Warning: Permanently added '10.128.1.174' (ED25519) to the list of known hosts. 2024/04/29 17:18:24 ignoring optional flag "sandboxArg"="0" 2024/04/29 17:18:25 parsed 1 programs 2024/04/29 17:18:26 executed programs: 0 [ 55.274398][ T2846] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 58.519119][ T3226] loop0: detected capacity change from 0 to 40427 [ 58.526297][ T3226] ======================================================= [ 58.526297][ T3226] WARNING: The mand mount option has been deprecated and [ 58.526297][ T3226] and is ignored by this kernel. Remove the mand [ 58.526297][ T3226] option from the mount to silence this warning. [ 58.526297][ T3226] ======================================================= [ 58.566989][ T3226] F2FS-fs (loop0): Found nat_bits in checkpoint [ 58.588155][ T3226] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 58.602768][ T3226] F2FS-fs (loop0): Inconsistent error blkaddr:5634, sit bitmap:0 [ 58.610590][ T3226] CPU: 1 PID: 3226 Comm: syz-executor.0 Not tainted 6.7.0-rc1-syzkaller #0 [ 58.619263][ T3226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 58.629327][ T3226] Call Trace: [ 58.632590][ T3226] [ 58.635513][ T3226] dump_stack_lvl+0xf8/0x260 [ 58.640183][ T3226] ? __pfx_dump_stack_lvl+0x10/0x10 [ 58.645825][ T3226] ? _raw_write_unlock+0x3e/0x50 [ 58.650842][ T3226] ? f2fs_init_read_extent_tree+0x650/0x830 [ 58.656924][ T3226] f2fs_is_valid_blkaddr+0xca3/0x16f0 [ 58.662286][ T3226] ? _raw_spin_unlock+0x28/0x50 [ 58.667327][ T3226] sanity_check_extent_cache+0x15b/0x410 [ 58.673358][ T3226] f2fs_iget+0x2a79/0x3e40 [ 58.677782][ T3226] f2fs_nfs_get_inode+0x60/0xd0 [ 58.682888][ T3226] ? __pfx_f2fs_nfs_get_inode+0x10/0x10 [ 58.688442][ T3226] generic_fh_to_dentry+0x71/0xc0 [ 58.693557][ T3226] exportfs_decode_fh_raw+0x15a/0x4d0 [ 58.698932][ T3226] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 58.704727][ T3226] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 58.710603][ T3226] ? __fget_files+0x271/0x2e0 [ 58.715271][ T3226] ? __fget_files+0x2e/0x2e0 [ 58.720282][ T3226] exportfs_decode_fh+0x9/0x40 [ 58.725030][ T3226] do_handle_open+0x3b8/0x560 [ 58.729681][ T3226] ? __pfx_restore_fpregs_from_fpstate+0x10/0x10 [ 58.735999][ T3226] ? __pfx_do_handle_open+0x10/0x10 [ 58.741171][ T3226] ? switch_fpu_return+0xcd/0x130 [ 58.746275][ T3226] do_syscall_64+0x4d/0xf0 [ 58.750767][ T3226] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 58.756752][ T3226] RIP: 0033:0x7fb98627dea9 [ 58.761261][ T3226] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 58.780857][ T3226] RSP: 002b:00007fb9870910c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 58.789443][ T3226] RAX: ffffffffffffffda RBX: 00007fb9863abf80 RCX: 00007fb98627dea9 [ 58.797651][ T3226] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 58.805714][ T3226] RBP: 00007fb9862ca4a4 R08: 0000000000000000 R09: 0000000000000000 [ 58.813756][ T3226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.821795][ T3226] R13: 0000000000000006 