Warning: Permanently added '10.128.0.216' (ED25519) to the list of known hosts. 2024/05/28 16:55:12 ignoring optional flag "sandboxArg"="0" 2024/05/28 16:55:13 parsed 1 programs [ 82.373674][ T785] cfg80211: failed to load regulatory.db 2024/05/28 16:55:15 executed programs: 0 [ 82.905309][ T5346] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.959825][ T4479] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.968644][ T4479] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.977553][ T4479] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.986222][ T4479] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.996511][ T4479] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.004148][ T4479] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.128675][ T5382] chnl_net:caif_netlink_parms(): no params data found [ 83.185154][ T5382] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.192948][ T5382] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.200352][ T5382] bridge_slave_0: entered allmulticast mode [ 83.207386][ T5382] bridge_slave_0: entered promiscuous mode [ 83.215690][ T5382] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.222996][ T5382] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.230833][ T5382] bridge_slave_1: entered allmulticast mode [ 83.238526][ T5382] bridge_slave_1: entered promiscuous mode [ 83.263670][ T5382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.276536][ T5382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.306870][ T5382] team0: Port device team_slave_0 added [ 83.315168][ T5382] team0: Port device team_slave_1 added [ 83.337782][ T5382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.346130][ T5382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.372683][ T5382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.386489][ T5382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.393713][ T5382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.420046][ T5382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.455190][ T5382] hsr_slave_0: entered promiscuous mode [ 83.461705][ T5382] hsr_slave_1: entered promiscuous mode [ 84.078465][ T5382] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.090623][ T5382] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.102978][ T5382] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.127666][ T5382] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.253529][ T5382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.282783][ T5382] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.298781][ T5108] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.306382][ T5108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.337505][ T5108] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.344738][ T5108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.565854][ T5382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.630022][ T5382] veth0_vlan: entered promiscuous mode [ 84.645799][ T5382] veth1_vlan: entered promiscuous mode [ 84.686202][ T5382] veth0_macvtap: entered promiscuous mode [ 84.700048][ T5382] veth1_macvtap: entered promiscuous mode [ 84.728093][ T5382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.748686][ T5382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.765712][ T5382] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.777567][ T5382] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.787648][ T5382] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.797915][ T5382] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.896542][ T5086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.911560][ T5086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.950128][ T5108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.961835][ T5108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.075298][ T53] Bluetooth: hci0: command tx timeout [ 85.399443][ T5453] loop0: detected capacity change from 0 to 40427 [ 85.408445][ T5453] ======================================================= [ 85.408445][ T5453] WARNING: The mand mount option has been deprecated and [ 85.408445][ T5453] and is ignored by this kernel. Remove the mand [ 85.408445][ T5453] option from the mount to silence this warning. [ 85.408445][ T5453] ======================================================= [ 85.521198][ T5453] F2FS-fs (loop0): Found nat_bits in checkpoint [ 85.595370][ T5453] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 85.607056][ T5453] F2FS-fs (loop0): Inconsistent error blkaddr:5634, sit bitmap:0 [ 85.615263][ T5453] CPU: 1 PID: 5453 Comm: syz-executor.0 Not tainted 6.10.0-rc1-syzkaller-00013-g2bfcfd584ff5 #0 [ 85.626146][ T5453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 85.636342][ T5453] Call Trace: [ 85.639765][ T5453] [ 85.642891][ T5453] dump_stack_lvl+0x241/0x360 [ 85.647821][ T5453] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.653782][ T5453] ? _raw_write_unlock+0x28/0x50 [ 85.658962][ T5453] ? f2fs_init_read_extent_tree+0x314/0x910 [ 85.665175][ T5453] __f2fs_is_valid_blkaddr+0xd4d/0x1460 [ 85.671025][ T5453] sanity_check_extent_cache+0x15a/0x410 [ 85.676830][ T5453] f2fs_iget+0x34ee/0x4840 [ 85.681514][ T5453] f2fs_nfs_get_inode+0x74/0x100 [ 85.686581][ T5453] ? __pfx_f2fs_nfs_get_inode+0x10/0x10 [ 85.692257][ T5453] generic_fh_to_dentry+0x9f/0xf0 [ 85.697765][ T5453] exportfs_decode_fh_raw+0x152/0x5f0 [ 85.703524][ T5453] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 85.709636][ T5453] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 85.715786][ T5453] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 85.721699][ T5453] exportfs_decode_fh+0x3c/0x80 [ 85.726874][ T5453] do_handle_open+0x495/0x650 [ 85.731679][ T5453] ? __pfx_do_handle_open+0x10/0x10 [ 85.737077][ T5453] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 85.744120][ T5453] ? do_syscall_64+0x100/0x230 [ 85.749630][ T5453] ? do_syscall_64+0xb6/0x230 [ 85.754874][ T5453] do_syscall_64+0xf3/0x230 [ 85.759690][ T5453] ? clear_bhb_loop+0x35/0x90 [ 85.764843][ T5453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.771994][ T5453] RIP: 0033:0x7f770d87dca9 [ 85.777092][ T5453] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 85.797594][ T5453] RSP: 002b:00007f770e58f0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 85.806141][ T5453] RAX: ffffffffffffffda RBX: 00007f770d9abf80 RCX: 00007f770d87dca9 [ 85.814475][ T5453] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 85.822451][ T5453] RBP: 00007f770d8c947e R08: 0000000000000000 R09: 0000000000000000 [ 85.831486][ T5453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.839536][ T5453] R13: 000000000000000b R14: 00007f770d9abf80 R15: 00007ffda71d93a8 [ 85.847515][ T5453] [ 85.869034][ T5453] F2FS-fs (loop0): sanity_check_extent_cache: inode (ino=8) extent info [5634, 0, 3] is incorrect, run fsck to fix [ 85.892165][ T5480] F2FS-fs (loop0): Inconsistent error blkaddr:5634, sit bitmap:0 [ 85.901203][ T5480] CPU: 1 PID: 5480 Comm: syz-executor.0 Not tainted 6.10.0-rc1-syzkaller-00013-g2bfcfd584ff5 #0 [ 85.911660][ T5480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 85.922136][ T5480] Call Trace: [ 85.925704][ T5480] [ 85.928655][ T5480] dump_stack_lvl+0x241/0x360 [ 85.933371][ T5480] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.938658][ T5480] ? _raw_write_unlock+0x28/0x50 [ 85.943844][ T5480] ? f2fs_init_read_extent_tree+0x314/0x910 [ 85.949769][ T5480] __f2fs_is_valid_blkaddr+0xd4d/0x1460 [ 85.955453][ T5480] sanity_check_extent_cache+0x15a/0x410 [ 85.961237][ T5480] f2fs_iget+0x34ee/0x4840 [ 85.965831][ T5480] f2fs_nfs_get_inode+0x74/0x100 [ 85.970990][ T5480] ? __pfx_f2fs_nfs_get_inode+0x10/0x10 [ 85.976557][ T5480] generic_fh_to_dentry+0x9f/0xf0 [ 85.981860][ T5480] exportfs_decode_fh_raw+0x152/0x5f0 [ 85.987233][ T5480] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 85.993050][ T5480] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 85.998989][ T5480] ? __fget_files+0x29/0x470 [ 86.003603][ T5480] ? __fget_files+0x3f6/0x470 [ 86.008396][ T5480] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 86.014218][ T5480] exportfs_decode_fh+0x3c/0x80 [ 86.019273][ T5480] do_handle_open+0x495/0x650 [ 86.023967][ T5480] ? __pfx_do_handle_open+0x10/0x10 [ 86.029245][ T5480] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 86.035575][ T5480] ? do_syscall_64+0x100/0x230 [ 86.040345][ T5480] ? do_syscall_64+0xb6/0x230 [ 86.045016][ T5480] do_syscall_64+0xf3/0x230 [ 86.049550][ T5480] ? clear_bhb_loop+0x35/0x90 [ 86.054345][ T5480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.060330][ T5480] RIP: 0033:0x7f770d87dca9 [ 86.064838][ T5480] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 86.084542][ T5480] RSP: 002b:00007f770e56e0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 86.093072][ T5480] RAX: ffffffffffffffda RBX: 00007f770d9ac050 RCX: 00007f770d87dca9 [ 86.101392][ T5480] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 86.109358][ T5480] RBP: 00007f770d8c947e R08: 0000000000000000 R09: 0000000000000000 [ 86.117323][ T5480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.125287][ T5480] R13: 000000000000006e R14: 00007f770d9ac050 R15: 00007ffda71d93a8 [ 86.133313][ T5480] [ 86.164910][ T5480] F2FS-fs (loop0): sanity_check_extent_cache: inode (ino=8) extent info [5634, 0, 3] is incorrect, run fsck to fix [ 86.848552][ T5495] loop0: detected capacity change from 0 to 40427 [ 86.897078][ T5495] F2FS-fs (loop0): Found nat_bits in checkpoint [ 86.969274][ T5495] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 86.980117][ T5495] F2FS-fs (loop0): Inconsistent error blkaddr:5634, sit bitmap:0 [ 86.988681][ T5495] CPU: 1 PID: 5495 Comm: syz-executor.0 Not tainted 6.10.0-rc1-syzkaller-00013-g2bfcfd584ff5 #0 [ 86.999126][ T5495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 87.009479][ T5495] Call Trace: [ 87.012777][ T5495] [ 87.015750][ T5495] dump_stack_lvl+0x241/0x360 [ 87.020552][ T5495] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.025795][ T5495] ? _raw_write_unlock+0x28/0x50 [ 87.030805][ T5495] ? f2fs_init_read_extent_tree+0x314/0x910 [ 87.036737][ T5495] __f2fs_is_valid_blkaddr+0xd4d/0x1460 [ 87.042324][ T5495] sanity_check_extent_cache+0x15a/0x410 [ 87.048082][ T5495] f2fs_iget+0x34ee/0x4840 [ 87.052574][ T5495] f2fs_nfs_get_inode+0x74/0x100 [ 87.057553][ T5495] ? __pfx_f2fs_nfs_get_inode+0x10/0x10 [ 87.063141][ T5495] generic_fh_to_dentry+0x9f/0xf0 [ 87.068300][ T5495] exportfs_decode_fh_raw+0x152/0x5f0 [ 87.073878][ T5495] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 87.079812][ T5495] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 87.085770][ T5495] ? __fget_files+0x29/0x470 [ 87.090397][ T5495] ? __fget_files+0x3f6/0x470 [ 87.095285][ T5495] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 87.101123][ T5495] exportfs_decode_fh+0x3c/0x80 [ 87.106012][ T5495] do_handle_open+0x495/0x650 [ 87.111263][ T5495] ? __pfx_do_handle_open+0x10/0x10 [ 87.116494][ T5495] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 87.122853][ T5495] ? do_syscall_64+0x100/0x230 [ 87.127659][ T5495] ? do_syscall_64+0xb6/0x230 [ 87.132370][ T5495] do_syscall_64+0xf3/0x230 [ 87.137004][ T5495] ? clear_bhb_loop+0x35/0x90 [ 87.141726][ T5495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.147652][ T5495] RIP: 0033:0x7f770d87dca9 [ 87.152098][ T5495] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 87.163870][ T53] Bluetooth: hci0: command tx timeout [ 87.172432][ T5495] RSP: 002b:00007f770e58f0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 87.186239][ T5495] RAX: ffffffffffffffda RBX: 00007f770d9abf80 RCX: 00007f770d87dca9 [ 87.194413][ T5495] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 87.202414][ T5495] RBP: 00007f770d8c947e R08: 0000000000000000 R09: 0000000000000000 [ 87.210411][ T5495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.218421][ T5495] R13: 000000000000000b R14: 00007f770d9abf80 R15: 00007ffda71d93a8 [ 87.226439][ T5495] [ 87.247723][ T5495] F2FS-fs (loop0): sanity_check_extent_cache: inode (ino=8) extent info [5634, 0, 3] is incorrect, run fsck to fix [ 87.262941][ T5529] F2FS-fs (loop0): Inconsistent error blkaddr:5634, sit bitmap:0 [ 87.272128][ T5529] CPU: 1 PID: 5529 Comm: syz-executor.0 Not tainted 6.10.0-rc1-syzkaller-00013-g2bfcfd584ff5 #0 [ 87.282762][ T5529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 87.292844][ T5529] Call Trace: [ 87.296151][ T5529] [ 87.299191][ T5529] dump_stack_lvl+0x241/0x360 [ 87.303906][ T5529] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.309145][ T5529] ? _raw_write_unlock+0x28/0x50 [ 87.314121][ T5529] ? f2fs_init_read_extent_tree+0x314/0x910 [ 87.320087][ T5529] __f2fs_is_valid_blkaddr+0xd4d/0x1460 [ 87.325763][ T5529] sanity_check_extent_cache+0x15a/0x410 [ 87.331609][ T5529] f2fs_iget+0x34ee/0x4840 [ 87.336099][ T5529] f2fs_nfs_get_inode+0x74/0x100 [ 87.341081][ T5529] ? __pfx_f2fs_nfs_get_inode+0x10/0x10 [ 87.346686][ T5529] generic_fh_to_dentry+0x9f/0xf0 [ 87.351851][ T5529] exportfs_decode_fh_raw+0x152/0x5f0 [ 87.357270][ T5529] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 87.363148][ T5529] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 87.369366][ T5529] ? __fget_files+0x29/0x470 [ 87.374025][ T5529] ? __fget_files+0x3f6/0x470 [ 87.378766][ T5529] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 87.384619][ T5529] exportfs_decode_fh+0x3c/0x80 [ 87.389598][ T5529] do_handle_open+0x495/0x650 [ 87.394411][ T5529] ? __pfx_do_handle_open+0x10/0x10 [ 87.399659][ T5529] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 87.406106][ T5529] ? do_syscall_64+0x100/0x230 [ 87.410954][ T5529] ? do_syscall_64+0xb6/0x230 [ 87.415666][ T5529] do_syscall_64+0xf3/0x230 [ 87.420234][ T5529] ? clear_bhb_loop+0x35/0x90 [ 87.425073][ T5529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.431173][ T5529] RIP: 0033:0x7f770d87dca9 [ 87.435663][ T5529] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 87.455390][ T5529] RSP: 002b:00007f770e56e0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 87.463969][ T5529] RAX: ffffffffffffffda RBX: 00007f770d9ac050 RCX: 00007f770d87dca9 [ 87.472150][ T5529] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 87.480237][ T5529] RBP: 00007f770d8c947e R08: 0000000000000000 R09: 0000000000000000 [ 87.488238][ T5529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.496236][ T5529] R13: 000000000000006e R14: 00007f770d9ac050 R15: 00007ffda71d93a8 [ 87.504252][ T5529] [ 87.526214][ T5529] ================================================================== [ 87.534327][ T5529] BUG: KASAN: slab-use-after-free in