Warning: Permanently added '10.128.0.13' (ED25519) to the list of known hosts. 2024/06/03 12:36:54 ignoring optional flag "sandboxArg"="0" [ 82.248680][ T25] cfg80211: failed to load regulatory.db 2024/06/03 12:36:54 parsed 1 programs 2024/06/03 12:36:55 executed programs: 0 [ 84.214706][ T5385] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.260600][ T4489] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.269179][ T4489] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.278092][ T4489] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.286385][ T4489] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.295097][ T4489] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.303708][ T4489] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.415644][ T5393] chnl_net:caif_netlink_parms(): no params data found [ 84.476542][ T5393] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.483975][ T5393] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.491537][ T5393] bridge_slave_0: entered allmulticast mode [ 84.498431][ T5393] bridge_slave_0: entered promiscuous mode [ 84.508630][ T5393] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.515878][ T5393] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.523151][ T5393] bridge_slave_1: entered allmulticast mode [ 84.530675][ T5393] bridge_slave_1: entered promiscuous mode [ 84.555745][ T5393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.568265][ T5393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.596072][ T5393] team0: Port device team_slave_0 added [ 84.607296][ T5393] team0: Port device team_slave_1 added [ 84.629339][ T5393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.636437][ T5393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.662950][ T5393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.675267][ T5393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.682316][ T5393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.708678][ T5393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.743837][ T5393] hsr_slave_0: entered promiscuous mode [ 84.750452][ T5393] hsr_slave_1: entered promiscuous mode [ 85.359625][ T5393] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.372162][ T5393] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.383611][ T5393] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.401014][ T5393] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.439442][ T5393] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.446641][ T5393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.454212][ T5393] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.461470][ T5393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.478287][ T785] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.488206][ T785] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.583809][ T5393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.606542][ T5393] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.619674][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.626873][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.646739][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.654000][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.875051][ T5393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.930864][ T5393] veth0_vlan: entered promiscuous mode [ 85.946015][ T5393] veth1_vlan: entered promiscuous mode [ 85.990276][ T5393] veth0_macvtap: entered promiscuous mode [ 86.002188][ T5393] veth1_macvtap: entered promiscuous mode [ 86.028287][ T5393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.046510][ T5393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.063032][ T5393] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.074411][ T5393] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.084900][ T5393] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.096371][ T5393] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.194887][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.212633][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.250841][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.259095][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.327962][ T4489] Bluetooth: hci0: command tx timeout [ 86.352417][ T5461] loop0: detected capacity change from 0 to 2048 [ 86.435338][ T5466] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 86.508502][ T5461] loop0: detected capacity change from 2048 to 0 [ 86.544604][ T5393] syz-executor.0: attempt to access beyond end of device [ 86.544604][ T5393] loop0: rw=0, sector=100, nr_sectors = 2 limit=0 [ 86.562275][ T5393] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=226) [ 86.573072][ T5393] NILFS (loop0): error -5 truncating bmap (ino=15) [ 86.583201][ T5393] syz-executor.0: attempt to access beyond end of device [ 86.583201][ T5393] loop0: rw=0, sector=66, nr_sectors = 2 limit=0 [ 86.598369][ T5393] NILFS (loop0): I/O error reading b-tree node block (ino=16, blocknr=15) [ 86.607260][ T5393] NILFS (loop0): error -5 truncating bmap (ino=16) [ 86.614611][ T5393] syz-executor.0: attempt to access beyond end of device [ 86.614611][ T5393] loop0: rw=0, sector=90, nr_sectors = 2 limit=0 [ 86.629623][ T5393] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=34) [ 86.639112][ T5393] NILFS (loop0): error -5 truncating bmap (ino=17) [ 86.657700][ T5466] segctord: attempt to access beyond end of device [ 86.657700][ T5466] loop0: rw=0, sector=84, nr_sectors = 2 limit=0 [ 86.676915][ T5466] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=0) [ 86.686561][ T5466] segctord: attempt to access beyond end of device [ 86.686561][ T5466] loop0: rw=0, sector=84, nr_sectors = 2 limit=0 [ 86.701611][ T5466] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=0) [ 86.712749][ T5466] segctord: attempt to access beyond end of device [ 86.712749][ T5466] loop0: rw=0, sector=84, nr_sectors = 2 limit=0 [ 86.726257][ T5466] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=0) [ 86.743505][ T5466] segctord: attempt to access beyond end of device [ 86.743505][ T5466] loop0: rw=0, sector=84, nr_sectors = 2 limit=0 [ 86.756938][ T5466] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=0) [ 86.771704][ T5393] syz-executor.0: attempt to access beyond end of device [ 86.771704][ T5393] loop0: rw=0, sector=84, nr_sectors = 2 limit=0 [ 86.786375][ T5393] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=0) [ 86.796320][ T5393] syz-executor.0: attempt to access beyond end of device [ 86.796320][ T5393] loop0: rw=0, sector=84, nr_sectors = 2 limit=0 [ 86.812306][ T5393] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=0) [ 86.826101][ T5393] syz-executor.0: attempt to access beyond end of device [ 86.826101][ T5393] loop0: rw=0, sector=84, nr_sectors = 2 limit=0 [ 86.842425][ T5393] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=0) [ 86.853413][ T5393] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=0) [ 86.863989][ T5393] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 86.879104][ T5393] Buffer I/O error on dev loop0, logical block 1020, lost sync page write [ 86.892113][ T5393] NILFS (loop0): unable to write superblock: err=-5 [ 86.901300][ T5393] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 86.910032][ T5393] NILFS (loop0): unable to write superblock: err=-5 [ 87.054708][ T5489] loop0: detected capacity change from 0 to 2048 [ 87.116064][ T5491] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 87.168088][ T5489] loop0: detected capacity change from 2048 to 0 [ 87.195192][ T5393] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=226) [ 87.206034][ T5393] NILFS (loop0): error -5 truncating bmap (ino=15) [ 87.222037][ T5393] NILFS (loop0): I/O error reading b-tree node block (ino=16, blocknr=15) [ 87.233267][ T5393] NILFS (loop0): error -5 truncating bmap (ino=16) [ 87.242421][ T5393] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=34) [ 87.253704][ T5393] NILFS (loop0): error -5 truncating bmap (ino=17) [ 87.265626][ T5491] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=0) [ 87.276400][ T5491] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=0) [ 87.285621][ T5491] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=0) [ 87.296445][ T5491] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=0) [ 87.307507][ T5393] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=0) [ 87.316441][ T5393] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=0) [ 87.326141][ T5393] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=0) [ 87.335719][ T5393] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=0) [ 87.344870][ T5393] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 87.355927][ T5393] Buffer I/O error on dev loop0, logical block 1020, lost sync page write [ 87.366021][ T5393] NILFS (loop0): unable to write superblock: err=-5 [ 87.373123][ T5393] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 87.382278][ T5393] NILFS (loop0): unable to write superblock: err=-5 [ 87.390746][ T5393] ================================================================== [ 87.398849][ T5393] BUG: KASAN: slab-use-after-free in lru_add_fn+0x2cc/0x1a20 [ 87.406355][ T5393] Read of size 8 at addr ffff888074b4d780 by task syz-executor.0/5393 [ 87.414530][ T5393] [ 87.416890][ T5393] CPU: 0 PID: 5393 Comm: syz-executor.0 Tainted: G W 6.10.0-rc1-next-20240603-syzkaller-03461-g861a3cb5a2a8 #0 [ 87.430120][ T5393] Tainted: [W]=WARN [ 87.433951][ T5393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 87.444048][ T5393] Call Trace: [ 87.447360][ T5393] [ 87.450308][ T5393] dump_stack_lvl+0x241/0x360 [ 87.455029][ T5393] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.460263][ T5393] ? __pfx__printk+0x10/0x10 [ 87.465040][ T5393] ? _printk+0xd5/0x120 [ 87.469196][ T5393] ? __virt_addr_valid+0x183/0x520 [ 87.474403][ T5393] ? __virt_addr_valid+0x183/0x520 [ 87.479512][ T5393] print_report+0x169/0x550 [ 87.484093][ T5393] ? __virt_addr_valid+0x183/0x520 [ 87.489229][ T5393] ? __virt_addr_valid+0x183/0x520 [ 87.494545][ T5393] ? __virt_addr_valid+0x44e/0x520 [ 87.499710][ T5393] ? __phys_addr+0xba/0x170 [ 87.504561][ T5393] ? lru_add_fn+0x2cc/0x1a20 [ 87.509146][ T5393] kasan_report+0x143/0x180 [ 87.513726][ T5393] ? lru_add_fn+0x2cc/0x1a20 [ 87.518316][ T5393] ? lru_add_fn+0x20c/0x1a20 [ 87.522897][ T5393] kasan_check_range+0x282/0x290 [ 87.527856][ T5393] lru_add_fn+0x2cc/0x1a20 [ 87.532287][ T5393] folio_batch_move_lru+0x31f/0x690 [ 87.537509][ T5393] ? __pfx_lru_add_fn+0x10/0x10 [ 87.542367][ T5393] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 87.548088][ T5393] lru_add_drain_cpu+0x10e/0x8c0 [ 87.553054][ T5393] ? __pfx_lru_add_drain_cpu+0x10/0x10 [ 87.559143][ T5393] ? folio_redirty_for_writepage+0x1de/0x6a0 [ 87.565256][ T5393] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 87.571262][ T5393] ? __pfx_lock_release+0x10/0x10 [ 87.576301][ T5393] ? lru_add_drain+0x79/0x3e0 [ 87.581086][ T5393] lru_add_drain+0x123/0x3e0 [ 87.585697][ T5393] __folio_batch_release+0x55/0xa0 [ 87.590814][ T5393] writeback_iter+0x742/0x18d0 [ 87.595697][ T5393] do_writepages+0x4b9/0x870 [ 87.600301][ T5393] ? __pfx_do_writepages+0x10/0x10 [ 87.605438][ T5393] ? __pfx_lock_release+0x10/0x10 [ 87.610475][ T5393] ? do_raw_spin_lock+0x14f/0x370 [ 87.615501][ T5393] __writeback_single_inode+0x165/0x10b0 [ 87.621171][ T5393] writeback_single_inode+0x21b/0x7a0 [ 87.626555][ T5393] ? __pfx_writeback_single_inode+0x10/0x10 [ 87.632470][ T5393] ? mark_lock+0x9a/0x360 [ 87.636919][ T5393] ? __lock_acquire+0x1359/0x2000 [ 87.641961][ T5393] write_inode_now+0x1d1/0x260 [ 87.646741][ T5393] ? __pfx_write_inode_now+0x10/0x10 [ 87.652036][ T5393] ? do_raw_spin_unlock+0x13c/0x8b0 [ 87.657843][ T5393] iput+0x5d7/0x930 [ 87.661719][ T5393] nilfs_put_super+0xd7/0x160 [ 87.666402][ T5393] ? __pfx_nilfs_put_super+0x10/0x10 [ 87.671704][ T5393] generic_shutdown_super+0x136/0x2d0 [ 87.677109][ T5393] kill_block_super+0x44/0x90 [ 87.681829][ T5393] deactivate_locked_super+0xc4/0x130 [ 87.687244][ T5393] cleanup_mnt+0x41f/0x4b0 [ 87.691665][ T5393] ? lockdep_hardirqs_on+0x99/0x150 [ 87.696859][ T5393] task_work_run+0x24f/0x310 [ 87.701532][ T5393] ? __pfx_task_work_run+0x10/0x10 [ 87.706634][ T5393] ? __x64_sys_umount+0x126/0x170 [ 87.711654][ T5393] ? syscall_exit_to_user_mode+0xa3/0x370 [ 87.717366][ T5393] syscall_exit_to_user_mode+0x168/0x370 [ 87.723083][ T5393] do_syscall_64+0x100/0x230 [ 87.727666][ T5393] ? clear_bhb_loop+0x35/0x90 [ 87.732337][ T5393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.738233][ T5393] RIP: 0033:0x7f67e547efd7 [ 87.742643][ T5393] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 87.762342][ T5393] RSP: 002b:00007ffe401b3f78 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 87.770844][ T5393] RAX: 0000000000000000 RBX: 0000000000000064 RCX: 00007f67e547efd7 [ 87.778989][ T5393] RDX: 0000000000000200 RSI: 0000000000000009 RDI: 00007ffe401b5120 [ 87.786992][ T5393] RBP: 00007f67e54c83b9 R08: 0000000000000000 R09: 0000000000000000 [ 87.794954][ T5393] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffe401b5120 [ 87.803001][ T5393] R13: 00007f67e54c83b9 R14: 000055558ba3f430 R15: 0000000000000005 [ 87.810998][ T5393] [ 87.814005][ T5393] [ 87.816311][ T5393] Allocated by task 5489: [ 87.820622][ T5393] kasan_save_track+0x3f/0x80 [ 87.825296][ T5393] __kasan_slab_alloc+0x66/0x80 [ 87.830138][ T5393] kmem_cache_alloc_lru_noprof+0x139/0x2b0 [ 87.835947][ T5393] nilfs_alloc_inode+0x2e/0xf0 [ 87.840702][ T5393] iget5_locked+0xa4/0x280 [ 87.845111][ T5393] nilfs_iget_locked+0x12b/0x180 [ 87.850037][ T5393] nilfs_ifile_read+0x30/0x1b0 [ 87.854792][ T5393] nilfs_attach_checkpoint+0xed/0x1a0 [ 87.860158][ T5393] nilfs_fill_super+0x380/0x6a0 [ 87.865005][ T5393] nilfs_get_tree+0x4f9/0x920 [ 87.869675][ T5393] vfs_get_tree+0x90/0x2a0 [ 87.874079][ T5393] do_new_mount+0x2be/0xb40 [ 87.878585][ T5393] __se_sys_mount+0x2d9/0x3c0 [ 87.883251][ T5393] do_syscall_64+0xf3/0x230 [ 87.887964][ T5393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.893864][ T5393] [ 87.896265][ T5393] Freed by task 16: [ 87.900091][ T5393] kasan_save_track+0x3f/0x80 [ 87.904775][ T5393] kasan_save_free_info+0x40/0x50 [ 87.909790][ T5393] poison_slab_object+0xe0/0x150 [ 87.914808][ T5393] __kasan_slab_free+0x37/0x60 [ 87.919606][ T5393] kmem_cache_free+0x145/0x350 [ 87.924392][ T5393] rcu_core+0xafd/0x1830 [ 87.928659][ T5393] handle_softirqs+0x2c4/0x970 [ 87.933434][ T5393] run_ksoftirqd+0xca/0x130 [ 87.937960][ T5393] smpboot_thread_fn+0x544/0xa30 [ 87.942924][ T5393] kthread+0x2f0/0x390 [ 87.947000][ T5393] ret_from_fork+0x4b/0x80 [ 87.951416][ T5393] ret_from_fork_asm+0x1a/0x30 [ 87.956170][ T5393] [ 87.958485][ T5393] Last potentially related work creation: [ 87.964208][ T5393] kasan_save_stack+0x3f/0x60 [ 87.968901][ T5393] __kasan_record_aux_stack+0xac/0xc0 [ 87.974269][ T5393] call_rcu+0x167/0xa70 [ 87.978450][ T5393] nilfs_put_root+0x97/0xc0 [ 87.982992][ T5393] nilfs_detach_log_writer+0x8ca/0xbe0 [ 87.988463][ T5393] nilfs_put_super+0x4d/0x160 [ 87.993135][ T5393] generic_shutdown_super+0x136/0x2d0 [ 87.998514][ T5393] kill_block_super+0x44/0x90 [ 88.003217][ T5393] deactivate_locked_super+0xc4/0x130 [ 88.008594][ T5393] cleanup_mnt+0x41f/0x4b0 [ 88.013005][ T5393] task_work_run+0x24f/0x310 [ 88.017588][ T5393] syscall_exit_to_user_mode+0x168/0x370 [ 88.023210][ T5393] do_syscall_64+0x100/0x230 [ 88.027790][ T5393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.033677][ T5393] [ 88.035988][ T5393] The buggy address belongs to the object at