[ 76.971932][ T8] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.136' (ED25519) to the list of known hosts. 2024/06/03 13:13:19 ignoring optional flag "sandboxArg"="0" 2024/06/03 13:13:19 parsed 1 programs 2024/06/03 13:13:20 executed programs: 0 [ 82.110489][ T5384] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.158959][ T4489] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.167146][ T4489] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.175709][ T4489] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.184380][ T4489] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.192934][ T4489] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.200304][ T4489] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.311240][ T5392] chnl_net:caif_netlink_parms(): no params data found [ 82.364770][ T5392] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.372015][ T5392] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.379150][ T5392] bridge_slave_0: entered allmulticast mode [ 82.386146][ T5392] bridge_slave_0: entered promiscuous mode [ 82.394183][ T5392] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.402433][ T5392] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.409698][ T5392] bridge_slave_1: entered allmulticast mode [ 82.416952][ T5392] bridge_slave_1: entered promiscuous mode [ 82.442688][ T5392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.454060][ T5392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.480870][ T5392] team0: Port device team_slave_0 added [ 82.489355][ T5392] team0: Port device team_slave_1 added [ 82.510372][ T5392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.517450][ T5392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.544226][ T5392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.556881][ T5392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.563883][ T5392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.589826][ T5392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.624043][ T5392] hsr_slave_0: entered promiscuous mode [ 82.630214][ T5392] hsr_slave_1: entered promiscuous mode [ 83.243274][ T5392] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.256151][ T5392] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.267777][ T5392] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.280581][ T5392] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.317399][ T5392] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.324632][ T5392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.332168][ T5392] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.339346][ T5392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.379531][ T25] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.388554][ T25] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.458809][ T5392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.483271][ T5392] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.497529][ T5431] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.504744][ T5431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.520850][ T5431] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.528058][ T5431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.739132][ T5392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.792738][ T5392] veth0_vlan: entered promiscuous mode [ 83.808939][ T5392] veth1_vlan: entered promiscuous mode [ 83.849069][ T5392] veth0_macvtap: entered promiscuous mode [ 83.860072][ T5392] veth1_macvtap: entered promiscuous mode [ 83.884228][ T5392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.901260][ T5392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.917195][ T5392] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.928883][ T5392] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.938209][ T5392] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.950354][ T5392] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.041258][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.054489][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.082767][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.090629][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.186562][ T5462] loop0: detected capacity change from 0 to 2048 [ 84.220882][ T5465] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 84.242585][ T4489] Bluetooth: hci0: command tx timeout [ 84.292014][ T5462] loop0: detected capacity change from 2048 to 0 [ 84.330545][ T5392] syz-executor.0: attempt to access beyond end of device [ 84.330545][ T5392] loop0: rw=0, sector=100, nr_sectors = 2 limit=0 [ 84.347467][ T5392] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=226) [ 84.357630][ T5392] NILFS (loop0): error -5 truncating bmap (ino=15) [ 84.368670][ T5392] syz-executor.0: attempt to access beyond end of device [ 84.368670][ T5392] loop0: rw=0, sector=66, nr_sectors = 2 limit=0 [ 84.385813][ T5392] NILFS (loop0): I/O error reading b-tree node block (ino=16, blocknr=15) [ 84.394834][ T5392] NILFS (loop0): error -5 truncating bmap (ino=16) [ 84.405950][ T5392] syz-executor.0: attempt to access beyond end of device [ 84.405950][ T5392] loop0: rw=0, sector=90, nr_sectors = 2 limit=0 [ 84.420950][ T5392] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=34) [ 84.431813][ T5392] NILFS (loop0): error -5 truncating bmap (ino=17) [ 84.447856][ T5465] segctord: attempt to access beyond end of device [ 84.447856][ T5465] loop0: rw=0, sector=84, nr_sectors = 2 limit=0 [ 84.464415][ T5465] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=0) [ 84.475014][ T5465] segctord: attempt to access beyond end of device [ 84.475014][ T5465] loop0: rw=0, sector=84, nr_sectors = 2 limit=0 [ 84.493218][ T5465] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=0) [ 84.504235][ T5465] segctord: attempt to access beyond end of device [ 84.504235][ T5465] loop0: rw=0, sector=84, nr_sectors = 2 limit=0 [ 84.518691][ T5465] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=0) [ 84.531139][ T5465] segctord: attempt to access beyond end of device [ 84.531139][ T5465] loop0: rw=0, sector=84, nr_sectors = 2 limit=0 [ 84.545547][ T5465] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=0) [ 84.557595][ T5392] syz-executor.0: attempt to access beyond end of device [ 84.557595][ T5392] loop0: rw=0, sector=84, nr_sectors = 2 limit=0 [ 84.576636][ T5392] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=0) [ 84.585943][ T5392] syz-executor.0: attempt to access beyond end of device [ 84.585943][ T5392] loop0: rw=0, sector=84, nr_sectors = 2 limit=0 [ 84.600846][ T5392] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=0) [ 84.609973][ T5392] syz-executor.0: attempt to access beyond end of device [ 84.609973][ T5392] loop0: rw=0, sector=84, nr_sectors = 2 limit=0 [ 84.626837][ T5392] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=0) [ 84.636012][ T5392] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=0) [ 84.648143][ T5392] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 84.667164][ T5392] Buffer I/O error on dev loop0, logical block 1020, lost sync page write [ 84.676890][ T5392] NILFS (loop0): unable to write superblock: err=-5 [ 84.686261][ T5392] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 