sanity_check_extent_cache+0x370/0x410 [ 87.542950][ T5529] Read of size 4 at addr ffff88807e971220 by task syz-executor.0/5529 [ 87.551208][ T5529] [ 87.553552][ T5529] CPU: 1 PID: 5529 Comm: syz-executor.0 Not tainted 6.10.0-rc1-syzkaller-00013-g2bfcfd584ff5 #0 [ 87.564066][ T5529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 87.574136][ T5529] Call Trace: [ 87.577523][ T5529] [ 87.580555][ T5529] dump_stack_lvl+0x241/0x360 [ 87.585267][ T5529] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.590669][ T5529] ? __pfx__printk+0x10/0x10 [ 87.595452][ T5529] ? _printk+0xd5/0x120 [ 87.599627][ T5529] ? __virt_addr_valid+0x183/0x520 [ 87.604763][ T5529] ? __virt_addr_valid+0x183/0x520 [ 87.609999][ T5529] print_report+0x169/0x550 [ 87.614537][ T5529] ? __virt_addr_valid+0x183/0x520 [ 87.619674][ T5529] ? __virt_addr_valid+0x183/0x520 [ 87.624809][ T5529] ? __virt_addr_valid+0x44e/0x520 [ 87.629961][ T5529] ? __phys_addr+0xba/0x170 [ 87.634575][ T5529] ? sanity_check_extent_cache+0x370/0x410 [ 87.640400][ T5529] kasan_report+0x143/0x180 [ 87.644931][ T5529] ? sanity_check_extent_cache+0x370/0x410 [ 87.650900][ T5529] sanity_check_extent_cache+0x370/0x410 [ 87.656647][ T5529] f2fs_iget+0x34ee/0x4840 [ 87.661195][ T5529] f2fs_nfs_get_inode+0x74/0x100 [ 87.666264][ T5529] ? __pfx_f2fs_nfs_get_inode+0x10/0x10 [ 87.671837][ T5529] generic_fh_to_dentry+0x9f/0xf0 [ 87.676912][ T5529] exportfs_decode_fh_raw+0x152/0x5f0 [ 87.682407][ T5529] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 87.688242][ T5529] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 87.694283][ T5529] ? __fget_files+0x29/0x470 [ 87.698895][ T5529] ? __fget_files+0x3f6/0x470 [ 87.703600][ T5529] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 87.709525][ T5529] exportfs_decode_fh+0x3c/0x80 [ 87.714498][ T5529] do_handle_open+0x495/0x650 [ 87.719261][ T5529] ? __pfx_do_handle_open+0x10/0x10 [ 87.724491][ T5529] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 87.730850][ T5529] ? do_syscall_64+0x100/0x230 [ 87.735643][ T5529] ? do_syscall_64+0xb6/0x230 [ 87.740434][ T5529] do_syscall_64+0xf3/0x230 [ 87.745136][ T5529] ? clear_bhb_loop+0x35/0x90 [ 87.749872][ T5529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.755982][ T5529] RIP: 0033:0x7f770d87dca9 [ 87.760433][ T5529] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 87.780427][ T5529] RSP: 002b:00007f770e56e0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 87.789138][ T5529] RAX: ffffffffffffffda RBX: 00007f770d9ac050 RCX: 00007f770d87dca9 [ 87.797132][ T5529] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 87.805124][ T5529] RBP: 00007f770d8c947e R08: 0000000000000000 R09: 0000000000000000 [ 87.813205][ T5529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.821288][ T5529] R13: 000000000000006e R14: 00007f770d9ac050 R15: 00007ffda71d93a8 [ 87.829296][ T5529] [ 87.832433][ T5529] [ 87.834772][ T5529] Allocated by task 5495: [ 87.839124][ T5529] kasan_save_track+0x3f/0x80 [ 87.843843][ T5529] __kasan_slab_alloc+0x66/0x80 [ 87.848721][ T5529] kmem_cache_alloc_noprof+0x135/0x2a0 [ 87.854200][ T5529] __grab_extent_tree+0x183/0x400 [ 87.859245][ T5529] f2fs_init_read_extent_tree+0x455/0x910 [ 87.865167][ T5529] f2fs_iget+0x34de/0x4840 [ 87.869612][ T5529] f2fs_nfs_get_inode+0x74/0x100 [ 87.874666][ T5529] generic_fh_to_dentry+0x9f/0xf0 [ 87.879752][ T5529] exportfs_decode_fh_raw+0x152/0x5f0 [ 87.885236][ T5529] exportfs_decode_fh+0x3c/0x80 [ 87.890288][ T5529] do_handle_open+0x495/0x650 [ 87.894987][ T5529] do_syscall_64+0xf3/0x230 [ 87.899541][ T5529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.905457][ T5529] [ 87.907786][ T5529] Freed by