netlink: 211124 bytes leftover after parsing attributes in process `syz-executor.0'. ------------[ cut here ]------------ kernel BUG at fs/f2fs/segment.c:2075! invalid opcode: 0000 [#1] PREEMPT SMP KASAN CPU: 0 PID: 15530 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 RIP: 0010:update_sit_entry+0x100a/0x1300 fs/f2fs/segment.c:2075 Code: ff df 48 c1 ea 03 80 3c 02 00 0f 85 d7 02 00 00 48 8b 7d 00 44 89 f1 48 c7 c2 e0 4b a8 88 48 c7 c6 a0 4a a8 88 e8 06 7b f6 ff <0f> 0b 4c 89 ff e8 cc 60 7b fe e9 61 f1 ff ff 48 89 df e8 2f 60 7b RSP: 0018:ffff888046486f48 EFLAGS: 00010286 RAX: 0000000000000000 RBX: ffff8880a4b2d1d0 RCX: ffffffff83137d70 RDX: 0000000000000000 RSI: ffffffff83137d7e RDI: 0000000000000005 RBP: ffff8880a5c38b40 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000005 R11: 0000000000000000 R12: 0000000000000080 R13: 00000000ffffffff R14: 0000000000001600 R15: 0000000000000000 FS: 0000555555d6d400(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b2fc21000 CR3: 00000000a0d3a000 CR4: 00000000003406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: f2fs_allocate_data_block+0x5f3/0x1e10 fs/f2fs/segment.c:2936 do_write_page+0x2de/0x670 fs/f2fs/segment.c:3003 f2fs_outplace_write_data+0x163/0x3c0 fs/f2fs/segment.c:3066 f2fs_do_write_data_page+0x1761/0x2950 fs/f2fs/data.c:1838 __write_data_page+0x1eaf/0x22d0 fs/f2fs/data.c:1920 f2fs_write_cache_pages+0x96e/0x13e0 fs/f2fs/data.c:2107 __f2fs_write_data_pages fs/f2fs/data.c:2217 [inline] f2fs_write_data_pages+0xcc3/0x1060 fs/f2fs/data.c:2244 do_writepages+0xe5/0x290 mm/page-writeback.c:2344 __filemap_fdatawrite_range+0x27d/0x350 mm/filemap.c:446 f2fs_sync_dirty_inodes+0x220/0xdf0 fs/f2fs/checkpoint.c:1034 block_operations+0x149/0x7d0 fs/f2fs/checkpoint.c:1121 f2fs_write_checkpoint+0x2d3/0x5050 fs/f2fs/checkpoint.c:1480 kill_f2fs_super+0x2b6/0x330 fs/f2fs/super.c:3251 deactivate_locked_super+0x94/0x160 fs/super.c:329 deactivate_super+0x174/0x1a0 fs/super.c:360 cleanup_mnt+0x1a8/0x290 fs/namespace.c:1098 task_work_run+0x148/0x1c0 kernel/task_work.c:113 tracehook_notify_resume include/linux/tracehook.h:193 [inline] exit_to_usermode_loop+0x251/0x2a0 arch/x86/entry/common.c:167 prepare_exit_to_usermode arch/x86/entry/common.c:198 [inline] syscall_return_slowpath arch/x86/entry/common.c:271 [inline] do_syscall_64+0x538/0x620 arch/x86/entry/common.c:296 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f0abdb80aa7 Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffcc551afd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f0abdb80aa7 RDX: 00007ffcc551b0aa RSI: 000000000000000a RDI: 00007ffcc551b0a0 RBP: 00007ffcc551b0a0 R08: 00000000ffffffff R09: 00007ffcc551ae70 R10: 0000555555d6e92b R11: 0000000000000246 R12: 00007f0abdbd9a86 R13: 00007ffcc551c160 R14: 0000555555d6e810 R15: 00007ffcc551c1a0 Modules linked in: out of order segment: rcv_next C05A66ED seq C05A66F6 - C05A6760 ---[ end trace 55fed42fd2ddcbd4 ]--- out of order segment: rcv_next C05A66ED seq C05A6760 - C05A67CA RIP: 0010:update_sit_entry+0x100a/0x1300 fs/f2fs/segment.c:2075 out of order segment: rcv_next C05A66ED seq C05A67CA - C05A6886 Code: ff df 48 c1 ea 03 80 3c 