R14: 00007fb9863abf80 R15: 00007fff10eddf68 [ 58.829747][ T3226] [ 58.833876][ T3226] F2FS-fs (loop0): sanity_check_extent_cache: inode (ino=8) extent info [5634, 0, 3] is incorrect, run fsck to fix [ 58.847221][ T3232] F2FS-fs (loop0): Inconsistent error blkaddr:5634, sit bitmap:0 [ 58.855014][ T3232] CPU: 1 PID: 3232 Comm: syz-executor.0 Not tainted 6.7.0-rc1-syzkaller #0 [ 58.863587][ T3232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 58.874237][ T3232] Call Trace: [ 58.877622][ T3232] [ 58.880625][ T3232] dump_stack_lvl+0xf8/0x260 [ 58.885213][ T3232] ? __pfx_dump_stack_lvl+0x10/0x10 [ 58.890491][ T3232] ? _raw_write_unlock+0x28/0x50 [ 58.895416][ T3232] ? f2fs_init_read_extent_tree+0x650/0x830 [ 58.901908][ T3232] f2fs_is_valid_blkaddr+0xca3/0x16f0 [ 58.907363][ T3232] ? _raw_spin_unlock+0x28/0x50 [ 58.912208][ T3232] sanity_check_extent_cache+0x15b/0x410 [ 58.918261][ T3232] f2fs_iget+0x2a79/0x3e40 [ 58.922842][ T3232] f2fs_nfs_get_inode+0x60/0xd0 [ 58.927706][ T3232] ? __pfx_f2fs_nfs_get_inode+0x10/0x10 [ 58.933336][ T3232] generic_fh_to_dentry+0x71/0xc0 [ 58.938444][ T3232] exportfs_decode_fh_raw+0x15a/0x4d0 [ 58.943831][ T3232] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 58.950430][ T3232] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 58.956418][ T3232] ? __fget_files+0x271/0x2e0 [ 58.961299][ T3232] ? __fget_files+0x2e/0x2e0 [ 58.965867][ T3232] exportfs_decode_fh+0x9/0x40 [ 58.971068][ T3232] do_handle_open+0x3b8/0x560 [ 58.975743][ T3232] ? __pfx_do_handle_open+0x10/0x10 [ 58.980922][ T3232] ? fpregs_assert_state_consistent+0x47/0x60 [ 58.986970][ T3232] do_syscall_64+0x4d/0xf0 [ 58.991359][ T3232] ? syscall_exit_to_user_mode+0x2c/0x1e0 [ 58.997138][ T3232] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 59.003093][ T3232] RIP: 0033:0x7fb98627dea9 [ 59.008642][ T3232] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 59.029382][ T3232] RSP: 002b:00007fb9870700c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 59.037791][ T3232] RAX: ffffffffffffffda RBX: 00007fb9863ac050 RCX: 00007fb98627dea9 [ 59.045743][ T3232] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 59.053782][ T3232] RBP: 00007fb9862ca4a4 R08: 0000000000000000 R09: 0000000000000000 [ 59.061816][ T3232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.069945][ T3232] R13: 000000000000006e R14: 00007fb9863ac050 R15: 00007fff10eddf68 [ 59.077897][ T3232] [ 59.081442][ T3232] F2FS-fs (loop0): sanity_check_extent_cache: inode (ino=8) extent info [5634, 0, 3] is incorrect, run fsck to fix [ 59.265523][ T3234] loop0: detected capacity change from 0 to 40427 [ 59.282106][ T3234] F2FS-fs (loop0): Found nat_bits in checkpoint [ 59.302975][ T3234] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 59.312143][ T3234] F2FS-fs (loop0): Inconsistent error blkaddr:5634, sit bitmap:0 [ 59.320436][ T3234] CPU: 1 PID: 3234 Comm: syz-executor.0 Not tainted 6.7.0-rc1-syzkaller #0 [ 59.329196][ T3234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 