84.695320][ T5392] NILFS (loop0): unable to write superblock: err=-5 [ 84.705489][ T5392] ================================================================== [ 84.713576][ T5392] BUG: KASAN: slab-use-after-free in lru_add_fn+0x2cc/0x1a20 [ 84.720987][ T5392] Read of size 8 at addr ffff8880793f2ae0 by task syz-executor.0/5392 [ 84.729167][ T5392] [ 84.731528][ T5392] CPU: 1 PID: 5392 Comm: syz-executor.0 Tainted: G W 6.10.0-rc1-next-20240603-syzkaller-03461-g861a3cb5a2a8 #0 [ 84.744664][ T5392] Tainted: [W]=WARN [ 84.748481][ T5392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 84.758561][ T5392] Call Trace: [ 84.761864][ T5392] [ 84.764810][ T5392] dump_stack_lvl+0x241/0x360 [ 84.769519][ T5392] ? __pfx_dump_stack_lvl+0x10/0x10 [ 84.774739][ T5392] ? __pfx__printk+0x10/0x10 [ 84.779354][ T5392] ? _printk+0xd5/0x120 [ 84.783527][ T5392] ? __virt_addr_valid+0x183/0x520 [ 84.788663][ T5392] ? __virt_addr_valid+0x183/0x520 [ 84.793803][ T5392] print_report+0x169/0x550 [ 84.798326][ T5392] ? __virt_addr_valid+0x183/0x520 [ 84.803468][ T5392] ? __virt_addr_valid+0x183/0x520 [ 84.808606][ T5392] ? __virt_addr_valid+0x44e/0x520 [ 84.813738][ T5392] ? __phys_addr+0xba/0x170 [ 84.818264][ T5392] ? lru_add_fn+0x2cc/0x1a20 [ 84.822878][ T5392] kasan_report+0x143/0x180 [ 84.827488][ T5392] ? lru_add_fn+0x2cc/0x1a20 [ 84.832105][ T5392] ? lru_add_fn+0x20c/0x1a20 [ 84.836728][ T5392] kasan_check_range+0x282/0x290 [ 84.841693][ T5392] lru_add_fn+0x2cc/0x1a20 [ 84.846139][ T5392] folio_batch_move_lru+0x31f/0x690 [ 84.851376][ T5392] ? __pfx_lru_add_fn+0x10/0x10 [ 84.856244][ T5392] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 84.861994][ T5392] lru_add_drain_cpu+0x10e/0x8c0 [ 84.867054][ T5392] ? __pfx_lru_add_drain_cpu+0x10/0x10 [ 84.872538][ T5392] ? folio_redirty_for_writepage+0x1de/0x6a0 [ 84.878628][ T5392] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 84.884558][ T5392] ? __pfx_lock_release+0x10/0x10 [ 84.889610][ T5392] ? lru_add_drain+0x79/0x3e0 [ 84.894312][ T5392] lru_add_drain+0x123/0x3e0 [ 84.898928][ T5392] __folio_batch_release+0x55/0xa0 [ 84.904155][ T5392] writeback_iter+0x742/0x18d0 [ 84.908958][ T5392] do_writepages+0x4b9/0x870 [ 84.913579][ T5392] ? __pfx_do_writepages+0x10/0x10 [ 84.918731][ T5392] ? __pfx_lock_release+0x10/0x10 [ 84.923774][ T5392] ? do_raw_spin_lock+0x14f/0x370 [ 84.928818][ T5392] __writeback_single_inode+0x165/0x10b0 [ 84.934474][ T5392] writeback_single_inode+0x21b/0x7a0 [ 84.939872][ T5392] ? __pfx_writeback_single_inode+0x10/0x10 [ 84.945790][ T5392] ? mark_lock+0x9a/0x360 [ 84.950150][ T5392] ? __lock_acquire+0x1359/0x2000 [ 84.955214][ T5392] write_inode_now+0x1d1/0x260 [ 84.960515][ T5392] ? __pfx_write_inode_now+0x10/0x10 [ 84.965846][ T5392] ? do_raw_spin_unlock+0x13c/0x8b0 [ 84.971070][ T5392] iput+0x5d7/0x930 [ 84.974908][ T5392] nilfs_put_super+0xd7/0x160 [ 84.979617][ T5392] ? __pfx_nilfs_put_super+0x10/0x10 [ 84.985275][ T5392] generic_shutdown_super+0x136/0x2d0 [ 84.990674][ T5392] kill_block_super+0x44/0x90 [ 84.995381][ T5392] deactivate_locked_super+0xc4/0x130 [ 85.000776][ T5392] cleanup_mnt+0x41f/0x4b0 [ 85.005219][ T5392] ? lockdep_hardirqs_on+0x99/0x150 [ 85.010447][ T5392] task_work_run+0x24f/0x310 [ 85.015066][ T5392] ? __pfx_task_work_run+0x10/0x10 [ 85.020205][ T5392] ? __x64_sys_umount+0x126/0x170 [ 85.025260][ T5392] ? syscall_exit_to_user_mode+0xa3/0x370 [ 85.031025][ T5392] syscall_exit_to_user_mode+0x168/0x370 [ 85.036692][ T5392] do_syscall_64+0x100/0x230 [ 85.041311][ T5392] ? clear_bhb_loop+0x35/0x90 [ 85.046016][ T5392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.051951][ T5392] RIP: 0033:0x7fc674e7efd7 [ 85.056386][ T5392] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 85.076361][ T5392] RSP: 002b:00007ffd9dd66a68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 85.084798][ T5392] RAX: 0000000000000000 RBX: 0000000000000064 RCX: 00007fc674e7efd7 [ 85.092791][ T5392] RDX: 0000000000000200 RSI: 0000000000000009 RDI: 00007ffd9dd67c10 [ 85.100784][ T5392] RBP: 00007fc674ec83b9 R08: 0000000000000000 R09: 0000000000000000 [ 85.108780][ T5392] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffd9dd67c10 [ 85.116770][ T5392] R13: 00007fc674ec83b9 R14: 0000555580031430 R15: 0000000000000005 [ 85.124772][ T5392] [ 85.127807][ T5392] [ 85.130223][ T5392] Allocated by task 5462: [ 85.134559][ T5392] kasan_save_track+0x3f/0x80 [ 85.139258][ T5392] __kasan_slab_alloc+0x66/0x80 [ 85.144136][ T5392] kmem_cache_alloc_lru_noprof+0x139/0x2b0 [ 85.149969][ T5392] nilfs_alloc_inode+0x2e/0xf0 [ 85.154830][ T5392] iget5_locked+0xa4/0x280 [ 85.159267][ T5392] nilfs_iget_locked+0x12b/0x180 [ 85.164230][ T5392] nilfs_ifile_read+0x30/0x1b0 [ 85.169033][ T5392] nilfs_attach_checkpoint+0xed/0x1a0 [ 85.174426][ T5392] nilfs_fill_super+0x380/0x6a0 [ 85.179306][ T5392] nilfs_get_tree+0x4f9/0x920 [ 85.184000][ T5392] vfs_get_tree+0x90/0x2a0 [ 85.188431][ T5392] do_new_mount+0x2be/0xb40 [ 85.192955][ T5392] __se_sys_mount+0x2d9/0x3c0 [ 85.197641][ T5392] do_syscall_64+0xf3/0x230 [ 85.202161][ T5392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.208078][ T5392] [ 85.210408][ T5392] Freed by task 24: [ 85.214216][ T5392] kasan_save_track+0x3f/0x80 [ 85.218915][ T5392] kasan_save_free_info+0x40/0x50 [ 85.223966][ T5392] poison_slab_object+0xe0/0x150 [ 85.228923][ T5392] __kasan_slab_free+0x37/0x60 [ 85.233710][ T5392] kmem_cache_free+0x145/0x350 [ 85.238492][ T5392] rcu_core+0xafd/0x1830 [ 85.242763][ T5392] handle_softirqs+0x2c4/0x970 [ 85.247548][ T5392] run_ksoftirqd+0xca/0x130 [ 85.252079][ T5392] smpboot_thread_fn+0x544/0xa30 [ 85.257041][ T5392] kthread+0x2f0/0x390 [ 85.261132][ T5392] ret_from_fork+0x4b/0x80 [ 85.265569][ T5392] ret_from_fork_asm+0x1a/0x30 [ 85.270351][ T5392] [ 85.272681][ T5392] Last potentially related work creation: [ 85.278400][ T5392] kasan_save_stack+0x3f/0x60 [ 85.283134][ T5392] __kasan_record_aux_stack+0xac/0xc0 [ 85.288525][ T5392] call_rcu+0x167/0xa70 [ 85.292698][ T5392] nilfs_put_root+0x97/0xc0 [ 85.297217][ T5392] nilfs_detach_log_writer+0x8ca/0xbe0 [ 85.302709][ T5392] nilfs_put_super+0x4d/0x160 [ 85.307492][ T5392] generic_shutdown_super+0x136/0x2d0 [ 85.313235][ T5392] kill_block_super+0x44/0x90 [ 85.317941][ T5392] deactivate_locked_super+0xc4/0x130 [ 85.323333][ T5392] cleanup_mnt+0x41f/0x4b0 [ 85.327764][ T5392] task_work_run+0x24f/0x310 [ 85.332377][ T5392] syscall_exit_to_user_mode+0x168/0x370 [ 85.338031][ T5392] do_syscall_64+0x100/0x230 [ 85.342641][ T5392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.348561][ T5392] [ 85.350981][ T5392] The buggy address belongs to the object at ffff8880793f2640 [ 85.350981][ T5392] which belongs to the cache nilfs2_inode_cache of size 1504 [ 85.365749][ T5392] The buggy address is located 1184 bytes inside of [ 85.365749][ T5392] freed 1504-byte region [ffff8880793f2640, ffff8880793f2c20) [ 85.379759][ T5392] [ 85.382098][ T5392] The buggy address belongs to the physical page: [ 85.388535][ T5392] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x793f0 [ 85.397331][ T5392] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 85.405843][ T5392] memcg:ffff8880285f6201 [ 85.410096][ T5392] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 85.417703][ T5392] page_type: 0xfdffffff(slab) [ 85.422406][ T5392] raw: 00fff00000000040 ffff88801af1d140 dead000000000122 0000000000000000 [ 85.431012][ T5392] raw: 0000000000000000 0000000080140014 00000001fdffffff ffff8880285f6201 [ 85.439619][ T5392] head: 00fff00000000040 ffff88801af1d140 dead000000000122 0000000000000000 [ 85.448314][ T5392] head: 0000000000000000 0000000080140014 00000001fdffffff ffff8880285f6201 [ 85.457017][ T5392] head: 00fff00000000003 ffffea0001e4fc01 ffffffffffffffff 0000000000000000 [ 85.465710][ T5392] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 85.474386][ T5392] page dumped because: kasan: bad access detected [ 85.480994][ T5392] page_owner tracks the page as allocated [ 85.486723][ T5392] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 5462, tgid 5460 (syz-executor.0), ts 84208280330, free_ts 16049277194 [ 85.510620][ T5392] post_alloc_hook+0x1f3/0x230 [ 85.515411][ T5392] get_page_from_freelist+0x2cbd/0x2d70 [ 85.520994][ T5392] __alloc_pages_noprof+0x256/0x6c0 [ 85.526220][ T5392] alloc_slab_page+0x5f/0x120 [ 85.530924][ T5392] allocate_slab+0x5a/0x2f0 [ 85.535455][ T5392] ___slab_alloc+0xcd1/0x14b0 [ 85.540150][ T5392] __slab_alloc+0x58/0xa0 [ 85.544505][ T5392] kmem_cache_alloc_lru_noprof+0x1c5/0x2b0 [ 85.550333][ T5392] nilfs_alloc_inode+0x2e/0xf0 [ 85.555205][ T5392] iget5_locked+0xa4/0x280 [ 85.559638][ T5392] nilfs_iget_locked+0x12b/0x180 [ 85.564685][ T5392] nilfs_dat_read+0xc3/0x310 [ 85.569325][ T5392] load_nilfs+0x56f/0x1090 [ 85.573768][ T5392] nilfs_fill_super+0x310/0x6a0 [ 85.578766][ T5392] nilfs_get_tree+0x4f9/0x920 [ 85.583465][ T5392] vfs_get_tree+0x90/0x2a0 [ 85.587897][ T5392] page last free pid 1 tgid 1 stack trace: [ 85.593708][ T5392] free_unref_page+0xd22/0xea0 [ 85.598491][ T5392] free_contig_range+0x9e/0x160 [ 85.603363][ T5392] destroy_args+0x8a/0x890 [ 85.607806][ T5392] debug_vm_pgtable+0x4be/0x550 [ 85.612672][ T5392] do_one_initcall+0x248/0x880 [ 85.617492][ T5392] do_initcall_level+0x157/0x210 [ 85.622446][ T5392] do_initcalls+0x3f/0x80 [ 85.626790][ T5392] kernel_init_freeable+0x435/0x5d0 [ 85.631999][ T5392] kernel_init+0x1d/0x2b0 [ 85.636350][ T5392] ret_from_fork+0x4b/0x80 [ 85.640784][ T5392] ret_from_fork_asm+0x1a/0x30 [ 85.645565][ T5392] [ 85.647979][ T5392] Memory state around the buggy address: [ 85.653619][ T5392] ffff8880793f2980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 85.661780][ T5392] ffff8880793f2a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 85.669854][ T5392] >ffff8880793f2a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 85.677922][ T5392] ^ [ 85.685136][ T5392] ffff8880793f2b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 85.693208][ T5392] ffff8880793f2b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 85.701281][ T5392] ================================================================== [ 85.709450][ T5392] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 85.716659][ T5392] CPU: 1 PID: 5392 Comm: syz-executor.0 Tainted: G W 6.10.0-rc1-next-20240603-syzkaller-03461-g861a3cb5a2a8 #0 [ 85.729869][ T5392] Tainted: [W]=WARN [ 85.733683][ T5392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 85.743752][ T5392] Call Trace: [ 85.747050][ T5392] [ 85.749990][ T5392] dump_stack_lvl+0x241/0x360 [ 85.754701][ T5392] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.759924][ T5392] ? __pfx__printk+0x10/0x10 [ 85.764568][ T5392] ? rcu_is_watching+0x15/0xb0 [ 85.769360][ T5392] ? vscnprintf+0x5d/0x90 [ 85.773717][ T5392] panic+0x349/0x870 [ 85.777627][ T5392] ? __pfx_lock_release+0x10/0x10 [ 85.782675][ T5392] ? check_panic_on_warn+0x21/0xb0 [ 85.787817][ T5392] ? __pfx_panic+0x10/0x10 [ 85.792254][ T5392] ? do_raw_spin_unlock+0x13c/0x8b0 [ 85.797475][ T5392] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 85.803401][ T5392] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 85.809848][ T5392] check_panic_on_warn+0x86/0xb0 [ 85.814813][ T5392] ? lru_add_fn+0x2cc/0x1a20 [ 85.819431][ T5392] end_report+0x77/0x160 [ 85.823694][ T5392] kasan_report+0x154/0x180 [ 85.828221][ T5392] ? lru_add_fn+0x2cc/0x1a20 [ 85.832847][ T5392] ? lru_add_fn+0x20c/0x1a20 [ 85.837462][ T5392] kasan_check_range+0x282/0x290 [ 85.842433][ T5392] lru_add_fn+0x2cc/0x1a20 [ 85.846875][ T5392] folio_batch_move_lru+0x31f/0x690 [ 85.852102][ T5392] ? __pfx_lru_add_fn+0x10/0x10 [ 85.856977][ T5392] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 85.862740][ T5392] lru_add_drain_cpu+0x10e/0x8c0 [ 85.867790][ T5392] ? __pfx_lru_add_drain_cpu+0x10/0x10 [ 85.873270][ T5392] ? folio_redirty_for_writepage+0x1de/0x6a0 [ 85.879275][ T5392] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 85.885205][ T5392] ? __pfx_lock_release+0x10/0x10 [ 85.890263][ T5392] ? lru_add_drain+0x79/0x3e0 [ 85.894968][ T5392] lru_add_drain+0x123/0x3e0 [ 85.899584][ T5392] __folio_batch_release+0x55/0xa0 [ 85.904718][ T5392] writeback_iter+0x742/0x18d0 [ 85.909515][ T5392] do_writepages+0x4b9/0x870 [ 85.914225][ T5392] ? __pfx_do_writepages+0x10/0x10 [ 85.919365][ T5392] ? __pfx_lock_release+0x10/0x10 [ 85.924406][ T5392] ? do_raw_spin_lock+0x14f/0x370 [ 85.929448][ T5392] __writeback_single_inode+0x165/0x10b0 [ 85.935115][ T5392] writeback_single_inode+0x21b/0x7a0 [ 85.940508][ T5392] ? __pfx_writeback_single_inode+0x10/0x10 [ 85.946560][ T5392] ? mark_lock+0x9a/0x360 [ 85.950913][ T5392] ? __lock_acquire+0x1359/0x2000 [ 85.955955][ T5392] write_inode_now+0x1d1/0x260 [ 85.960737][ T5392] ? __pfx_write_inode_now+0x10/0x10 [ 85.966057][ T5392] ? do_raw_spin_unlock+0x13c/0x8b0 [ 85.971275][ T5392] iput+0x5d7/0x930 [ 85.975189][ T5392] nilfs_put_super+0xd7/0x160 [ 85.979895][ T5392] ? __pfx_nilfs_put_super+0x10/0x10 [ 85.985225][ T5392] generic_shutdown_super+0x136/0x2d0 [ 85.990624][ T5392] kill_block_super+0x44/0x90 [ 85.995419][ T5392] deactivate_locked_super+0xc4/0x130 [ 86.000823][ T5392] cleanup_mnt+0x41f/0x4b0 [ 86.005261][ T5392] ? lockdep_hardirqs_on+0x99/0x150 [ 86.010487][ T5392] task_work_run+0x24f/0x310 [ 86.015112][ T5392] ? __pfx_task_work_run+0x10/0x10 [ 86.020261][ T5392] ? __x64_sys_umount+0x126/0x170 [ 86.025314][ T5392] ? syscall_exit_to_user_mode+0xa3/0x370 [ 86.031066][ T5392] syscall_exit_to_user_mode+0x168/0x370 [ 86.036731][ T5392] do_syscall_64+0x100/0x230 [ 86.041352][ T5392] ? clear_bhb_loop+0x35/0x90 [ 86.046144][ T5392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.052075][ T5392] RIP: 0033:0x7fc674e7efd7 [ 86.056506][ T5392] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 86.076131][ T5392] RSP: 002b:00007ffd9dd66a68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 86.084658][ T5392] RAX: 0000000000000000 RBX: 0000000000000064 RCX: 00007fc674e7efd7 [ 86.092651][ T5392] RDX: 0000000000000200 RSI: 0000000000000009 RDI: 00007ffd9dd67c10 [ 86.100643][ T5392] RBP: 00007fc674ec83b9 R08: 0000000000000000 R09: 0000000000000000 [ 86.108720][ T5392] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffd9dd67c10 [ 86.116709][ T5392] R13: 00007fc674ec83b9 R14: 0000555580031430 R15: 0000000000000005 [ 86.124712][ T5392] [ 86.128092][ T5392] Kernel Offset: disabled [ 86.132709][ T5392] Rebooting in 86400 seconds..