Warning: Permanently added '10.128.1.182' (ED25519) to the list of known hosts. 2024/05/20 06:48:33 ignoring optional flag "sandboxArg"="0" 2024/05/20 06:48:34 parsed 1 programs 2024/05/20 06:48:35 executed programs: 0 [ 91.584679][ T5440] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.640443][ T5095] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.649370][ T5095] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.657715][ T5095] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.666060][ T5095] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.674990][ T5095] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 91.682408][ T5095] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.801817][ T5447] chnl_net:caif_netlink_parms(): no params data found [ 91.858533][ T5447] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.866755][ T5447] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.874286][ T5447] bridge_slave_0: entered allmulticast mode [ 91.881618][ T5447] bridge_slave_0: entered promiscuous mode [ 91.891074][ T5447] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.898672][ T5447] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.906307][ T5447] bridge_slave_1: entered allmulticast mode [ 91.913520][ T5447] bridge_slave_1: entered promiscuous mode [ 91.938415][ T5447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.950540][ T5447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.979593][ T5447] team0: Port device team_slave_0 added [ 91.987478][ T5447] team0: Port device team_slave_1 added [ 92.010203][ T5447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.017949][ T5447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.044694][ T5447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.057599][ T5447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.064952][ T5447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.091162][ T5447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.127238][ T5447] hsr_slave_0: entered promiscuous mode [ 92.133643][ T5447] hsr_slave_1: entered promiscuous mode [ 92.785910][ T5447] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.808140][ T5447] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.820878][ T5447] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.835910][ T5447] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.953410][ T5447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.980452][ T5447] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.996937][ T783] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.004352][ T783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.023382][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.033651][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.266727][ T5447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.331584][ T5447] veth0_vlan: entered promiscuous mode [ 93.349181][ T5447] veth1_vlan: entered promiscuous mode [ 93.397054][ T5447] veth0_macvtap: entered promiscuous mode [ 93.410005][ T5447] veth1_macvtap: entered promiscuous mode [ 93.437870][ T5447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.457463][ T5447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.477895][ T5447] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.488035][ T5447] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.500831][ T5447] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.510288][ T5447] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.590005][ T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.602196][ T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.641958][ T2896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.650643][ T2896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.746509][ T5521] loop0: detected capacity change from 0 to 2048 [ 93.755144][ T5095] Bluetooth: hci0: command tx timeout [ 93.801489][ T5525] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 93.886378][ T5521] loop0: detected capacity change from 2048 to 0 [ 93.927533][ T5447] syz-executor.0: attempt to access beyond end of device [ 93.927533][ T5447] loop0: rw=0, sector=100, nr_sectors = 2 limit=0 [ 93.942852][ T5447] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=226) [ 93.952275][ T5447] NILFS (loop0): error -5 truncating bmap (ino=15) [ 93.969508][ T5447] syz-executor.0: attempt to access beyond end of device [ 93.969508][ T5447] loop0: rw=0, sector=66, nr_sectors = 2 limit=0 [ 93.986375][ T5447] NILFS (loop0): I/O error reading b-tree node block (ino=16, blocknr=15) [ 93.996913][ T5447] NILFS (loop0): error -5 truncating bmap (ino=16) [ 94.006897][ T5447] syz-executor.0: attempt to access beyond end of device [ 94.006897][ T5447] loop0: rw=0, sector=90, nr_sectors = 2 limit=0 [ 94.021862][ T5447] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=34) [ 94.033421][ T5447] NILFS (loop0): error -5 truncating bmap (ino=17) [ 94.051604][ T5525] segctord: attempt to access beyond end of device [ 94.051604][ T5525] loop0: rw=0, sector=84, nr_sectors = 2 limit=0 [ 94.067411][ T5525] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=0) [ 94.080945][ T5525] segctord: attempt to access beyond end of device [ 94.080945][ T5525] loop0: rw=0, sector=84, nr_sectors = 2 limit=0 [ 94.095697][ T5525] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=0) [ 94.106884][ T5525] segctord: attempt to access beyond end of device [ 94.106884][ T5525] loop0: rw=0, sector=84, nr_sectors = 2 limit=0 [ 94.121936][ T5525] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=0) [ 94.132387][ T5525] segctord: attempt to access beyond end of device [ 94.132387][ T5525] loop0: rw=0, sector=84, nr_sectors = 2 limit=0 [ 94.147349][ T5525] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=0) [ 94.174640][ T5447] syz-executor.0: attempt to access beyond end of device [ 94.174640][ T5447] loop0: rw=0, sector=84, nr_sectors = 2 limit=0 [ 94.190255][ T5447] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=0) [ 94.200319][ T5447] syz-executor.0: attempt to access beyond end of device [ 94.200319][ T5447] loop0: rw=0, sector=84, nr_sectors = 2 limit=0 [ 94.216255][ T5447] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=0) [ 94.225956][ T5447] syz-executor.0: attempt to access beyond end of device [ 94.225956][ T5447] loop0: rw=0, sector=84, nr_sectors = 2 limit=0 [ 94.240178][ T5447] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=0) [ 94.250178][ T5447] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=0) [ 94.259398][ T5447] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 95.832856][ T5095] Bluetooth: hci0: command tx timeout [ 97.913614][ T5095] Bluetooth: hci0: command tx timeout [ 99.992691][ T5095] Bluetooth: hci0: command tx timeout [ 118.918298][ T5447] bio_check_eod: 1 callbacks suppressed [ 118.918320][ T5447] syz-executor.0: attempt to access beyond end of device [ 118.918320][ T5447] loop0: rw=395265, sector=2040, nr_sectors = 2 limit=0 [ 118.938498][ T5447] Buffer I/O error on dev loop0, logical block 1020, lost sync page write [ 118.947659][ T5447] NILFS (loop0): unable to write superblock: err=-5 [ 118.955840][ T5447] syz-executor.0: attempt to access beyond end of device [ 118.955840][ T5447] loop0: