Warning: Permanently added '10.128.0.113' (ED25519) to the list of known hosts. executing program executing program executing program executing program executing program [ 42.513322][ T4035] loop0: detected capacity change from 0 to 40427 [ 42.527431][ T4035] ======================================================= [ 42.527431][ T4035] WARNING: The mand mount option has been deprecated and [ 42.527431][ T4035] and is ignored by this kernel. Remove the mand [ 42.527431][ T4035] option from the mount to silence this warning. [ 42.527431][ T4035] ======================================================= [ 42.614582][ T4029] loop1: detected capacity change from 0 to 40427 [ 42.641011][ T4035] F2FS-fs (loop0): Found nat_bits in checkpoint [ 42.656858][ T4035] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 42.659092][ T4029] F2FS-fs (loop1): Found nat_bits in checkpoint [ 42.669492][ T4035] F2FS-fs (loop0): Inconsistent error blkaddr:5634, sit bitmap:0 [ 42.671569][ T4035] CPU: 1 PID: 4035 Comm: syz-executor966 Not tainted 5.15.181-syzkaller #0 [ 42.673733][ T4035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 42.676501][ T4035] Call trace: [ 42.677350][ T4035] dump_backtrace+0x0/0x43c [ 42.678580][ T4035] show_stack+0x2c/0x3c [ 42.679671][ T4035] __dump_stack+0x30/0x40 [ 42.680846][ T4035] dump_stack_lvl+0xf8/0x160 [ 42.682055][ T4035] dump_stack+0x1c/0x5c [ 42.683185][ T4035] f2fs_is_valid_blkaddr+0xa00/0xf80 [ 42.684630][ T4035] f2fs_iget+0x1a74/0x5170 [ 42.685770][ T4035] f2fs_nfs_get_inode+0x80/0x118 [ 42.687143][ T4035] generic_fh_to_dentry+0x9c/0x104 [ 42.688479][ T4035] f2fs_fh_to_dentry+0x44/0x58 [ 42.689790][ T4035] exportfs_decode_fh_raw+0x10c/0x49c [ 42.691244][ T4035] exportfs_decode_fh+0x50/0x80 [ 42.692556][ T4035] do_handle_open+0x514/0x8e8 [ 42.693834][ T4035] __arm64_sys_open_by_handle_at+0x80/0x94 [ 42.695405][ T4035] invoke_syscall+0x98/0x2b8 [ 42.696622][ T4035] el0_svc_common+0x138/0x258 [ 42.697855][ T4035] do_el0_svc+0x58/0x14c [ 42.699006][ T4035] el0_svc+0x78/0x1e0 [ 42.700103][ T4035] el0t_64_sync_handler+0xcc/0xe4 [ 42.701444][ T4035] el0t_64_sync+0x1a0/0x1a4 [ 42.704621][ T4029] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 42.709155][ T4029] F2FS-fs (loop1): Inconsistent error blkaddr:5634, sit bitmap:0 [ 42.711313][ T4029] CPU: 0 PID: 4029 Comm: syz-executor966 Not tainted 5.15.181-syzkaller #0 [ 42.713638][ T4029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 42.716440][ T4029] Call trace: [ 42.717328][ T4029] dump_backtrace+0x0/0x43c [ 42.718499][ T4029] show_stack+0x2c/0x3c [ 42.719643][ T4029] __dump_stack+0x30/0x40 [ 42.720822][ T4029] dump_stack_lvl+0xf8/0x160 [ 42.722083][ T4029] dump_stack+0x1c/0x5c [ 42.723198][ T4029] f2fs_is_valid_blkaddr+0xa00/0xf80 [ 42.724613][ T4029] f2fs_iget+0x1a74/0x5170 [ 42.725824][ T4029] f2fs_nfs_get_inode+0x80/0x118 [ 42.727129][ T4029] generic_fh_to_dentry+0x9c/0x104 [ 42.728489][ T4029] f2fs_fh_to_dentry+0x44/0x58 [ 42.729774][ T4029] exportfs_decode_fh_raw+0x10c/0x49c [ 42.731260][ T4029] exportfs_decode_fh+0x50/0x80 [ 42.732544][ T4029] do_handle_open+0x514/0x8e8 [ 42.733827][ T4029] __arm64_sys_open_by_handle_at+0x80/0x94 [ 42.735400][ T4029] invoke_syscall+0x98/0x2b8 [ 42.736651][ T4029] el0_svc_common+0x138/0x258 [ 42.737938][ T4029] do_el0_svc+0x58/0x14c [ 42.739079][ T4029] el0_svc+0x78/0x1e0 [ 42.740152][ T4029] el0t_64_sync_handler+0xcc/0xe4 [ 42.741567][ T4029] el0t_64_sync+0x1a0/0x1a4 [ 42.745203][ T4035] F2FS-fs (loop0): sanity_check_inode: inode (ino=8) extent info [5634, 0, 3] is incorrect, run fsck to fix [ 42.759316][ T4046] F2FS-fs (loop0): Inconsistent error blkaddr:5634, sit bitmap:0 [ 42.761435][ T4046] CPU: 0 PID: 4046 Comm: syz-executor966 Not tainted 5.15.181-syzkaller #0 [ 42.763697][ T4046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 42.766437][ T4046] Call trace: [ 42.767303][ T4046] dump_backtrace+0x0/0x43c [ 42.768526][ T4046] show_stack+0x2c/0x3c [ 42.769611][ T4046] __dump_stack+0x30/0x40 [ 42.770797][ T4046] dump_stack_lvl+0xf8/0x160 [ 42.772084][ T4046] dump_stack+0x1c/0x5c [ 42.773222][ T4046] f2fs_is_valid_blkaddr+0xa00/0xf80 [ 42.774644][ T4046] f2fs_iget+0x1a74/0x5170 [ 42.775882][ T4046] f2fs_nfs_get_inode+0x80/0x118 [ 42.777271][ T4046] generic_fh_to_dentry+0x9c/0x104 [ 42.778647][ T4046] f2fs_fh_to_dentry+0x44/0x58 [ 42.779967][ T4046] exportfs_decode_fh_raw+0x10c/0x49c [ 42.781431][ T4046] exportfs_decode_fh+0x50/0x80 [ 42.782733][ T4046] do_handle_open+0x514/0x8e8 [ 42.784073][ T4046] __arm64_sys_open_by_handle_at+0x80/0x94 [ 42.785670][ T4046] invoke_syscall+0x98/0x2b8 [ 42.786942][ T4046] el0_svc_common+0x138/0x258 [ 42.788204][ T4046] do_el0_svc+0x58/0x14c [ 42.788602][ T4036] loop3: detected capacity change from 0 to 40427 [ 42.789387][ T4046] el0_svc+0x78/0x1e0 [ 42.792136][ T4046] el0t_64_sync_handler+0xcc/0xe4 [ 42.793506][ T4046] el0t_64_sync+0x1a0/0x1a4 [ 42.814728][ T4029] F2FS-fs (loop1): sanity_check_inode: inode (ino=8) extent info [5634, 0, 3] is incorrect, run fsck to fix [ 42.818544][ T4047] F2FS-fs (loop1): Inconsistent error blkaddr:5634, sit bitmap:0 [ 42.820616][ T4047] CPU: 1 PID: 4047 Comm: syz-executor966 Not tainted 5.15.181-syzkaller #0 [ 42.822848][ T4047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 42.825218][ T4028] loop4: detected capacity change from 0 to 40427 [ 42.825442][ T4047] Call trace: [ 42.828021][ T4047] dump_backtrace+0x0/0x43c [ 42.829233][ T4047] show_stack+0x2c/0x3c [ 42.830361][ T4047] __dump_stack+0x30/0x40 [ 42.831556][ T4047] dump_stack_lvl+0xf8/0x160 [ 42.832824][ T4047] dump_stack+0x1c/0x5c [ 42.833970][ T4047] f2fs_is_valid_blkaddr+0xa00/0xf80 [ 42.835396][ T4047] f2fs_iget+0x1a74/0x5170 [ 42.836609][ T4047] f2fs_nfs_get_inode+0x80/0x118 [ 42.837924][ T4047] generic_fh_to_dentry+0x9c/0x104 [ 42.839314][ T4047] f2fs_fh_to_dentry+0x44/0x58 [ 42.839918][ T4034] loop2: detected capacity change from 0 to 40427 [ 42.840581][ T4047] exportfs_decode_fh_raw+0x10c/0x49c [ 42.840596][ T4047] exportfs_decode_fh+0x50/0x80 [ 42.840604][ T4047] do_handle_open+0x514/0x8e8 [ 42.840615][ T4047] __arm64_sys_open_by_handle_at+0x80/0x94 [ 42.847903][ T4047] invoke_syscall+0x98/0x2b8 [ 42.849172][ T4047] el0_svc_common+0x138/0x258 [ 42.850411][ T4047] do_el0_svc+0x58/0x14c [ 42.851544][ T4047] el0_svc+0x78/0x1e0 [ 42.851653][ T4046] F2FS-fs (loop0): sanity_check_inode: inode (ino=8) extent info [5634, 0, 3] is incorrect, run fsck to fix [ 42.852579][ T4047] el0t_64_sync_handler+0xcc/0xe4 [ 42.852594][ T4047] el0t_64_sync+0x1a0/0x1a4 [ 42.857069][ T4036] F2FS-fs (loop3): Found nat_bits in checkpoint [ 42.872995][ T4047] ================================================================== [ 42.875200][ T4047] BUG: KASAN: use-after-free in f2fs_iget+0x4188/0x5170 [ 42.876995][ T4047] Read of size 4 at addr ffff0000de7e5028 by task syz-executor966/4047 [ 42.879209][ T4047] [ 42.879797][ T4047] CPU: 1 PID: 4047 Comm: syz-executor966 Not tainted 5.15.181-syzkaller #0 executing program [ 42.882139][ T4047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 42.884772][ T4047] Call trace: [ 42.885617][ T4047] dump_backtrace+0x0/0x43c [ 42.886853][ T4047] show_stack+0x2c/0x3c [ 42.887927][ T4047] __dump_stack+0x30/0x40 [ 42.889103][ T4047] dump_stack_lvl+0xf8/0x160 [ 42.890345][ T4047] print_address_description+0x78/0x30c [ 42.891776][ T4047] kasan_report+0xec/0x15c [ 42.892977][ T4047] __asan_report_load4_noabort+0x44/0x50 [ 42.894495][ T4047] f2fs_iget+0x4188/0x5170 [ 42.895683][ T4047] f2fs_nfs_get_inode+0x80/0x118 [ 42.897019][ T4047] generic_fh_to_dentry+0x9c/0x104 [ 42.898384][ T4047] f2fs_fh_to_dentry+0x44/0x58 [ 42.899667][ T4047] exportfs_decode_fh_raw+0x10c/0x49c [ 42.901106][ T4047] exportfs_decode_fh+0x50/0x80 [ 42.902348][ T4047] do_handle_open+0x514/0x8e8 [ 42.903572][ T4047] __arm64_sys_open_by_handle_at+0x80/0x94 [ 42.905118][ T4047] invoke_syscall+0x98/0x2b8 [ 42.906322][ T4047] el0_svc_common+0x138/0x258 [ 42.907560][ T4047] do_el0_svc+0x58/0x14c [ 42.908680][ T4047] el0_svc+0x78/0x1e0 [ 42.909721][ T4047] el0t_64_sync_handler+0xcc/0xe4 [ 42.911056][ T4047] el0t_64_sync+0x1a0/0x1a4 [ 42.912317][ T4047] [ 42.912909][ T4047] Allocated by task 4029: [ 42.914070][ T4047] __kasan_slab_alloc+0x8c/0xcc [ 42.915368][ T4047] slab_post_alloc_hook+0x74/0x408 [ 42.916692][ T4047] kmem_cache_alloc+0x1e0/0x3e4 [ 42.918010][ T4047] f2fs_init_extent_tree+0x43c/0xaac [ 42.919471][ T4047] f2fs_iget+0x10c4/0x5170 [ 42.920670][ T4047] f2fs_nfs_get_inode+0x80/0x118 [ 42.922004][ T4047] generic_fh_to_dentry+0x9c/0x104 [ 42.923365][ T4047] f2fs_fh_to_dentry+0x44/0x58 [ 42.924594][ T4047] exportfs_decode_fh_raw+0x10c/0x49c [ 42.926077][ T4047] exportfs_decode_fh+0x50/0x80 [ 42.927458][ T4047] do_handle_open+0x514/0x8e8 [ 42.928729][ T4047] __arm64_sys_open_by_handle_at+0x80/0x94 [ 42.930291][ T4047] invoke_syscall+0x98/0x2b8 [ 42.931506][ T4047] el0_svc_common+0x138/0x258 [ 42.932730][ T4047] do_el0_svc+0x58/0x14c [ 42.933919][ T4047] el0_svc+0x78/0x1e0 [ 42.934931][ T4047] el0t_64_sync_handler+0xcc/0xe4 [ 42.936290][ T4047] el0t_64_sync+0x1a0/0x1a4 [ 42.937522][ T4047] [ 42.938107][ T4047] Freed by task 4029: [ 42.939161][ T4047] kasan_set_track+0x4c/0x84 [ 42.940403][ T4047] kasan_set_free_info+0x28/0x4c [ 42.941729][ T4047] ____kasan_slab_free+0x118/0x164 [ 42.943081][ T4047] __kasan_slab_free+0x18/0x28 [ 42.944347][ T4047] slab_free_freelist_hook+0x128/0x1e8 [ 42.945776][ T4047] kmem_cache_free+0xdc/0x3b4 [ 42.947071][ T4047] f2fs_destroy_extent_tree+0x2d0/0x688 [ 42.948592][ T4047] f2fs_evict_inode+0x32c/0x1520 [ 42.949923][ T4047] evict+0x3c8/0x810 [ 42.950966][ T4047] iput+0x6c4/0x77c [ 42.952003][ T4047] iget_failed+0x148/0x194 [ 42.953233][ T4047] f2fs_iget+0x58c/0x5170 [ 42.953869][ T4036] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 42.954389][ T4047] f2fs_nfs_get_inode+0x80/0x118 [ 42.957746][ T4047] generic_fh_to_dentry+0x9c/0x104 [ 42.959098][ T4047] f2fs_fh_to_dentry+0x44/0x58 [ 42.960392][ T4047] exportfs_decode_fh_raw+0x10c/0x49c [ 42.961793][ T4047] exportfs_decode_fh+0x50/0x80 [ 42.963077][ T4047] do_handle_open+0x514/0x8e8 [ 42.964324][ T4047] __arm64_sys_open_by_handle_at+0x80/0x94 [ 42.965453][ T4036] F2FS-fs (loop3): Inconsistent error blkaddr:5634, sit bitmap:0 [ 42.965883][ T4047] invoke_syscall+0x98/0x2b8 [ 42.965897][ T4047] el0_svc_common+0x138/0x258 [ 42.965907][ T4047] do_el0_svc+0x58/0x14c [ 42.965916][ T4047] el0_svc+0x78/0x1e0 [ 42.972701][ T4047] el0t_64_sync_handler+0xcc/0xe4 [ 42.972769][ T4036] CPU: 0 PID: 4036 Comm: syz-executor966 Not tainted 5.15.181-syzkaller #0 [ 42.974066][ T4047] el0t_64_sync+0x1a0/0x1a4 [ 42.976454][ T4036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 42.977633][ T4047] [ 42.977639][ T4047] The buggy address belongs to the object at ffff0000de7e5000 [ 42.977639][ T4047] which belongs to the cache f2fs_extent_tree of size 136 [ 42.980420][ T4036] Call trace: [ 42.981018][ T4047] The buggy address is located 40 bytes inside of [ 42.981018][ T4047] 136-byte region [ffff0000de7e5000, ffff0000de7e5088) [ 42.984945][ T4036] dump_backtrace+0x0/0x43c [ 42.985828][ T4047] The buggy address belongs to the page: [ 42.989360][ T4036] show_stack+0x2c/0x3c [ 42.990527][ T4047] page:000000005ed5591e refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11e7e5 [ 42.992028][ T4036] __dump_stack+0x30/0x40 [ 42.993122][ T4047] flags: 0x5ffc00000000200(slab|node=0|zone=2|lastcpupid=0x7ff) [ 42.995832][ T4036] dump_stack_lvl+0xf8/0x160 [ 42.996978][ T4047] raw: 05ffc00000000200 0000000000000000 dead000000000122 ffff0000c6983c80 [ 42.999021][ T4036] dump_stack+0x1c/0x5c [ 43.000232][ T4047] raw: 0000000000000000 0000000080140014 00000001ffffffff 0000000000000000 [ 43.002572][ T4036] f2fs_is_valid_blkaddr+0xa00/0xf80 [ 43.003700][ T4047] page dumped because: kasan: bad access detected [ 43.006030][ T4036] f2fs_iget+0x1a74/0x5170 [ 43.007427][ T4047] [ 43.009130][ T4036] f2fs_nfs_get_inode+0x80/0x118 [ 43.010303][ T4047] Memory state around the buggy address: [ 43.010891][ T4036] generic_fh_to_dentry+0x9c/0x104 [ 43.012211][ T4047] ffff0000de7e4f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 43.013703][ T4036] f2fs_fh_to_dentry+0x44/0x58 [ 43.015047][ T4047] ffff0000de7e4f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 43.017281][ T4036] exportfs_decode_fh_raw+0x10c/0x49c [ 43.018502][ T4047] >ffff0000de7e5000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 43.020663][ T4036] exportfs_decode_fh+0x50/0x80 [ 43.022067][ T4047] ^ [ 43.024214][ T4036] do_handle_open+0x514/0x8e8 [ 43.025507][ T4047] ffff0000de7e5080: fb fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb [ 43.026919][ T4036] __arm64_sys_open_by_handle_at+0x80/0x94 [ 43.028219][ T4047] ffff0000de7e5100: fb fb fb fb fb fb fb fb fb fb fc fc fc fc fc fc [ 43.030341][ T4036] invoke_syscall+0x98/0x2b8 [ 43.031865][ T4047] ================================================================== [ 43.034054][ T4036] el0_svc_common+0x138/0x258 [ 43.035249][ T4047] Disabling lock debugging due to kernel taint [ 43.037493][ T4036] do_el0_svc+0x58/0x14c [ 43.038935][ T4047] F2FS-fs (loop1): sanity_check_inode: inode (ino=8) extent info [5634, 0, 3] is incorrect, run fsck to fix [ 43.040349][ T4036] el0_svc+0x78/0x1e0 [ 43.041565][ T4047] ================================================================== [ 43.044749][ T4036] el0t_64_sync_handler+0xcc/0xe4 [ 43.045731][ T4047] BUG: KASAN: double-free or invalid-free in kmem_cache_free+0xdc/0x3b4 [ 43.047880][ T4036] el0t_64_sync+0x1a0/0x1a4 [ 43.049212][ T4047] [ 43.053217][ T4047] CPU: 1 PID: 4047 Comm: syz-executor966 Tainted: G B 5.15.181-syzkaller #0 [ 43.055852][ T4047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 43.058559][ T4047] Call trace: [ 43.059395][ T4047] dump_backtrace+0x0/0x43c [ 43.060597][ T4047] show_stack+0x2c/0x3c [ 43.061692][ T4047] __dump_stack+0x30/0x40 [ 43.062826][ T4047] dump_stack_lvl+0xf8/0x160 [ 43.064023][ T4047] print_address_description+0x78/0x30c [ 43.065558][ T4047] kasan_report_invalid_free+0x4c/0x7c [ 43.067054][ T4047] ____kasan_slab_free+0x134/0x164 [ 43.068470][ T4047] __kasan_slab_free+0x18/0x28 [ 43.069722][ T4047] slab_free_freelist_hook+0x128/0x1e8 [ 43.071221][ T4047] kmem_cache_free+0xdc/0x3b4 [ 43.072527][ T4047] f2fs_destroy_extent_tree+0x2d0/0x688 [ 43.074057][ T4047] f2fs_evict_inode+0x32c/0x1520 [ 43.075441][ T4047] evict+0x3c8/0x810 [ 43.076513][ T4047] iput+0x6c4/0x77c [ 43.077524][ T4047] iget_failed+0x148/0x194 [ 43.078754][ T4047] f2fs_iget+0x58c/0x5170 [ 43.079958][ T4047] f2fs_nfs_get_inode+0x80/0x118 [ 43.081293][ T4047] generic_fh_to_dentry+0x9c/0x104 [ 43.082621][ T4047] f2fs_fh_to_dentry+0x44/0x58 [ 43.084009][ T4047] exportfs_decode_fh_raw+0x10c/0x49c [ 43.085538][ T4047] exportfs_decode_fh+0x50/0x80 [ 43.086866][ T4047] do_handle_open+0x514/0x8e8 [ 43.088216][ T4047] __arm64_sys_open_by_handle_at+0x80/0x94 [ 43.089853][ T4047] invoke_syscall+0x98/0x2b8 [ 43.091130][ T4047] el0_svc_common+0x138/0x258 [ 43.092453][ T4047] do_el0_svc+0x58/0x14c [ 43.093619][ T4047] el0_svc+0x78/0x1e0 [ 43.094711][ T4047] el0t_64_sync_handler+0xcc/0xe4 [ 43.096074][ T4047] el0t_64_sync+0x1a0/0x1a4 [ 43.097314][ T4047] [ 43.097945][ T4047] Allocated by task 4029: [ 43.099190][ T4047] __kasan_slab_alloc+0x8c/0xcc [ 43.100555][ T4047] slab_post_alloc_hook+0x74/0x408 [ 43.101944][ T4047] kmem_cache_alloc+0x1e0/0x3e4 [ 43.103440][ T4047] f2fs_init_extent_tree+0x43c/0xaac [ 43.104910][ T4047] f2fs_iget+0x10c4/0x5170 [ 43.106079][ T4047] f2fs_nfs_get_inode+0x80/0x118 [ 43.107406][ T4047] generic_fh_to_dentry+0x9c/0x104 [ 43.108866][ T4047] f2fs_fh_to_dentry+0x44/0x58 [ 43.110145][ T4047] exportfs_decode_fh_raw+0x10c/0x49c [ 43.111618][ T4047] exportfs_decode_fh+0x50/0x80 [ 43.112873][ T4047] do_handle_open+0x514/0x8e8 [ 43.114185][ T4047] __arm64_sys_open_by_handle_at+0x80/0x94 [ 43.115747][ T4047] invoke_syscall+0x98/0x2b8 [ 43.117038][ T4047] el0_svc_common+0x138/0x258 [ 43.118315][ T4047] do_el0_svc+0x58/0x14c [ 43.119462][ T4047] el0_svc+0x78/0x1e0 [ 43.120523][ T4047] el0t_64_sync_handler+0xcc/0xe4 [ 43.121858][ T4047] el0t_64_sync+0x1a0/0x1a4 [ 43.123145][ T4047] [ 43.123733][ T4047] Freed by task 4029: [ 43.124810][ T4047] kasan_set_track+0x4c/0x84 [ 43.126056][ T4047] kasan_set_free_info+0x28/0x4c [ 43.127374][ T4047] ____kasan_slab_free+0x118/0x164 [ 43.128748][ T4047] __kasan_slab_free+0x18/0x28 [ 43.130054][ T4047] slab_free_freelist_hook+0x128/0x1e8 [ 43.131516][ T4047] kmem_cache_free+0xdc/0x3b4 [ 43.132783][ T4047] f2fs_destroy_extent_tree+0x2d0/0x688 [ 43.134287][ T4047] f2fs_evict_inode+0x32c/0x1520 [ 43.135636][ T4047] evict+0x3c8/0x810 [ 43.136657][ T4047] iput+0x6c4/0x77c [ 43.137709][ T4047] iget_failed+0x148/0x194 [ 43.138888][ T4047] f2fs_iget+0x58c/0x5170 [ 43.140055][ T4047] f2fs_nfs_get_inode+0x80/0x118 [ 43.141376][ T4047] generic_fh_to_dentry+0x9c/0x104 [ 43.142783][ T4047] f2fs_fh_to_dentry+0x44/0x58 [ 43.144069][ T4047] exportfs_decode_fh_raw+0x10c/0x49c [ 43.145496][ T4047] exportfs_decode_fh+0x50/0x80 [ 43.146840][ T4047] do_handle_open+0x514/0x8e8 [ 43.148138][ T4047] __arm64_sys_open_by_handle_at+0x80/0x94 [ 43.149729][ T4047] invoke_syscall+0x98/0x2b8 [ 43.150947][ T4047] el0_svc_common+0x138/0x258 [ 43.152252][ T4047] do_el0_svc+0x58/0x14c [ 43.153449][ T4047] el0_svc+0x78/0x1e0 [ 43.154520][ T4047] el0t_64_sync_handler+0xcc/0xe4 [ 43.155863][ T4047] el0t_64_sync+0x1a0/0x1a4 [ 43.157071][ T4047] [ 43.157691][ T4047] The buggy address belongs to the object at ffff0000de7e5000 [ 43.157691][ T4047] which belongs to the cache f2fs_extent_tree of size 136 [ 43.161612][ T4047] The buggy address is located 0 bytes inside of [ 43.161612][ T4047] 136-byte region [ffff0000de7e5000, ffff0000de7e5088) [ 43.165196][ T4047] The buggy address belongs to the page: [ 43.166796][ T4047] page:000000005ed5591e refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11e7e5 [ 43.169687][ T4047] flags: 0x5ffc00000000200(slab|node=0|zone=2|lastcpupid=0x7ff) [ 43.171821][ T4047] raw: 05ffc00000000200 0000000000000000 dead000000000122 ffff0000c6983c80 [ 43.174232][ T4047] raw: 0000000000000000 0000000080140014 00000001ffffffff 0000000000000000 [ 43.176598][ T4047] page dumped because: kasan: bad access detected [ 43.178309][ T4047] [ 43.178917][ T4047] Memory state around the buggy address: [ 43.180471][ T4047] ffff0000de7e4f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 43.182685][ T4047] ffff0000de7e4f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 43.184908][ T4047] >ffff0000de7e5000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 43.187008][ T4047] ^ [ 43.188148][ T4047] ffff0000de7e5080: fb fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb [ 43.190344][ T4047] ffff0000de7e5100: fb fb fb fb fb fb fb fb fb fb fc fc fc fc fc fc [ 43.192575][ T4047] ================================================================== [ 43.200208][ T4028] F2FS-fs (loop4): Found nat_bits in checkpoint executing program [ 43.237628][ T4028] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 43.247422][ T4028] F2FS-fs (loop4): Inconsistent