59.339612][ T3234] Call Trace: [ 59.342914][ T3234] [ 59.345859][ T3234] dump_stack_lvl+0xf8/0x260 [ 59.350641][ T3234] ? __pfx_dump_stack_lvl+0x10/0x10 [ 59.355984][ T3234] ? _raw_write_unlock+0x28/0x50 [ 59.360905][ T3234] ? f2fs_init_read_extent_tree+0x650/0x830 [ 59.366906][ T3234] f2fs_is_valid_blkaddr+0xca3/0x16f0 [ 59.372289][ T3234] ? _raw_spin_unlock+0x28/0x50 [ 59.377221][ T3234] sanity_check_extent_cache+0x15b/0x410 [ 59.382849][ T3234] f2fs_iget+0x2a79/0x3e40 [ 59.387417][ T3234] f2fs_nfs_get_inode+0x60/0xd0 [ 59.392263][ T3234] ? __pfx_f2fs_nfs_get_inode+0x10/0x10 [ 59.397881][ T3234] generic_fh_to_dentry+0x71/0xc0 [ 59.402983][ T3234] exportfs_decode_fh_raw+0x15a/0x4d0 [ 59.408417][ T3234] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 59.414381][ T3234] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 59.420336][ T3234] ? __fget_files+0x271/0x2e0 [ 59.424988][ T3234] ? __fget_files+0x2e/0x2e0 [ 59.429551][ T3234] exportfs_decode_fh+0x9/0x40 [ 59.434287][ T3234] do_handle_open+0x3b8/0x560 [ 59.438937][ T3234] ? __pfx_restore_fpregs_from_fpstate+0x10/0x10 [ 59.445234][ T3234] ? __pfx_do_handle_open+0x10/0x10 [ 59.450409][ T3234] ? switch_fpu_return+0xcd/0x130 [ 59.455407][ T3234] do_syscall_64+0x4d/0xf0 [ 59.459796][ T3234] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 59.465665][ T3234] RIP: 0033:0x7fb98627dea9 [ 59.470152][ T3234] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 59.490475][ T3234] RSP: 002b:00007fb9870910c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 59.499023][ T3234] RAX: ffffffffffffffda RBX: 00007fb9863abf80 RCX: 00007fb98627dea9 [ 59.506996][ T3234] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 59.514950][ T3234] RBP: 00007fb9862ca4a4 R08: 0000000000000000 R09: 0000000000000000 [ 59.522906][ T3234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.530876][ T3234] R13: 0000000000000006 R14: 00007fb9863abf80 R15: 00007fff10eddf68 [ 59.538826][ T3234] [ 59.544227][ T3234] F2FS-fs (loop0): sanity_check_extent_cache: inode (ino=8) extent info [5634, 0, 3] is incorrect, run fsck to fix [ 59.556953][ T3239] F2FS-fs (loop0): Inconsistent error blkaddr:5634, sit bitmap:0 [ 59.565041][ T3239] CPU: 1 PID: 3239 Comm: syz-executor.0 Not tainted 6.7.0-rc1-syzkaller #0 [ 59.573620][ T3239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 59.583788][ T3239] Call Trace: [ 59.587160][ T3239] [ 59.590162][ T3239] dump_stack_lvl+0xf8/0x260 [ 59.594742][ T3239] ? __pfx_dump_stack_lvl+0x10/0x10 [ 59.599964][ T3239] ? _raw_write_unlock+0x28/0x50 [ 59.604963][ T3239] ? f2fs_init_read_extent_tree+0x650/0x830 [ 59.610842][ T3239] f2fs_is_valid_blkaddr+0xca3/0x16f0 [ 59.616206][ T3239] ? _raw_spin_unlock+0x28/0x50 [ 59.621220][ T3239] sanity_check_extent_cache+0x15b/0x410 [ 59.626937][ T3239] f2fs_iget+0x2a79/0x3e40 [ 59.631354][ T3239] f2fs_nfs_get_inode+0x60/0xd0 [ 59.636281][ T3239] ? __pfx_f2fs_nfs_get_inode+0x10/0x10 [ 59.641906][ T3239] generic_fh_to_dentry+0x71/0xc0 [ 59.646934][ T3239] exportfs_decode_fh_raw+0x15a/0x4d0 [ 59.652409][ T3239] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 59.658383][ T3239] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 59.664294][ T3239] ? __fget_files+0x271/0x2e0 [ 59.669053][ T3239] ? __fget_files+0x2e/0x2e0 [ 59.674924][ T3239] exportfs_decode_fh+0x9/0x40 [ 59.679755][ T3239] do_handle_open+0x3b8/0x560 [ 59.684503][ T3239] ? __pfx_do_handle_open+0x10/0x10 [ 59.689697][ T3239] ? fpregs_assert_state_consistent+0x47/0x60 [ 59.695778][ T3239] do_syscall_64+0x4d/0xf0 [ 59.700173][ T3239] ? syscall_exit_to_user_mode+0x2c/0x1e0 [ 59.705864][ T3239] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 59.711938][ T3239] RIP: 0033:0x7fb98627dea9 [ 59.716336][ T3239] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 59.735945][ T3239] RSP: 002b:00007fb9870700c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 59.744358][ T3239] RAX: ffffffffffffffda RBX: 00007fb9863ac050 RCX: 00007fb98627dea9 [ 59.752306][ T3239] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 59.760382][ T3239] RBP: 00007fb9862ca4a4 R08: 0000000000000000 R09: 0000000000000000 [ 59.768442][ T3239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.777064][ T3239] R13: 000000000000006e R14: 00007fb9863ac050 R15: 00007fff10eddf68 [ 59.785263][ T3239] [ 59.788684][ T3239] ================================================================== [ 59.796749][ T3239] BUG: KASAN: slab-use-after-free in sanity_check_extent_cache+0x38b/0x410 [ 59.805410][ T3239] Read of size 4 at addr ffff888064d9a150 by task syz-executor.0/3239 [ 59.814499][ T3239] [ 59.816817][ T3239] CPU: 1 PID: 3239 Comm: syz-executor.0 Not tainted 6.7.0-rc1-syzkaller #0 [ 59.825973][ T3239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 59.836084][ T3239] Call Trace: [ 59.839343][ T3239] [ 59.842334][ T3239] dump_stack_lvl+0xf8/0x260 [ 59.847168][ T3239] ? __pfx_dump_stack_lvl+0x10/0x10 [ 59.852359][ T3239] ? __pfx__printk+0x10/0x10 [ 59.856936][ T3239] ? _printk+0xce/0x120 [ 59.861078][ T3239] ? __printk_cpu_sync_put+0x4c/0x60 [ 59.866421][ T3239] print_report+0x167/0x540 [ 59.871000][ T3239] ? __pfx_dump_stack_lvl+0x10/0x10 [ 59.876622][ T3239] ? sanity_check_extent_cache+0x38b/0x410 [ 59.882402][ T3239] kasan_report+0x142/0x180 [ 59.886962][ T3239] ? sanity_check_extent_cache+0x38b/0x410 [ 59.892910][ T3239] sanity_check_extent_cache+0x38b/0x410 [ 59.898986][ T3239] f2fs_iget+0x2a79/0x3e40 [ 59.903383][ T3239] f2fs_nfs_get_inode+0x60/0xd0 [ 59.908366][ T3239] ? __pfx_f2fs_nfs_get_inode+0x10/0x10 [ 59.913988][ T3239] generic_fh_to_dentry+0x71/0xc0 [ 59.919077][ T3239] exportfs_decode_fh_raw+0x15a/0x4d0 [ 59.924784][ T3239] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 59.930607][ T3239] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 59.936653][ T3239] ? __fget_files+0x271/0x2e0 [ 59.941337][ T3239] ? __fget_files+0x2e/0x2e0 [ 59.945913][ T3239] exportfs_decode_fh+0x9/0x40 [ 59.950677][ T3239] do_handle_open+0x3b8/0x560 [ 59.955407][ T3239] ? __pfx_do_handle_open+0x10/0x10 [ 59.960569][ T3239] ? fpregs_assert_state_consistent+0x47/0x60 [ 59.966807][ T3239] do_syscall_64+0x4d/0xf0 [ 59.971212][ T3239] ? syscall_exit_to_user_mode+0x2c/0x1e0 [ 59.976984][ T3239] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 59.982946][ T3239] RIP: 0033:0x7fb98627dea9 [ 59.987354][ T3239] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 60.007386][ T3239] RSP: 002b:00007fb9870700c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 60.016053][ T3239] RAX: ffffffffffffffda RBX: 00007fb9863ac050 RCX: 00007fb98627dea9 [ 60.024112][ T3239] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 60.032060][ T3239] RBP: 00007fb9862ca4a4 R08: 0000000000000000 R09: 0000000000000000 [ 60.040279][ T3239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.048414][ T3239] R13: 000000000000006e R14: 00007fb9863ac050 R15: 00007fff10eddf68 [ 60.056453][ T3239] [ 60.059486][ T3239] [ 60.061833][ T3239] Allocated by task 3234: [ 60.066233][ T3239] kasan_set_track+0x4f/0x80 [ 60.070815][ T3239] __kasan_slab_alloc+0x66/0x80 [ 60.075662][ T3239] slab_post_alloc_hook+0x67/0x3c0 [ 60.080860][ T3239] kmem_cache_alloc+0x1a0/0x2f0 [ 60.085751][ T3239] __grab_extent_tree+0x1b9/0x3a0 [ 60.090766][ T3239] f2fs_init_read_extent_tree+0x3ab/0x830 [ 60.096473][ T3239] f2fs_iget+0x2a69/0x3e40 [ 60.100861][ T3239] f2fs_nfs_get_inode+0x60/0xd0 [ 60.105698][ T3239] generic_fh_to_dentry+0x71/0xc0 [ 60.110723][ T3239] exportfs_decode_fh_raw+0x15a/0x4d0 [ 60.116078][ T3239] exportfs_decode_fh+0x9/0x40 [ 60.120919][ T3239] do_handle_open+0x3b8/0x560 [ 60.125688][ T3239] do_syscall_64+0x4d/0xf0 [ 60.130199][ T3239] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 60.136076][ T3239] [ 60.138472][ T3239] Freed by task 3234: [ 60.142507][ T3239] kasan_set_track+0x4f/0x80 [ 60.147086][ T3239] kasan_save_free_info+0x28/0x40 [ 60.152181][ T3239] ____kasan_slab_free+0x122/0x1f0 [ 60.157359][ T3239] kmem_cache_free+0x2f0/0x520 [ 60.162098][ T3239] __destroy_extent_tree+0x3dc/0x5c0 [ 60.167786][ T3239] f2fs_destroy_extent_tree+0xf/0x20 [ 60.173212][ T3239] f2fs_evict_inode+0x346/0x1180 [ 60.178207][ T3239] evict+0x264/0x650 [ 60.182069][ T3239] f2fs_iget+0x1dda/0x3e40 [ 60.186744][ T3239] f2fs_nfs_get_inode+0x60/0xd0 [ 60.191655][ T3239] generic_fh_to_dentry+0x71/0xc0 [ 60.196646][ T3239] exportfs_decode_fh_raw+0x15a/0x4d0 [ 60.201984][ T3239] exportfs_decode_fh+0x9/0x40 [ 60.206716][ T3239] do_handle_open+0x3b8/0x560 [ 60.211367][ T3239] do_syscall_64+0x4d/0xf0 [ 60.215925][ T3239] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 60.221889][ T3239] [ 60.224280][ T3239] The buggy address belongs to the object at ffff888064d9a0d0 [ 60.224280][ T3239] which belongs to the cache f2fs_extent_tree of size 144 [ 60.238755][ T3239] The buggy address is located 128 bytes inside of [ 60.238755][ T3239] freed 144-byte region [ffff888064d9a0d0, ffff888064d9a160) [ 60.252537][ T3239] [ 60.254855][ T3239] The buggy address belongs to the physical