ffff888074b4d2e0 [ 88.035988][ T5393] which belongs to the cache nilfs2_inode_cache of size 1504 [ 88.050722][ T5393] The buggy address is located 1184 bytes inside of [ 88.050722][ T5393] freed 1504-byte region [ffff888074b4d2e0, ffff888074b4d8c0) [ 88.064688][ T5393] [ 88.067017][ T5393] The buggy address belongs to the physical page: [ 88.073431][ T5393] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x74b48 [ 88.082628][ T5393] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 88.091233][ T5393] memcg:ffff888017be7201 [ 88.095574][ T5393] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 88.103228][ T5393] page_type: 0xfdffffff(slab) [ 88.107938][ T5393] raw: 00fff00000000040 ffff888017f1e140 dead000000000122 0000000000000000 [ 88.116721][ T5393] raw: 0000000000000000 0000000000140014 00000001fdffffff ffff888017be7201 [ 88.125306][ T5393] head: 00fff00000000040 ffff888017f1e140 dead000000000122 0000000000000000 [ 88.133984][ T5393] head: 0000000000000000 0000000000140014 00000001fdffffff ffff888017be7201 [ 88.142669][ T5393] head: 00fff00000000003 ffffea0001d2d201 ffffffffffffffff 0000000000000000 [ 88.151362][ T5393] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 88.160050][ T5393] page dumped because: kasan: bad access detected [ 88.166488][ T5393] page_owner tracks the page as allocated [ 88.172379][ T5393] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 5461, tgid 5460 (syz-executor.0), ts 86403081848, free_ts 17721370267 [ 88.196530][ T5393] post_alloc_hook+0x1f3/0x230 [ 88.201299][ T5393] get_page_from_freelist+0x2cbd/0x2d70 [ 88.206838][ T5393] __alloc_pages_noprof+0x256/0x6c0 [ 88.212025][ T5393] alloc_slab_page+0x5f/0x120 [ 88.216696][ T5393] allocate_slab+0x5a/0x2f0 [ 88.221290][ T5393] ___slab_alloc+0xcd1/0x14b0 [ 88.226043][ T5393] __slab_alloc+0x58/0xa0 [ 88.230387][ T5393] kmem_cache_alloc_lru_noprof+0x1c5/0x2b0 [ 88.236244][ T5393] nilfs_alloc_inode+0x2e/0xf0 [ 88.241015][ T5393] iget5_locked+0xa4/0x280 [ 88.245450][ T5393] nilfs_iget_locked+0x12b/0x180 [ 88.250589][ T5393] nilfs_dat_read+0xc3/0x310 [ 88.255191][ T5393] load_nilfs+0x56f/0x1090 [ 88.259706][ T5393] nilfs_fill_super+0x310/0x6a0 [ 88.264745][ T5393] nilfs_get_tree+0x4f9/0x920 [ 88.269422][ T5393] vfs_get_tree+0x90/0x2a0 [ 88.273851][ T5393] page last free pid 1 tgid 1 stack trace: [ 88.279643][ T5393] free_unref_page+0xd22/0xea0 [ 88.284436][ T5393] free_contig_range+0x9e/0x160 [ 88.289410][ T5393] destroy_args+0x8a/0x890 [ 88.293870][ T5393] debug_vm_pgtable+0x4be/0x550 [ 88.298856][ T5393] do_one_initcall+0x248/0x880 [ 88.303645][ T5393] do_initcall_level+0x157/0x210 [ 88.308622][ T5393] do_initcalls+0x3f/0x80 [ 88.313165][ T5393] kernel_init_freeable+0x435/0x5d0 [ 88.318375][ T5393] kernel_init+0x1d/0x2b0 [ 88.322702][ T5393] ret_from_fork+0x4b/0x80 [ 88.327155][ T5393] ret_from_fork_asm+0x1a/0x30 [ 88.331982][ T5393] [ 88.334328][ T5393] Memory state around the buggy address: [ 88.339975][ T5393] ffff888074b4d680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 88.348032][ T5393] ffff888074b4d700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 88.356109][ T5393] >ffff888074b4d780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 88.364276][ T5393] ^ [ 88.368352][ T5393] ffff888074b4d800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 88.376516][ T5393] ffff888074b4d880: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 88.384667][ T5393] ================================================================== [ 88.392723][ T5393] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 88.399936][ T5393] CPU: 0 PID: 5393 Comm: syz-executor.0 Tainted: G W 6.10.0-rc1-next-20240603-syzkaller-03461-g861a3cb5a2a8 #0 [ 88.413235][ T5393] Tainted: [W]=WARN [ 88.417037][ T5393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 88.427116][ T5393] Call Trace: [ 88.430400][ T5393] [ 88.433327][ T5393] dump_stack_lvl+0x241/0x360 [ 88.438010][ T5393] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.443199][ T5393] ? __pfx__printk+0x10/0x10 [ 88.447797][ T5393] ? rcu_is_watching+0x15/0xb0 [ 88.452571][ T5393] ? vscnprintf+0x5d/0x90 [ 88.456900][ T5393] panic+0x349/0x870 [ 88.460874][ T5393] ? __pfx_lock_release+0x10/0x10 [ 88.465935][ T5393] ? check_panic_on_warn+0x21/0xb0 [ 88.471088][ T5393] ? __pfx_panic+0x10/0x10 [ 88.475539][ T5393] ? do_raw_spin_unlock+0x13c/0x8b0 [ 88.480776][ T5393] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 88.486699][ T5393] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 88.493236][ T5393] check_panic_on_warn+0x86/0xb0 [ 88.498213][ T5393] ? lru_add_fn+0x2cc/0x1a20 [ 88.502812][ T5393] end_report+0x77/0x160 [ 88.507049][ T5393] kasan_report+0x154/0x180 [ 88.511554][ T5393] ? lru_add_fn+0x2cc/0x1a20 [ 88.516171][ T5393] ? lru_add_fn+0x20c/0x1a20 [ 88.520769][ T5393] kasan_check_range+0x282/0x290 [ 88.525704][ T5393] lru_add_fn+0x2cc/0x1a20 [ 88.530241][ T5393] folio_batch_move_lru+0x31f/0x690 [ 88.535567][ T5393] ? __pfx_lru_add_fn+0x10/0x10 [ 88.540591][ T5393] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 88.546307][ T5393] lru_add_drain_cpu+0x10e/0x8c0 [ 88.551253][ T5393] ? __pfx_lru_add_drain_cpu+0x10/0x10 [ 88.556730][ T5393] ? folio_redirty_for_writepage+0x1de/0x6a0 [ 88.562730][ T5393] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 88.568628][ T5393] ? __pfx_lock_release+0x10/0x10 [ 88.573658][ T5393] ? lru_add_drain+0x79/0x3e0 [ 88.578334][ T5393] lru_add_drain+0x123/0x3e0 [ 88.582936][ T5393] __folio_batch_release+0x55/0xa0 [ 88.588043][ T5393] writeback_iter+0x742/0x18d0 [ 88.592808][ T5393] do_writepages+0x4b9/0x870 [ 88.597400][ T5393] ? __pfx_do_writepages+0x10/0x10 [ 88.602516][ T5393] ? __pfx_lock_release+0x10/0x10 [ 88.607797][ T5393] ? do_raw_spin_lock+0x14f/0x370 [ 88.612815][ T5393] __writeback_single_inode+0x165/0x10b0 [ 88.618445][ T5393] writeback_single_inode+0x21b/0x7a0 [ 88.623812][ T5393] ? __pfx_writeback_single_inode+0x10/0x10 [ 88.629698][ T5393] ? mark_lock+0x9a/0x360 [ 88.634020][ T5393] ? __lock_acquire+0x1359/0x2000 [ 88.639059][ T5393] write_inode_now+0x1d1/0x260 [ 88.643899][ T5393] ? __pfx_write_inode_now+0x10/0x10 [ 88.649261][ T5393] ? do_raw_spin_unlock+0x13c/0x8b0 [ 88.654595][ T5393] iput+0x5d7/0x930 [ 88.658417][ T5393] nilfs_put_super+0xd7/0x160 [ 88.663093][ T5393] ? __pfx_nilfs_put_super+0x10/0x10 [ 88.668377][ T5393] generic_shutdown_super+0x136/0x2d0 [ 88.673761][ T5393] kill_block_super+0x44/0x90 [ 88.678552][ T5393] deactivate_locked_super+0xc4/0x130 [ 88.683981][ T5393] cleanup_mnt+0x41f/0x4b0 [ 88.688446][ T5393] ? lockdep_hardirqs_on+0x99/0x150 [ 88.693752][ T5393] task_work_run+0x24f/0x310 [ 88.698347][ T5393] ? __pfx_task_work_run+0x10/0x10 [ 88.703522][ T5393] ? __x64_sys_umount+0x126/0x170 [ 88.708583][ T5393] ? syscall_exit_to_user_mode+0xa3/0x370 [ 88.714329][ T5393] syscall_exit_to_user_mode+0x168/0x370 [ 88.720044][ T5393] do_syscall_64+0x100/0x230 [ 88.724652][ T5393] ? clear_bhb_loop+0x35/0x90 [ 88.729352][ T5393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.735271][ T5393] RIP: 0033:0x7f67e547efd7 [ 88.739754][ T5393] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 88.759497][ T5393] RSP: 002b:00007ffe401b3f78 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 88.767941][ T5393] RAX: 0000000000000000 RBX: 0000000000000064 RCX: 00007f67e547efd7 [ 88.775905][ T5393] RDX: 0000000000000200 RSI: 0000000000000009 RDI: 00007ffe401b5120 [ 88.783875][ T5393] RBP: 00007f67e54c83b9 R08: 0000000000000000 R09: 0000000000000000 [ 88.791974][ T5393] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffe401b5120 [ 88.799967][ T5393] R13: 00007f67e54c83b9 R14: 000055558ba3f430 R15: 0000000000000005 [ 88.808003][ T5393] [ 88.811303][ T5393] Kernel Offset: disabled [ 88.815633][ T5393] Rebooting in 86400 seconds..