02 00 0f 85 d7 02 00 00 48 8b 7d 00 44 89 f1 48 c7 c2 e0 4b a8 88 48 c7 c6 a0 4a a8 88 e8 06 7b f6 ff <0f> 0b 4c 89 ff e8 cc 60 7b fe e9 61 f1 ff ff 48 89 df e8 2f 60 7b out of order segment: rcv_next C05A66ED seq C05A6886 - C05A68E4 RSP: 0018:ffff888046486f48 EFLAGS: 00010286 ofo requeuing : rcv_next C05A66F6 seq C05A66F6 - C05A6760 RAX: 0000000000000000 RBX: ffff8880a4b2d1d0 RCX: ffffffff83137d70 ofo requeuing : rcv_next C05A6760 seq C05A6760 - C05A67CA RDX: 0000000000000000 RSI: ffffffff83137d7e RDI: 0000000000000005 ofo requeuing : rcv_next C05A67CA seq C05A67CA - C05A6886 ofo requeuing : rcv_next C05A6886 seq C05A6886 - C05A68E4 team0: Device ipvlan1 failed to register rx_handler RBP: ffff8880a5c38b40 R08: 0000000000000000 R09: 0000000000000000 netlink: 'syz-executor.0': attribute type 2 has an invalid length. out of order segment: rcv_next C12B1FCD seq C12B2114 - C12B21DF netlink: 211124 bytes leftover after parsing attributes in process `syz-executor.0'. out of order segment: rcv_next C12B1FCD seq C12B2326 - C12B23E2 ofo requeuing : rcv_next C12B2114 seq C12B2114 - C12B21DF R10: 0000000000000005 R11: 0000000000000000 R12: 0000000000000080 partial packet: rcv_next C12B21DF seq C12B21D4 - C12B2290 ofo requeuing : rcv_next C12B2326 seq C12B2326 - C12B23E2 out of order segment: rcv_next C12B25C7 seq C12B25D0 - C12B263A out of order segment: rcv_next C12B25C7 seq C12B263A - C12B2705 out of order segment: rcv_next C12B25C7 seq C12B270E - C12B27D9 out of order segment: rcv_next C12B25C7 seq C12B27E2 - C12B2840 out of order segment: rcv_next C12B25C7 seq C12B2840 - C12B2896 R13: 00000000ffffffff R14: 0000000000001600 R15: 0000000000000000 ofo requeuing : rcv_next C12B25D0 seq C12B25D0 - C12B263A ofo requeuing : rcv_next C12B263A seq C12B263A - C12B2705 ofo requeuing : rcv_next C12B270E seq C12B270E - C12B27D9 partial packet: rcv_next C12B27D9 seq C12B2778 - C12B27E2 netlink: 'syz-executor.0': attribute type 2 has an invalid length. ofo requeuing : rcv_next C12B27E2 seq C12B27E2 - C12B2840 ofo requeuing : rcv_next C12B2840 seq C12B2840 - C12B2896 FS: 0000555555d6d400(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000 out of order segment: rcv_next C12B29B7 seq C12B29C0 - C12B2A8B netlink: 211124 bytes leftover after parsing attributes in process `syz-executor.0'. out of order segment: rcv_next C12B29B7 seq C12B2A94 - C12B2B50 ofo requeuing : rcv_next C12B29C0 seq C12B29C0 - C12B2A8B CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 ofo requeuing : rcv_next C12B2A94 seq C12B2A94 - C12B2B50 out of order segment: rcv_next C12B2D41 seq C12B2D4A - C12B2DB4 out of order segment: rcv_next C12B2D41 seq C12B2DB4 - C12B2E1E out of order segment: rcv_next C12B2D41 seq C12B2E1E - C12B2E7C CR2: 0000000020001580 CR3: 00000000a0d3a000 CR4: 00000000003406f0 out of order segment: rcv_next C12B2D41 seq C12B2E7C - C12B2F38 ofo requeuing : rcv_next C12B2D4A seq C12B2D4A - C12B2DB4 ofo requeuing : rcv_next C12B2DB4 seq C12B2DB4 - C12B2E1E ofo requeuing : rcv_next C12B2E1E seq C12B2E1E - C12B2E7C ofo requeuing : rcv_next C12B2E7C seq C12B2E7C - C12B2F38 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400