page: [ 60.261345][ T3239] page:ffffea0001936680 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x64d9a [ 60.272686][ T3239] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 60.280491][ T3239] page_type: 0xffffffff() [ 60.284896][ T3239] raw: 00fff00000000800 ffff88801129cb40 dead000000000122 0000000000000000 [ 60.293551][ T3239] raw: 0000000000000000 0000000080130013 00000001ffffffff 0000000000000000 [ 60.302101][ T3239] page dumped because: kasan: bad access detected [ 60.308527][ T3239] page_owner tracks the page as allocated [ 60.314241][ T3239] page last allocated via order 0, migratetype Reclaimable, gfp_mask 0x112c50(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 3232, tgid 3225 (syz-executor.0), ts 58847196892, free_ts 6660670484 [ 60.336627][ T3239] post_alloc_hook+0x10f/0x130 [ 60.341370][ T3239] get_page_from_freelist+0x345c/0x3600 [ 60.346967][ T3239] __alloc_pages+0x255/0x650 [ 60.351543][ T3239] alloc_pages_mpol+0x27f/0x4d0 [ 60.356394][ T3239] alloc_slab_page+0x6a/0x170 [ 60.361164][ T3239] new_slab+0x70/0x270 [ 60.365234][ T3239] ___slab_alloc+0x94b/0xee0 [ 60.369810][ T3239] kmem_cache_alloc+0x1e5/0x2f0 [ 60.374663][ T3239] __grab_extent_tree+0x1b9/0x3a0 [ 60.379659][ T3239] f2fs_init_read_extent_tree+0x3ab/0x830 [ 60.385346][ T3239] f2fs_iget+0x2a69/0x3e40 [ 60.389748][ T3239] f2fs_nfs_get_inode+0x60/0xd0 [ 60.394945][ T3239] generic_fh_to_dentry+0x71/0xc0 [ 60.399977][ T3239] exportfs_decode_fh_raw+0x15a/0x4d0 [ 60.405600][ T3239] exportfs_decode_fh+0x9/0x40 [ 60.410577][ T3239] do_handle_open+0x3b8/0x560 [ 60.416064][ T3239] page last free stack trace: [ 60.421519][ T3239] free_unref_page_prepare+0x7fd/0x910 [ 60.426989][ T3239] free_unref_page+0x37/0x3a0 [ 60.431934][ T3239] free_contig_range+0x91/0x140 [ 60.436872][ T3239] destroy_args+0x72/0x6e0 [ 60.441371][ T3239] debug_vm_pgtable+0x3c2/0x5e0 [ 60.446277][ T3239] do_one_initcall+0x196/0x4d0 [ 60.451011][ T3239] do_initcall_level+0x11e/0x1e0 [ 60.456112][ T3239] do_initcalls+0x3e/0x70 [ 60.460417][ T3239] kernel_init_freeable+0x35f/0x4c0 [ 60.465613][ T3239] kernel_init+0x18/0x1a0 [ 60.470469][ T3239] ret_from_fork+0x32/0x60 [ 60.474976][ T3239] ret_from_fork_asm+0x1b/0x30 [ 60.479764][ T3239] [ 60.482169][ T3239] Memory state around the buggy address: [ 60.487855][ T3239] ffff888064d9a000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 60.495898][ T3239] ffff888064d9a080: fb fb fc fc fc fc fc fc fc fc fa fb fb fb fb fb [ 60.504032][ T3239] >ffff888064d9a100: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 60.512260][ T3239] ^ [ 60.518944][ T3239] ffff888064d9a180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 60.527062][ T3239] ffff888064d9a200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 60.535111][ T3239] ================================================================== [ 60.544824][ T3239] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 60.552534][ T3239] Kernel Offset: disabled [ 60.556842][ T3239] Rebooting in 86400 seconds..