, sector=77824, nr_sectors = 2048 limit=40427 [ 202.956842][ T5081] syz-executor122: attempt to access beyond end of device [ 202.956842][ T5081] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 executing program [ 203.273271][ T5194] loop0: detected capacity change from 0 to 40427 [ 203.284922][ T5194] F2FS-fs (loop0): Found nat_bits in checkpoint [ 203.309382][ T5194] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 203.336318][ T27] audit: type=1804 audit(1674831630.073:20): pid=5194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor122" name="/root/syzkaller.8GZrdk/18/file0/bus" dev="loop0" ino=10 res=1 errno=0 executing program [ 203.669173][ T5200] loop0: detected capacity change from 0 to 40427 [ 203.681140][ T5200] F2FS-fs (loop0): Found nat_bits in checkpoint [ 203.705324][ T5200] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 203.714841][ T27] audit: type=1804 audit(1674831630.453:21): pid=5200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor122" name="/root/syzkaller.8GZrdk/19/file0/bus" dev="loop0" ino=10 res=1 errno=0 executing program [ 204.064630][ T5206] loop0: detected capacity change from 0 to 40427 [ 204.076003][ T5206] F2FS-fs (loop0): Found nat_bits in checkpoint [ 204.100287][ T5206] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 204.110746][ T27] audit: type=1804 audit(1674831630.853:22): pid=5206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor122" name="/root/syzkaller.8GZrdk/20/file0/bus" dev="loop0" ino=10 res=1 errno=0 executing program [ 204.485468][ T5212] loop0: detected capacity change from 0 to 40427 [ 204.497261][ T5212] F2FS-fs (loop0): Found nat_bits in checkpoint [ 204.521434][ T5212] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 204.536283][ T27] audit: type=1804 audit(1674831631.273:23): pid=5212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor122" name="/root/syzkaller.8GZrdk/21/file0/bus" dev="loop0" ino=10 res=1 errno=0 executing program [ 204.892523][ T5218] loop0: detected capacity change from 0 to 40427 [ 204.903389][ T5218] F2FS-fs (loop0): Found nat_bits in checkpoint [ 204.927661][ T5218] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 204.938481][ T27] audit: type=1804 audit(1674831631.683:24): pid=5218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor122" name="/root/syzkaller.8GZrdk/22/file0/bus" dev="loop0" ino=10 res=1 errno=0 executing program [ 205.279137][ T5224] loop0: detected capacity change from 0 to 40427 [ 205.290633][ T5224] F2FS-fs (loop0): Found nat_bits in checkpoint [ 205.314652][ T5224] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 executing program [ 205.669206][ T5230] loop0: detected capacity change from 0 to 40427 [ 205.680394][ T5230] F2FS-fs (loop0): Found nat_bits in checkpoint [ 205.704869][ T5230] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 executing program [ 206.049953][ T5236] loop0: detected capacity change from 0 to 40427 [ 206.061419][ T5236] F2FS-fs (loop0): Found nat_bits in checkpoint [ 206.085553][ T5236] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 executing program [ 206.426693][ T5242] loop0: detected capacity change from 0 to 40427 [ 206.438329][ T5242] F2FS-fs (loop0): Found nat_bits in checkpoint [ 206.462515][ T5242] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 206.481743][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 206.481757][ T27] audit: type=1804 audit(1674831633.213:28): pid=5242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor122" name="/root/syzkaller.8GZrdk/26/file0/bus" dev="loop0" ino=10 res=1 errno=0 [ 206.502525][ T5242] bio_check_eod: 16 callbacks suppressed [ 206.502540][ T5242] syz-executor122: attempt to access beyond end of device [ 206.502540][ T5242] loop0: rw=2049, sector=77824, nr_sectors = 2048 limit=40427 [ 206.539599][ T5081] syz-executor122: attempt to access beyond end of device [ 206.539599][ T5081] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 executing program [ 206.857962][ T5249] loop0: detected capacity change from 0 to 40427 [ 206.869390][ T5249] F2FS-fs (loop0): Found nat_bits in checkpoint [ 206.893510][ T5249] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 206.904091][ T27] audit: type=1804 audit(1674831633.643:29): pid=5249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor122" name="/root/syzkaller.8GZrdk/27/file0/bus" dev="loop0" ino=10 res=1 errno=0 [ 206.933658][ T5249] syz-executor122: attempt to access beyond end of device [ 206.933658][ T5249] loop0: rw=2049, sector=77824, nr_sectors = 2048 limit=40427 [ 206.961645][ T5081] syz-executor122: attempt to access beyond end of device [ 206.961645][ T5081] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 executing program [ 207.267324][ T5255] loop0: detected capacity change from 0 to 40427 [ 207.278912][ T5255] F2FS-fs (loop0): Found nat_bits in checkpoint [ 207.303024][ T5255] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 207.316286][ T27] audit: type=1804 audit(1674831634.053:30): pid=5255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor122" name="/root/syzkaller.8GZrdk/28/file0/bus" dev="loop0" ino=10 res=1 errno=0 [ 207.340967][ T5255] syz-executor122: attempt to access beyond end of device [ 207.340967][ T5255] loop0: rw=2049, sector=77824, nr_sectors = 2048 limit=40427 [ 207.366095][ T5081] syz-executor122: attempt to access beyond end of device [ 207.366095][ T5081] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 executing program [ 207.686575][ T5261] loop0: detected capacity change from 0 to 40427 [ 207.697892][ T5261] F2FS-fs (loop0): Found nat_bits in checkpoint [ 207.722036][ T5261] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 207.739973][ T27] audit: type=1804 audit(1674831634.483:31): pid=5261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor122" name="/root/syzkaller.8GZrdk/29/file0/bus" dev="loop0" ino=10 res=1 errno=0 [ 207.766722][ T5261] syz-executor122: attempt to access beyond end of device [ 207.766722][ T5261] loop0: rw=2049, sector=77824, nr_sectors = 2048 limit=40427 [ 207.789422][ T5081] syz-executor122: attempt to access beyond end of device [ 207.789422][ T5081] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 executing program [ 208.101199][ T5267] loop0: detected capacity change from 0 to 40427 [ 208.112465][ T5267] F2FS-fs (loop0): Found nat_bits in checkpoint [ 208.136700][ T5267] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 208.147358][ T27] audit: type=1804 audit(1674831634.893:32): pid=5267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor122" name="/root/syzkaller.8GZrdk/30/file0/bus" dev="loop0" ino=10 res=1 errno=0 [ 208.177800][ T5267] syz-executor122: attempt to access beyond end of device [ 208.177800][ T5267] loop0: rw=2049, sector=77824, nr_sectors = 2048 limit=40427 [ 208.205267][ T5081] syz-executor122: attempt to access beyond end of device [ 208.205267][ T5081] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 executing program [ 208.535502][ T5273] loop0: detected capacity change from 0 to 40427 [ 208.547046][ T5273] F2FS-fs (loop0): Found nat_bits in checkpoint [ 208.571089][ T5273] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 208.586280][ T27] audit: type=1804 audit(1674831635.323:33): pid=5273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor122" name="/root/syzkaller.8GZrdk/31/file0/bus" dev="loop0" ino=10 res=1 errno=0 [ 208.632090][ T5273] ================================================================== [ 208.640175][ T5273] BUG: KASAN: use-after-free in __attach_extent_node+0x23d/0x480 [ 208.647896][ T5273] Write of size 8 at addr ffff8880714514e8 by task syz-executor122/5273 [ 208.656201][ T5273] [ 208.658519][ T5273] CPU: 1 PID: 5273 Comm: syz-executor122 Not tainted 6.2.0-rc5-syzkaller-00047-g7c46948a6e9c #0 [ 208.668905][ T5273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 208.678961][ T5273] Call Trace: [ 208.682233][ T5273] [ 208.685159][ T5273] dump_stack_lvl+0x1b1/0x290 [ 208.689826][ T5273] ? nf_tcp_handle_invalid+0x630/0x630 [ 208.695271][ T5273] ? __wake_up_klogd+0xcd/0x100 [ 208.700118][ T5273] ? panic+0x710/0x710 [ 208.704170][ T5273] ? _printk+0xc0/0x100 [ 208.708307][ T5273] ? _raw_spin_lock_irqsave+0x8e/0x100 [ 208.713754][ T5273] print_address_description+0x74/0x340 [ 208.719288][ T5273] print_report+0x107/0x1f0 [ 208.723774][ T5273] ? __virt_addr_valid+0x21b/0x2d0 [ 208.728870][ T5273] ? __phys_addr+0xb5/0x160 [ 208.733356][ T5273] ? __attach_extent_node+0x23d/0x480 [ 208.738714][ T5273] kasan_report+0xcd/0x100 [ 208.743117][ T5273] ? __attach_extent_node+0x23d/0x480 [ 208.748484][ T5273] __attach_extent_node+0x23d/0x480 [ 208.753692][ T5273] __insert_extent_tree+0x25b/0x580 [ 208.758878][ T5273] __update_extent_tree_range+0x15cf/0x1e00 [ 208.764754][ T5273] ? rcu_read_lock_sched_held+0x87/0x110 [ 208.770377][ T5273] ? rcu_lock_acquire+0x30/0x30 [ 208.775208][ T5273] ? f2fs_update_read_extent_cache_range+0x4a0/0x4a0 [ 208.781869][ T5273] ? rcu_lock_acquire+0x30/0x30 [ 208.786704][ T5273] ? __lock_acquire+0x1f60/0x1f60 [ 208.791722][ T5273] ? folio_memcg_unlock+0x18e/0x240 [ 208.796908][ T5273] ? f2fs_start_bidx_of_node+0x49/0x360 [ 208.802439][ T5273] f2fs_update_read_extent_cache+0x410/0x580 [ 208.808518][ T5273] ? __lookup_extent_tree+0x770/0x770 [ 208.813873][ T5273] f2fs_outplace_write_data+0x1e2/0x380 [ 208.819402][ T5273] ? do_write_page+0x700/0x700 [ 208.824146][ T5273] ? f2fs_encrypt_one_page+0xae/0x420 [ 208.829502][ T5273] f2fs_do_write_data_page+0x122d/0x2570 [ 208.835118][ T5273] ? page_private_dummy+0x130/0x130 [ 208.840301][ T5273] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 208.846277][ T5273] f2fs_write_single_data_page+0x1162/0x1c90 [ 208.852256][ T5273] ? f2fs_i_compr_blocks_update+0x150/0x150 [ 208.858133][ T5273] ? folio_wait_writeback+0x200/0x200 [ 208.863490][ T5273] f2fs_write_cache_pages+0xf6e/0x2330 [ 208.868944][ T5273] ? trace_f2fs_writepages+0x2f0/0x2f0 [ 208.874409][ T5273] ? rcu_lock_acquire+0x30/0x30 [ 208.879241][ T5273] ? __lock_acquire+0x1f60/0x1f60 [ 208.884248][ T5273] ? rcu_read_lock_sched_held+0x87/0x110 [ 208.889861][ T5273] ? filemap_dirty_folio+0x173/0x390 [ 208.895132][ T5273] ? blk_start_plug+0x95/0x110 [ 208.899875][ T5273] f2fs_write_data_pages+0x7d2/0xc30 [ 208.905145][ T5273] ? f2fs_read_data_folio+0x200/0x200 [ 208.910503][ T5273] ? rcu_read_lock_sched_held+0x87/0x110 [ 208.916115][ T5273] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 208.922075][ T5273] ? f2fs_read_data_folio+0x200/0x200 [ 208.927432][ T5273] do_writepages+0x3c3/0x680 [ 208.932006][ T5273] ? __writepage+0x120/0x120 [ 208.936577][ T5273] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 208.942538][ T5273] ? filemap_fdatawrite_wbc+0x113/0x170 [ 208.948086][ T5273] ? do_raw_spin_lock+0x147/0x3a0 [ 208.953109][ T5273] ? __lock_acquire+0x1f60/0x1f60 [ 208.958116][ T5273] ? do_raw_spin_unlock+0x134/0x8a0 [ 208.963297][ T5273] ? wbc_attach_and_unlock_inode+0xc3/0x540 [ 208.969174][ T5273] filemap_fdatawrite_wbc+0x11e/0x170 [ 208.974530][ T5273] file_write_and_wait_range+0x219/0x320 [ 208.980170][ T5273] ? trace_file_check_and_advance_wb_err+0x2b0/0x2b0 [ 208.986834][ T5273] f2fs_do_sync_file+0x611/0x19f0 [ 208.991845][ T5273] ? f2fs_sync_file+0x150/0x150 [ 208.996685][ T5273] ? __up_read+0x690/0x690 [ 209.001085][ T5273] ? f2fs_sync_file+0xe3/0x150 [ 209.005841][ T5273] f2fs_file_write_iter+0x659/0x2400 [ 209.011115][ T5273] ? f2fs_file_read_iter+0xc00/0xc00 [ 209.016381][ T5273] ? rcu_read_lock_any_held+0xb1/0x130 [ 209.021836][ T5273] ? apparmor_file_permission+0x2da/0x310 [ 209.027539][ T5273] vfs_write+0x7dc/0xc50 [ 209.031764][ T5273] ? __lock_acquire+0x1f60/0x1f60 [ 209.036773][ T5273] ? file_end_write+0x230/0x230 [ 209.041608][ T5273] ? mutex_lock_nested+0x17/0x20 [ 209.046527][ T5273] ? __fdget_pos+0x242/0x2e0 [ 209.051102][ T5273] ? ksys_write+0x72/0x2a0 [ 209.055501][ T5273] ksys_write+0x177/0x2a0 [ 209.059812][ T5273] ? __ia32_sys_read+0x80/0x80 [ 209.064555][ T5273] ? syscall_enter_from_user_mode+0x2e/0x1d0 [ 209.070521][ T5273] ? lockdep_hardirqs_on+0x8d/0x130 [ 209.075699][ T5273] ? syscall_enter_from_user_mode+0x2e/0x1d0 [ 209.081666][ T5273] do_syscall_64+0x3d/0xb0 [ 209.086085][ T5273] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 209.091961][ T5273] RIP: 0033:0x7fbe7cc4e4a9 [ 209.096358][ T5273] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 d1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 209.115953][ T5273] RSP: 002b:00007fbe7cbf12f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 209.124344][ T5273] RAX: ffffffffffffffda RBX: 00007fbe7ccd1780 RCX: 00007fbe7cc4e4a9 [ 209.132324][ T5273] RDX: 00000000000ffe00 RSI: 0000000020004200 RDI: 0000000000000004 [ 209.140274][ T5273] RBP: 00007fbe7cc9daec R08: 0000000000000000 R09: 0000000000000000 [ 209.148227][ T5273] R10: 0000000000000000 R11: 0000000000000246 R12: 6974797a616c6f6e [ 209.156177][ T5273] R13: 00007fbe7cc9d8e8 R14: 0030656c69662f2e R15: 00007fbe7ccd1788 [ 209.164159][ T5273] [ 209.167159][ T5273] [ 209.169463][ T5273] Allocated by task 5273: [ 209.173768][ T5273] kasan_set_track+0x3d/0x60 [ 209.178366][ T5273] __kasan_slab_alloc+0x65/0x70 [ 209.183196][ T5273] kmem_cache_alloc+0x1b3/0x350 [ 209.188024][ T5273] __grab_extent_tree+0x19b/0x420 [ 209.193045][ T5273] f2fs_init_extent_tree+0x20c/0x450 [ 209.198313][ T5273] f2fs_new_inode+0xd89/0x1060 [ 209.203055][ T5273] __f2fs_tmpfile+0xa5/0x380 [ 209.207647][ T5273] f2fs_ioc_start_atomic_write+0x3ec/0x970 [ 209.213438][ T5273] __f2fs_ioctl+0x137d/0xb540 [ 209.218122][ T5273] __se_sys_ioctl+0xfb/0x170 [ 209.222708][ T5273] do_syscall_64+0x3d/0xb0 [ 209.227105][ T5273] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 209.232978][ T5273] [ 209.235281][ T5273] Freed by task 5278: [ 209.239237][ T5273] kasan_set_track+0x3d/0x60 [ 209.243811][ T5273] kasan_save_free_info+0x27/0x40 [ 209.248814][ T5273] ____kasan_slab_free+0xd6/0x120 [ 209.253822][ T5273] slab_free_freelist_hook+0x12e/0x1a0 [ 209.259261][ T5273] kmem_cache_free+0x94/0x1d0 [ 209.263916][ T5273] __destroy_extent_tree+0x6fa/0x880 [ 209.269182][ T5273] f2fs_destroy_extent_tree+0x13/0x20 [ 209.274533][ T5273] f2fs_evict_inode+0x324/0x1310 [ 209.279454][ T5273] evict+0x2a4/0x620 [ 209.283334][ T5273] f2fs_abort_atomic_write+0xc7/0x410 [ 209.288702][ T5273] __f2fs_ioctl+0x3294/0xb540 [ 209.293360][ T5273] __se_sys_ioctl+0xfb/0x170 [ 209.297931][ T5273] do_syscall_64+0x3d/0xb0 [ 209.302329][ T5273] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 209.308204][ T5273] [ 209.310526][ T5273] The buggy address belongs to the object at ffff8880714514e0 [ 209.310526][ T5273] which belongs to the cache f2fs_extent_tree of size 144 [ 209.324993][ T5273] The buggy address is located 8 bytes inside of [ 209.324993][ T5273] 144-byte region [ffff8880714514e0, ffff888071451570) [ 209.338068][ T5273] [ 209.340376][ T5273] The buggy address belongs to the physical page: [ 209.346763][ T5273] page:ffffea0001c51440 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x71451 [ 209.356890][ T5273] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 209.364416][ T5273] raw: 00fff00000000200 ffff88814662c8c0 dead000000000122 0000000000000000 [ 209.372976][ T5273] raw: 0000000000000000 0000000080130013 00000001ffffffff 0000000000000000 [ 209.381545][ T5273] page dumped because: kasan: bad access detected [ 209.387963][ T5273] page_owner tracks the page as allocated [ 209.393662][ T5273] page last allocated via order 0, migratetype Reclaimable, gfp_mask 0x112c50(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 5255, tgid 5254 (syz-executor122), ts 207313154622, free_ts 199367221676 [ 209.415352][ T5273] get_page_from_freelist+0x742/0x7c0 [ 209.420747][ T5273] __alloc_pages+0x259/0x560 [ 209.425316][ T5273] alloc_slab_page+0xbd/0x190 [ 209.429976][ T5273] allocate_slab+0x5e/0x3c0 [ 209.434460][ T5273] ___slab_alloc+0x782/0xe20 [ 209.439028][ T5273] kmem_cache_alloc+0x268/0x350 [ 209.443873][ T5273] __grab_extent_tree+0x19b/0x420 [ 209.448895][ T5273] f2fs_init_extent_tree+0x20c/0x450 [ 209.454175][ T5273] f2fs_new_inode+0xd89/0x1060 [ 209.458931][ T5273] __f2fs_tmpfile+0xa5/0x380 [ 209.463526][ T5273] f2fs_ioc_start_atomic_write+0x3ec/0x970 [ 209.469337][ T5273] __f2fs_ioctl+0x137d/0xb540 [ 209.474000][ T5273] __se_sys_ioctl+0xfb/0x170 [ 209.478578][ T5273] do_syscall_64+0x3d/0xb0 [ 209.482978][ T5273] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 209.488855][ T5273] page last free stack trace: [ 209.493507][ T5273] free_pcp_prepare+0x751/0x780 [ 209.498344][ T5273] free_unref_page_list+0xb2/0x830 [ 209.503435][ T5273] release_pages+0x233e/0x25e0 [ 209.508176][ T5273] __pagevec_release+0x7d/0xf0 [ 209.512929][ T5273] shmem_undo_range+0x6d0/0x1fe0 [ 209.517878][ T5273] shmem_evict_inode+0x276/0xa10 [ 209.522801][ T5273] evict+0x2a4/0x620 [ 209.526678][ T5273] __dentry_kill+0x3b1/0x5b0 [ 209.531258][ T5273] dentry_kill+0xbb/0x290 [ 209.535578][ T5273] dput+0x1f3/0x410 [ 209.539379][ T5273] __fput+0x5e4/0x880 [ 209.543348][ T5273] task_work_run+0x243/0x300 [ 209.547924][ T5273] exit_to_user_mode_loop+0x124/0x150 [ 209.553278][ T5273] exit_to_user_mode_prepare+0xb2/0x140 [ 209.558808][ T5273] syscall_exit_to_user_mode+0x26/0x60 [ 209.564246][ T5273] do_syscall_64+0x49/0xb0 [ 209.568663][ T5273] [ 209.570973][ T5273] Memory state around the buggy address: [ 209.576595][ T5273] ffff888071451380: fb fb fb fb fb fb fb fb fb fb fc fc fc fc fc fc [ 209.584635][ T5273] ffff888071451400: fc fc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 209.592685][ T5273] >ffff888071451480: 00 00 00 00 fc fc fc fc fc fc fc fc fa fb fb fb [ 209.600728][ T5273] ^ [ 209.608165][ T5273] ffff888071451500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 209.616219][ T5273] ffff888071451580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 209.624278][ T5273] ================================================================== [ 209.632663][ T5273] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 209.639952][ T5273] CPU: 1 PID: 5273 Comm: syz-executor122 Not tainted 6.2.0-rc5-syzkaller-00047-g7c46948a6e9c #0 [ 209.650370][ T5273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 209.660424][ T5273] Call Trace: [ 209.663792][ T5273] [ 209.666725][ T5273] dump_stack_lvl+0x1b1/0x290 [ 209.671407][ T5273] ? nf_tcp_handle_invalid+0x630/0x630 [ 209.676861][ T5273] ? panic+0x710/0x710 [ 209.680921][ T5273] ? lock_release+0x81/0x820 [ 209.685507][ T5273] ? vscnprintf+0x59/0x80 [ 209.689833][ T5273] panic+0x2d6/0x710 [ 209.693719][ T5273] ? check_panic_on_warn+0x1d/0xa0 [ 209.698842][ T5273] ? memcpy_page_flushcache+0x100/0x100 [ 209.704376][ T5273] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 209.710266][ T5273] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 209.716151][ T5273] ? _raw_spin_unlock+0x40/0x40 [ 209.720997][ T5273] ? print_report+0x1b4/0x1f0 [ 209.725670][ T5273] check_panic_on_warn+0x80/0xa0 [ 209.730601][ T5273] ? __attach_extent_node+0x23d/0x480 [ 209.735966][ T5273] end_report+0x47/0x90 [ 209.740115][ T5273] kasan_report+0xda/0x100 [ 209.744530][ T5273] ? __attach_extent_node+0x23d/0x480 [ 209.749897][ T5273] __attach_extent_node+0x23d/0x480 [ 209.755088][ T5273] __insert_extent_tree+0x25b/0x580 [ 209.760281][ T5273] __update_extent_tree_range+0x15cf/0x1e00 [ 209.766170][ T5273] ? rcu_read_lock_sched_held+0x87/0x110 [ 209.771801][ T5273] ? rcu_lock_acquire+0x30/0x30 [ 209.776642][ T5273] ? f2fs_update_read_extent_cache_range+0x4a0/0x4a0 [ 209.783314][ T5273] ? rcu_lock_acquire+0x30/0x30 [ 209.788157][ T5273] ? __lock_acquire+0x1f60/0x1f60 [ 209.793180][ T5273] ? folio_memcg_unlock+0x18e/0x240 [ 209.798374][ T5273] ? f2fs_start_bidx_of_node+0x49/0x360 [ 209.803909][ T5273] f2fs_update_read_extent_cache+0x410/0x580 [ 209.809883][ T5273] ? __lookup_extent_tree+0x770/0x770 [ 209.815250][ T5273] f2fs_outplace_write_data+0x1e2/0x380 [ 209.820787][ T5273] ? do_write_page+0x700/0x700 [ 209.825540][ T5273] ? f2fs_encrypt_one_page+0xae/0x420 [ 209.830904][ T5273] f2fs_do_write_data_page+0x122d/0x2570 [ 209.836533][ T5273] ? page_private_dummy+0x130/0x130 [ 209.841725][ T5273] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 209.847703][ T5273] f2fs_write_single_data_page+0x1162/0x1c90 [ 209.853767][ T5273] ? f2fs_i_compr_blocks_update+0x150/0x150 [ 209.859674][ T5273] ? folio_wait_writeback+0x200/0x200 [ 209.865042][ T5273] f2fs_write_cache_pages+0xf6e/0x2330 [ 209.870507][ T5273] ? trace_f2fs_writepages+0x2f0/0x2f0 [ 209.875978][ T5273] ? rcu_lock_acquire+0x30/0x30 [ 209.880821][ T5273] ? __lock_acquire+0x1f60/0x1f60 [ 209.885841][ T5273] ? rcu_read_lock_sched_held+0x87/0x110 [ 209.891469][ T5273] ? filemap_dirty_folio+0x173/0x390 [ 209.896750][ T5273] ? blk_start_plug+0x95/0x110 [ 209.901511][ T5273] f2fs_write_data_pages+0x7d2/0xc30 [ 209.906795][ T5273] ? f2fs_read_data_folio+0x200/0x200 [ 209.912159][ T5273] ? rcu_read_lock_sched_held+0x87/0x110 [ 209.917782][ T5273] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 209.923751][ T5273] ? f2fs_read_data_folio+0x200/0x200 [ 209.929116][ T5273] do_writepages+0x3c3/0x680 [ 209.933701][ T5273] ? __writepage+0x120/0x120 [ 209.938283][ T5273] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 209.944252][ T5273] ? filemap_fdatawrite_wbc+0x113/0x170 [ 209.949789][ T5273] ? do_raw_spin_lock+0x147/0x3a0 [ 209.954813][ T5273] ? __lock_acquire+0x1f60/0x1f60 [ 209.959830][ T5273] ? do_raw_spin_unlock+0x134/0x8a0 [ 209.965025][ T5273] ? wbc_attach_and_unlock_inode+0xc3/0x540 [ 209.970911][ T5273] filemap_fdatawrite_wbc+0x11e/0x170 [ 209.976279][ T5273] file_write_and_wait_range+0x219/0x320 [ 209.981904][ T5273] ? trace_file_check_and_advance_wb_err+0x2b0/0x2b0 [ 209.988580][ T5273] f2fs_do_sync_file+0x611/0x19f0 [ 209.993603][ T5273] ? f2fs_sync_file+0x150/0x150 [ 209.998451][ T5273] ? __up_read+0x690/0x690 [ 210.002862][ T5273] ? f2fs_sync_file+0xe3/0x150 [ 210.007618][ T5273] f2fs_file_write_iter+0x659/0x2400 [ 210.012904][ T5273] ? f2fs_file_read_iter+0xc00/0xc00 [ 210.018184][ T5273] ? rcu_read_lock_any_held+0xb1/0x130 [ 210.023634][ T5273] ? apparmor_file_permission+0x2da/0x310 [ 210.029351][ T5273] vfs_write+0x7dc/0xc50 [ 210.033584][ T5273] ? __lock_acquire+0x1f60/0x1f60 [ 210.038622][ T5273] ? file_end_write+0x230/0x230 [ 210.043469][ T5273] ? mutex_lock_nested+0x17/0x20 [ 210.048402][ T5273] ? __fdget_pos+0x242/0x2e0 [ 210.052985][ T5273] ? ksys_write+0x72/0x2a0 [ 210.057411][ T5273] ksys_write+0x177/0x2a0 [ 210.061734][ T5273] ? __ia32_sys_read+0x80/0x80 [ 210.066491][ T5273] ? syscall_enter_from_user_mode+0x2e/0x1d0 [ 210.072462][ T5273] ? lockdep_hardirqs_on+0x8d/0x130 [ 210.077651][ T5273] ? syscall_enter_from_user_mode+0x2e/0x1d0 [ 210.083622][ T5273] do_syscall_64+0x3d/0xb0 [ 210.088032][ T5273] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 210.093918][ T5273] RIP: 0033:0x7fbe7cc4e4a9 [ 210.098322][ T5273] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 d1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 210.117915][ T5273] RSP: 002b:00007fbe7cbf12f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 210.126317][ T5273] RAX: ffffffffffffffda RBX: 00007fbe7ccd1780 RCX: 00007fbe7cc4e4a9 [ 210.134279][ T5273] RDX: 00000000000ffe00 RSI: 0000000020004200 RDI: 0000000000000004 [ 210.142243][ T5273] RBP: 00007fbe7cc9daec R08: 0000000000000000 R09: 0000000000000000 [ 210.150203][ T5273] R10: 0000000000000000 R11: 0000000000000246 R12: 6974797a616c6f6e [ 210.158161][ T5273] R13: 00007fbe7cc9d8e8 R14: 0030656c69662f2e R15: 00007fbe7ccd1788 [ 210.166132][ T5273] [ 210.169292][ T5273] Kernel Offset: disabled [ 210.173625][ T5273] Rebooting in 86400 seconds..