rw=395265, sector=2, nr_sectors = 2 limit=0 [ 118.971540][ T5447] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 118.980246][ T5447] NILFS (loop0): unable to write superblock: err=-5 [ 118.989880][ T5447] ================================================================== [ 118.998106][ T5447] BUG: KASAN: slab-use-after-free in lru_add_fn+0x2cc/0x1a20 [ 119.006140][ T5447] Read of size 8 at addr ffff8880691f04a8 by task syz-executor.0/5447 [ 119.014460][ T5447] [ 119.016889][ T5447] CPU: 0 PID: 5447 Comm: syz-executor.0 Not tainted 6.9.0-next-20240520-syzkaller-13491-g632483ea8004 #0 [ 119.028157][ T5447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 119.039011][ T5447] Call Trace: [ 119.042347][ T5447] [ 119.045403][ T5447] dump_stack_lvl+0x241/0x360 [ 119.050376][ T5447] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.055666][ T5447] ? __pfx__printk+0x10/0x10 [ 119.060283][ T5447] ? _printk+0xd5/0x120 [ 119.064562][ T5447] ? __virt_addr_valid+0x183/0x520 [ 119.069693][ T5447] ? __virt_addr_valid+0x183/0x520 [ 119.074812][ T5447] print_report+0x169/0x550 [ 119.079403][ T5447] ? __virt_addr_valid+0x183/0x520 [ 119.084525][ T5447] ? __virt_addr_valid+0x183/0x520 [ 119.089674][ T5447] ? __virt_addr_valid+0x44e/0x520 [ 119.094818][ T5447] ? __phys_addr+0xba/0x170 [ 119.099512][ T5447] ? lru_add_fn+0x2cc/0x1a20 [ 119.104093][ T5447] kasan_report+0x143/0x180 [ 119.109378][ T5447] ? lru_add_fn+0x2cc/0x1a20 [ 119.114732][ T5447] ? lru_add_fn+0x20c/0x1a20 [ 119.119481][ T5447] kasan_check_range+0x282/0x290 [ 119.124425][ T5447] lru_add_fn+0x2cc/0x1a20 [ 119.128827][ T5447] folio_batch_move_lru+0x322/0x690 [ 119.134014][ T5447] ? __pfx_lru_add_fn+0x10/0x10 [ 119.138877][ T5447] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 119.144789][ T5447] lru_add_drain_cpu+0x10e/0x8c0 [ 119.149740][ T5447] ? __pfx_lru_add_drain_cpu+0x10/0x10 [ 119.155191][ T5447] ? folio_redirty_for_writepage+0x1de/0x6a0 [ 119.161162][ T5447] ? __pfx_lock_release+0x10/0x10 [ 119.166264][ T5447] ? lru_add_drain+0x79/0x3e0 [ 119.170951][ T5447] lru_add_drain+0x123/0x3e0 [ 119.175642][ T5447] __folio_batch_release+0x55/0xa0 [ 119.180924][ T5447] writeback_iter+0x742/0x18d0 [ 119.185778][ T5447] do_writepages+0x4b5/0x870 [ 119.190495][ T5447] ? __pfx_do_writepages+0x10/0x10 [ 119.195635][ T5447] ? __pfx_lock_acquire+0x10/0x10 [ 119.200661][ T5447] ? __pfx_lock_release+0x10/0x10 [ 119.205751][ T5447] ? do_raw_spin_lock+0x14f/0x370 [ 119.211038][ T5447] __writeback_single_inode+0x165/0x10b0 [ 119.216675][ T5447] writeback_single_inode+0x21b/0x7a0 [ 119.222093][ T5447] ? __pfx_writeback_single_inode+0x10/0x10 [ 119.228136][ T5447] write_inode_now+0x1d1/0x260 [ 119.233213][ T5447] ? __pfx_write_inode_now+0x10/0x10 [ 119.238521][ T5447] ? do_raw_spin_unlock+0x13c/0x8b0 [ 119.243774][ T5447] iput+0x5d7/0x930 [ 119.247638][ T5447] nilfs_put_super+0xd7/0x160 [ 119.252364][ T5447] ? __pfx_nilfs_put_super+0x10/0x10 [ 119.257850][ T5447] generic_shutdown_super+0x136/0x2d0 [ 119.263242][ T5447] kill_block_super+0x44/0x90 [ 119.268002][ T5447] deactivate_locked_super+0xc4/0x130 [ 119.273471][ T5447] cleanup_mnt+0x426/0x4c0 [ 119.277992][ T5447] ? _raw_spin_unlock_irq+0x23/0x50 [ 119.283245][ T5447] task_work_run+0x24f/0x310 [ 119.288168][ T5447] ? __pfx_task_work_run+0x10/0x10 [ 119.293536][ T5447] ? __x64_sys_umount+0x126/0x170 [ 119.298868][ T5447] ? syscall_exit_to_user_mode+0xa3/0x370 [ 119.304966][ T5447] syscall_exit_to_user_mode+0x168/0x370 [ 119.310810][ T5447] do_syscall_64+0x102/0x240 [ 119.315598][ T5447] ? clear_bhb_loop+0x35/0x90 [ 119.320537][ T5447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.326787][ T5447] RIP: 0033:0x7fbfee87efd7 [ 119.331206][ T5447] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 119.351353][ T5447] RSP: 002b:00007ffe628b93f8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 119.360115][ T5447] RAX: 0000000000000000 RBX: 0000000000000064 RCX: 00007fbfee87efd7 [ 119.368268][ T5447] RDX: 0000000000000200 RSI: 0000000000000009 RDI: 00007ffe628ba5a0 [ 119.376675][ T5447] RBP: 00007fbfee8c83b9 R08: 0000000000000000 R09: 0000000000000000 [ 119.384990][ T5447] R10: 0000000000000100 R11: 0000000000000202 R12: 00007ffe628ba5a0 [ 119.393309][ T5447] R13: 00007fbfee8c83b9 R14: 000055556d46f430 R15: 0000000000000005 [ 119.401462][ T5447] [ 119.404467][ T5447] [ 119.406799][ T5447] Allocated by task 5521: [ 119.411376][ T5447] kasan_save_track+0x3f/0x80 [ 119.416220][ T5447] __kasan_slab_alloc+0x66/0x80 [ 119.421206][ T5447] kmem_cache_alloc_lru_noprof+0x139/0x2b0 [ 119.427388][ T5447] nilfs_alloc_inode+0x2e/0xf0 [ 119.432347][ T5447] iget5_locked+0xa4/0x280 [ 119.436906][ T5447] nilfs_iget_locked+0x12b/0x180 [ 119.441859][ T5447] nilfs_ifile_read+0x30/0x1b0 [ 119.446666][ T5447] nilfs_attach_checkpoint+0xed/0x1a0 [ 119.452199][ T5447] nilfs_fill_super+0x380/0x6a0 [ 119.457340][ T5447] nilfs_get_tree+0x4f9/0x920 [ 119.462144][ T5447] vfs_get_tree+0x90/0x2a0 [ 119.466724][ T5447] do_new_mount+0x2be/0xb40 [ 119.471389][ T5447] __se_sys_mount+0x2d9/0x3c0 [ 119.476315][ T5447] do_syscall_64+0xf5/0x240 [ 119.481080][ T5447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.487422][ T5447] [ 119.489828][ T5447] Freed by task 5447: [ 119.493821][ T5447] kasan_save_track+0x3f/0x80 [ 119.498553][ T5447] kasan_save_free_info+0x40/0x50 [ 119.503676][ T5447] poison_slab_object+0xe0/0x150 [ 119.509596][ T5447] __kasan_slab_free+0x37/0x60 [ 119.514761][ T5447] kmem_cache_free+0x145/0x350 [ 119.519722][ T5447] rcu_core+0xafd/0x1830 [ 119.523966][ T5447] handle_softirqs+0x2d6/0x990 [ 119.528719][ T5447] __irq_exit_rcu+0xf4/0x1c0 [ 119.533474][ T5447] irq_exit_rcu+0x9/0x30 [ 119.537783][ T5447] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 119.543416][ T5447] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 119.549516][ T5447] [ 119.551842][ T5447] Last potentially related work creation: [ 119.557555][ T5447] kasan_save_stack+0x3f/0x60 [ 119.562242][ T5447] __kasan_record_aux_stack+0xac/0xc0 [ 119.567596][ T5447] call_rcu+0x167/0xa70 [ 119.571735][ T5447] nilfs_put_root+0x97/0xc0 [ 119.576309][ T5447] nilfs_detach_log_writer+0x8bb/0xbe0 [ 119.582021][ T5447] nilfs_put_super+0x4d/0x160 [ 119.586798][ T5447] generic_shutdown_super+0x136/0x2d0 [ 119.592794][ T5447] kill_block_super+0x44/0x90 [ 119.597665][ T5447] deactivate_locked_super+0xc4/0x130 [ 119.603214][ T5447] cleanup_mnt+0x426/0x4c0 [ 119.607884][ T5447] task_work_run+0x24f/0x310 [ 119.612469][ T5447] syscall_exit_to_user_mode+0x168/0x370 [ 119.618287][ T5447] do_syscall_64+0x102/0x240 [ 119.622863][ T5447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.628755][ T5447] [ 119.631061][ T5447] The buggy address belongs to the object at ffff8880691f0000 [ 119.631061][ T5447] which belongs to the cache nilfs2_inode_cache of size 1512 [ 119.646104][ T5447] The buggy address is located 1192 bytes inside of [ 119.646104][ T5447] freed 1512-byte region [ffff8880691f0000, ffff8880691f05e8) [ 119.660413][ T5447] [ 119.662745][ T5447] The buggy address belongs to the physical page: [ 119.669155][ T5447] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x691f0 [ 119.678088][ T5447] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 119.686754][ T5447] memcg:ffff8880231ffa01 [ 119.691150][ T5447] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 119.698681][ T5447] page_type: 0xffffefff(slab) [ 119.703466][ T5447] raw: 00fff00000000040 ffff88801afb3b40 dead000000000122 0000000000000000 [ 119.712220][ T5447] raw: 0000000000000000 0000000080130013 00000001ffffefff ffff8880231ffa01 [ 119.721247][ T5447] head: 00fff00000000040 ffff88801afb3b40 dead000000000122 0000000000000000 [ 119.730354][ T5447] head: 0000000000000000 0000000080130013 00000001ffffefff ffff8880231ffa01 [ 119.739027][ T5447] head: 00fff00000000003 ffffea0001a47c01 ffffffffffffffff 0000000000000000 [ 119.747695][ T5447] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 119.756552][ T5447] page dumped because: kasan: bad access detected [ 119.763312][ T5447] page_owner tracks the page as allocated [ 119.769028][ T5447] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 5521, tgid 5520 (syz-executor.0), ts 93798526337, free_ts 18469647733 [ 119.793347][ T5447] post_alloc_hook+0x1f3/0x230 [ 119.798135][ T5447] get_page_from_freelist+0x2ce2/0x2d90 [ 119.803665][ T5447] __alloc_pages_noprof+0x256/0x6c0 [ 119.808935][ T5447] alloc_slab_page+0x5f/0x120 [ 119.813611][ T5447] allocate_slab+0x5a/0x2e0 [ 119.818196][ T5447] ___slab_alloc+0xcd1/0x14b0 [ 119.822943][ T5447] __slab_alloc+0x58/0xa0 [ 119.827347][ T5447] kmem_cache_alloc_lru_noprof+0x1c5/0x2b0 [ 119.833247][ T5447] nilfs_alloc_inode+0x2e/0xf0 [ 119.838136][ T5447] iget5_locked+0xa4/0x280 [ 119.842553][ T5447] nilfs_iget_locked+0x12b/0x180 [ 119.847503][ T5447] nilfs_ifile_read+0x30/0x1b0 [ 119.852292][ T5447] nilfs_attach_checkpoint+0xed/0x1a0 [ 119.858093][ T5447] nilfs_fill_super+0x380/0x6a0 [ 119.863057][ T5447] nilfs_get_tree+0x4f9/0x920 [ 119.867840][ T5447] vfs_get_tree+0x90/0x2a0 [ 119.872256][ T5447] page last free pid 1 tgid 1 stack trace: [ 119.878133][ T5447] free_unref_page+0xd22/0xea0 [ 119.882986][ T5447] free_contig_range+0x9e/0x160 [ 119.887935][ T5447] destroy_args+0x8a/0x890 [ 119.892375][ T5447] debug_vm_pgtable+0x4be/0x550 [ 119.897504][ T5447] do_one_initcall+0x248/0x880 [ 119.902275][ T5447] do_initcall_level+0x157/0x210 [ 119.907708][ T5447] do_initcalls+0x3f/0x80 [ 119.912199][ T5447] kernel_init_freeable+0x435/0x5d0 [ 119.917487][ T5447] kernel_init+0x1d/0x2b0 [ 119.921814][ T5447] ret_from_fork+0x4b/0x80 [ 119.926255][ T5447] ret_from_fork_asm+0x1a/0x30 [ 119.931186][ T5447] [ 119.933581][ T5447] Memory state around the buggy address: [ 119.939376][ T5447] ffff8880691f0380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 119.947809][ T5447] ffff8880691f0400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 119.956136][ T5447] >ffff8880691f0480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 119.964538][ T5447] ^ [ 119.970022][ T5447] ffff8880691f0500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 119.978435][ T5447] ffff8880691f0580: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 119.986760][ T5447] ================================================================== [ 119.995345][ T5447] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 120.002973][ T5447] CPU: 0 PID: 5447 Comm: syz-executor.0 Not tainted 6.9.0-next-20240520-syzkaller-13491-g632483ea8004 #0 [ 120.014269][ T5447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 120.024354][ T5447] Call Trace: [ 120.027653][ T5447] [ 120.030587][ T5447] dump_stack_lvl+0x241/0x360 [ 120.035541][ T5447] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.040837][ T5447] ? __pfx__printk+0x10/0x10 [ 120.045625][ T5447] ? rcu_is_watching+0x15/0xb0 [ 120.050476][ T5447] ? vscnprintf+0x5d/0x90 [ 120.054887][ T5447] panic+0x349/0x860 [ 120.058800][ T5447] ? __pfx_lock_release+0x10/0x10 [ 120.064285][ T5447] ? check_panic_on_warn+0x21/0xb0 [ 120.070923][ T5447] ? __pfx_panic+0x10/0x10 [ 120.075432][ T5447] ? do_raw_spin_unlock+0x13c/0x8b0 [ 120.080739][ T5447] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 120.086826][ T5447] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 120.093187][ T5447] check_panic_on_warn+0x86/0xb0 [ 120.098246][ T5447] ? lru_add_fn+0x2cc/0x1a20 [ 120.102929][ T5447] end_report+0x77/0x160 [ 120.107352][ T5447] kasan_report+0x154/0x180 [ 120.111908][ T5447] ? lru_add_fn+0x2cc/0x1a20 [ 120.116594][ T5447] ? lru_add_fn+0x20c/0x1a20 [ 120.121186][ T5447] kasan_check_range+0x282/0x290 [ 120.126400][ T5447] lru_add_fn+0x2cc/0x1a20 [ 120.131060][ T5447] folio_batch_move_lru+0x322/0x690 [ 120.136420][ T5447] ? __pfx_lru_add_fn+0x10/0x10 [ 120.141375][ T5447] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 120.147462][ T5447] lru_add_drain_cpu+0x10e/0x8c0 [ 120.152403][ T5447] ? __pfx_lru_add_drain_cpu+0x10/0x10 [ 120.158127][ T5447] ? folio_redirty_for_writepage+0x1de/0x6a0 [ 120.164288][ T5447] ? __pfx_lock_release+0x10/0x10 [ 120.169397][ T5447] ? lru_add_drain+0x79/0x3e0 [ 120.174532][ T5447] lru_add_drain+0x123/0x3e0 [ 120.179139][ T5447] __folio_batch_release+0x55/0xa0 [ 120.184242][ T5447] writeback_iter+0x742/0x18d0 [ 120.189087][ T5447] do_writepages+0x4b5/0x870 [ 120.193682][ T5447] ? __pfx_do_writepages+0x10/0x10 [ 120.198814][ T5447] ? __pfx_lock_acquire+0x10/0x10 [ 120.203957][ T5447] ? __pfx_lock_release+0x10/0x10 [ 120.209146][ T5447] ? do_raw_spin_lock+0x14f/0x370 [ 120.214168][ T5447] __writeback_single_inode+0x165/0x10b0 [ 120.219795][ T5447] writeback_single_inode+0x21b/0x7a0 [ 120.225530][ T5447] ? __pfx_writeback_single_inode+0x10/0x10 [ 120.231536][ T5447] write_inode_now+0x1d1/0x260 [ 120.236387][ T5447] ? __pfx_write_inode_now+0x10/0x10 [ 120.241958][ T5447] ? do_raw_spin_unlock+0x13c/0x8b0 [ 120.247170][ T5447] iput+0x5d7/0x930 [ 120.250975][ T5447] nilfs_put_super+0xd7/0x160 [ 120.255659][ T5447] ? __pfx_nilfs_put_super+0x10/0x10 [ 120.261056][ T5447] generic_shutdown_super+0x136/0x2d0 [ 120.266533][ T5447] kill_block_super+0x44/0x90 [ 120.271230][ T5447] deactivate_locked_super+0xc4/0x130 [ 120.276635][ T5447] cleanup_mnt+0x426/0x4c0 [ 120.281065][ T5447] ? _raw_spin_unlock_irq+0x23/0x50 [ 120.286350][ T5447] task_work_run+0x24f/0x310 [ 120.291222][ T5447] ? __pfx_task_work_run+0x10/0x10 [ 120.296436][ T5447] ? __x64_sys_umount+0x126/0x170 [ 120.301648][ T5447] ? syscall_exit_to_user_mode+0xa3/0x370 [ 120.307649][ T5447] syscall_exit_to_user_mode+0x168/0x370 [ 120.313640][ T5447] do_syscall_64+0x102/0x240 [ 120.318323][ T5447] ? clear_bhb_loop+0x35/0x90 [ 120.323097][ T5447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.329156][ T5447] RIP: 0033:0x7fbfee87efd7 [ 120.334021][ T5447] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 120.354776][ T5447] RSP: 002b:00007ffe628b93f8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 120.363548][ T5447] RAX: 0000000000000000 RBX: 0000000000000064 RCX: 00007fbfee87efd7 [ 120.371600][ T5447] RDX: 0000000000000200 RSI: 0000000000000009 RDI: 00007ffe628ba5a0 [ 120.379817][ T5447] RBP: 00007fbfee8c83b9 R08: 0000000000000000 R09: 0000000000000000 [ 120.388057][ T5447] R10: 0000000000000100 R11: 0000000000000202 R12: 00007ffe628ba5a0 [ 120.396150][ T5447] R13: 00007fbfee8c83b9 R14: 000055556d46f430 R15: 0000000000000005 [ 120.404304][ T5447] [ 120.407775][ T5447] Kernel Offset: disabled [ 120.412124][ T5447] Rebooting in 86400 seconds..