task 5495: [ 87.911791][ T5529] kasan_save_track+0x3f/0x80 [ 87.916573][ T5529] kasan_save_free_info+0x40/0x50 [ 87.921623][ T5529] poison_slab_object+0xe0/0x150 [ 87.926594][ T5529] __kasan_slab_free+0x37/0x60 [ 87.931487][ T5529] kmem_cache_free+0x145/0x350 [ 87.936277][ T5529] __destroy_extent_tree+0x307/0x600 [ 87.941586][ T5529] f2fs_destroy_extent_tree+0x17/0x30 [ 87.947154][ T5529] f2fs_evict_inode+0x44d/0x1510 [ 87.952307][ T5529] evict+0x2a8/0x630 [ 87.956234][ T5529] f2fs_iget+0x1a93/0x4840 [ 87.960683][ T5529] f2fs_nfs_get_inode+0x74/0x100 [ 87.965644][ T5529] generic_fh_to_dentry+0x9f/0xf0 [ 87.970778][ T5529] exportfs_decode_fh_raw+0x152/0x5f0 [ 87.976264][ T5529] exportfs_decode_fh+0x3c/0x80 [ 87.981137][ T5529] do_handle_open+0x495/0x650 [ 87.986135][ T5529] do_syscall_64+0xf3/0x230 [ 87.990672][ T5529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.996603][ T5529] [ 87.999020][ T5529] The buggy address belongs to the object at ffff88807e9711a0 [ 87.999020][ T5529] which belongs to the cache f2fs_extent_tree of size 144 [ 88.013694][ T5529] The buggy address is located 128 bytes inside of [ 88.013694][ T5529] freed 144-byte region [ffff88807e9711a0, ffff88807e971230) [ 88.028468][ T5529] [ 88.030901][ T5529] The buggy address belongs to the physical page: [ 88.037337][ T5529] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7e971 [ 88.046144][ T5529] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 88.053292][ T5529] page_type: 0xffffefff(slab) [ 88.058002][ T5529] raw: 00fff00000000000 ffff88801b7bbb40 dead000000000122 0000000000000000 [ 88.066777][ T5529] raw: 0000000000000000 0000000080130013 00000001ffffefff 0000000000000000 [ 88.075454][ T5529] page dumped because: kasan: bad access detected [ 88.082329][ T5529] page_owner tracks the page as allocated [ 88.088054][ T5529] page last allocated via order 0, migratetype Reclaimable, gfp_mask 0x152c50(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 5453, tgid 5451 (syz-executor.0), ts 85606509343, free_ts 84965195405 [ 88.110914][ T5529] post_alloc_hook+0x1f3/0x230 [ 88.115809][ T5529] get_page_from_freelist+0x2e2d/0x2ee0 [ 88.121479][ T5529] __alloc_pages_noprof+0x256/0x6c0 [ 88.126751][ T5529] alloc_slab_page+0x5f/0x120 [ 88.131466][ T5529] allocate_slab+0x5a/0x2e0 [ 88.136001][ T5529] ___slab_alloc+0xcd1/0x14b0 [ 88.140703][ T5529] __slab_alloc+0x58/0xa0 [ 88.145057][ T5529] kmem_cache_alloc_noprof+0x1c1/0x2a0 [ 88.150540][ T5529] __grab_extent_tree+0x183/0x400 [ 88.155589][ T5529] f2fs_init_read_extent_tree+0x455/0x910 [ 88.161419][ T5529] f2fs_iget+0x34de/0x4840 [ 88.165932][ T5529] f2fs_nfs_get_inode+0x74/0x100 [ 88.171079][ T5529] generic_fh_to_dentry+0x9f/0xf0 [ 88.176129][ T5529] exportfs_decode_fh_raw+0x152/0x5f0 [ 88.181612][ T5529] exportfs_decode_fh+0x3c/0x80 [ 88.186719][ T5529] do_handle_open+0x495/0x650 [ 88.191600][ T5529] page last free pid 5448 tgid 5448 stack trace: [ 88.197942][ T5529] free_unref_page+0xd19/0xea0 [ 88.202906][ T5529] __put_partials+0xeb/0x130 [ 88.207541][ T5529] put_cpu_partial+0x17c/0x250 [ 88.212343][ T5529] __slab_free+0x2ea/0x3d0 [ 88.216801][ T5529] qlist_free_all+0x9e/0x140 [ 88.221769][ T5529] kasan_quarantine_reduce+0x14f/0x170 [ 88.227437][ T5529] __kasan_slab_alloc+0x23/0x80 [ 88.232404][ T5529] __kmalloc_node_noprof+0x1d2/0x440 [ 88.237728][ T5529] kvmalloc_node_noprof+0x72/0x190 [ 88.242867][ T5529] seq_read_iter+0x202/0xd60 [ 88.247494][ T5529] proc_reg_read_iter+0x1c3/0x290 [ 88.252543][ T5529] vfs_read+0x9c4/0xbd0 [ 88.256724][ T5529] ksys_read+0x1a0/0x2c0 [ 88.260992][ T5529] do_syscall_64+0xf3/0x230 [ 88.265783][ T5529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.271792][ T5529] [ 88.274235][ T5529] Memory state around the buggy address: [ 88.279993][ T5529] ffff88807e971100: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 88.288157][ T5529] ffff88807e971180: fc fc fc fc fa fb fb fb fb fb fb fb fb fb fb fb [ 88.296482][ T5529] >ffff88807e971200: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 88.305166][ T5529] ^ [ 88.310377][ T5529] ffff88807e971280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 88.318455][ T5529] ffff88807e971300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 88.326541][ T5529] ================================================================== [ 88.344045][ T5529] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 88.351332][ T5529] CPU: 1 PID: 5529 Comm: syz-executor.0 Not tainted 6.10.0-rc1-syzkaller-00013-g2bfcfd584ff5 #0 [ 88.362021][ T5529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 88.372441][ T5529] Call Trace: [ 88.375883][ T5529] [ 88.378902][ T5529] dump_stack_lvl+0x241/0x360 [ 88.383827][ T5529] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.389239][ T5529] ? __pfx__printk+0x10/0x10 [ 88.393958][ T5529] ? preempt_schedule+0xe1/0xf0 [ 88.398932][ T5529] ? vscnprintf+0x5d/0x90 [ 88.403392][ T5529] panic+0x349/0x860 [ 88.407315][ T5529] ? check_panic_on_warn+0x21/0xb0 [ 88.412541][ T5529] ? __pfx_panic+0x10/0x10 [ 88.417349][ T5529] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 88.423455][ T5529] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 88.432437][ T5529] ? print_report+0x502/0x550 [ 88.437255][ T5529] check_panic_on_warn+0x86/0xb0 [ 88.442227][ T5529] ? sanity_check_extent_cache+0x370/0x410 [ 88.448061][ T5529] end_report+0x77/0x160 [ 88.452353][ T5529] kasan_report+0x154/0x180 [ 88.456888][ T5529] ? sanity_check_extent_cache+0x370/0x410 [ 88.463105][ T5529] sanity_check_extent_cache+0x370/0x410 [ 88.469106][ T5529] f2fs_iget+0x34ee/0x4840 [ 88.473593][ T5529] f2fs_nfs_get_inode+0x74/0x100 [ 88.478668][ T5529] ? __pfx_f2fs_nfs_get_inode+0x10/0x10 [ 88.484243][ T5529] generic_fh_to_dentry+0x9f/0xf0 [ 88.489292][ T5529] exportfs_decode_fh_raw+0x152/0x5f0 [ 88.494741][ T5529] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 88.500597][ T5529] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 88.506540][ T5529] ? __fget_files+0x29/0x470 [ 88.511407][ T5529] ? __fget_files+0x3f6/0x470 [ 88.516115][ T5529] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 88.522121][ T5529] exportfs_decode_fh+0x3c/0x80 [ 88.527004][ T5529] do_handle_open+0x495/0x650 [ 88.531811][ T5529] ? __pfx_do_handle_open+0x10/0x10 [ 88.537039][ T5529] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 88.543571][ T5529] ? do_syscall_64+0x100/0x230 [ 88.548362][ T5529] ? do_syscall_64+0xb6/0x230 [ 88.553146][ T5529] do_syscall_64+0xf3/0x230 [ 88.557699][ T5529] ? clear_bhb_loop+0x35/0x90 [ 88.562497][ T5529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.568679][ T5529] RIP: 0033:0x7f770d87dca9 [ 88.573199][ T5529] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 88.592835][ T5529] RSP: 002b:00007f770e56e0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 88.601531][ T5529] RAX: ffffffffffffffda RBX: 00007f770d9ac050 RCX: 00007f770d87dca9 [ 88.609607][ T5529] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 88.617596][ T5529] RBP: 00007f770d8c947e R08: 0000000000000000 R09: 0000000000000000 [ 88.625594][ T5529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.633934][ T5529] R13: 000000000000006e R14: 00007f770d9ac050 R15: 00007ffda71d93a8 [ 88.641943][ T5529] [ 88.645242][ T5529] Kernel Offset: disabled [ 88.649564][ T5529] Rebooting in 86400 seconds..