error blkaddr:5634, sit bitmap:0 [ 43.249547][ T4028] CPU: 1 PID: 4028 Comm: syz-executor966 Tainted: G B 5.15.181-syzkaller #0 [ 43.252152][ T4028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 43.254772][ T4028] Call trace: [ 43.255626][ T4028] dump_backtrace+0x0/0x43c [ 43.256767][ T4028] show_stack+0x2c/0x3c [ 43.257865][ T4028] __dump_stack+0x30/0x40 [ 43.258974][ T4028] dump_stack_lvl+0xf8/0x160 [ 43.260211][ T4028] dump_stack+0x1c/0x5c [ 43.261350][ T4028] f2fs_is_valid_blkaddr+0xa00/0xf80 [ 43.262766][ T4028] f2fs_iget+0x1a74/0x5170 [ 43.263984][ T4028] f2fs_nfs_get_inode+0x80/0x118 [ 43.265318][ T4028] generic_fh_to_dentry+0x9c/0x104 [ 43.266629][ T4028] f2fs_fh_to_dentry+0x44/0x58 [ 43.267918][ T4028] exportfs_decode_fh_raw+0x10c/0x49c [ 43.269364][ T4028] exportfs_decode_fh+0x50/0x80 [ 43.270643][ T4028] do_handle_open+0x514/0x8e8 [ 43.271823][ T4028] __arm64_sys_open_by_handle_at+0x80/0x94 [ 43.273385][ T4028] invoke_syscall+0x98/0x2b8 [ 43.274625][ T4028] el0_svc_common+0x138/0x258 [ 43.275859][ T4028] do_el0_svc+0x58/0x14c [ 43.276973][ T4028] el0_svc+0x78/0x1e0 [ 43.278023][ T4028] el0t_64_sync_handler+0xcc/0xe4 [ 43.279425][ T4028] el0t_64_sync+0x1a0/0x1a4 [ 43.294741][ T4028] F2FS-fs (loop4): sanity_check_inode: inode (ino=8) extent info [5634, 0, 3] is incorrect, run fsck to fix [ 43.298877][ T4036] F2FS-fs (loop3): sanity_check_inode: inode (ino=8) extent info [5634, 0, 3] is incorrect, run fsck to fix [ 43.301967][ T4028] F2FS-fs (loop4): Inconsistent error blkaddr:5634, sit bitmap:0 [ 43.303958][ T4028] CPU: 1 PID: 4028 Comm: syz-executor966 Tainted: G B 5.15.181-syzkaller #0 [ 43.306577][ T4028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 43.309278][ T4028] Call trace: [ 43.310158][ T4028] dump_backtrace+0x0/0x43c [ 43.311379][ T4028] show_stack+0x2c/0x3c [ 43.312531][ T4028] __dump_stack+0x30/0x40 [ 43.313733][ T4028] dump_stack_lvl+0xf8/0x160 [ 43.315044][ T4028] dump_stack+0x1c/0x5c [ 43.316166][ T4028] f2fs_is_valid_blkaddr+0xa00/0xf80 [ 43.317559][ T4028] f2fs_iget+0x1a74/0x5170 [ 43.318729][ T4028] f2fs_nfs_get_inode+0x80/0x118 [ 43.320069][ T4028] generic_fh_to_dentry+0x9c/0x104 [ 43.321426][ T4028] f2fs_fh_to_dentry+0x44/0x58 [ 43.322695][ T4028] exportfs_decode_fh_raw+0x10c/0x49c [ 43.324210][ T4028] exportfs_decode_fh+0x50/0x80 [ 43.325527][ T4028] do_handle_open+0x514/0x8e8 [ 43.326798][ T4028] __arm64_sys_open_by_handle_at+0x80/0x94 [ 43.328344][ T4028] invoke_syscall+0x98/0x2b8 [ 43.329546][ T4028] el0_svc_common+0x138/0x258 [ 43.330776][ T4028] do_el0_svc+0x58/0x14c [ 43.331913][ T4028] el0_svc+0x78/0x1e0 [ 43.332918][ T4028] el0t_64_sync_handler+0xcc/0xe4 [ 43.334276][ T4028] el0t_64_sync+0x1a0/0x1a4 [ 43.335718][ T4057] F2FS-fs (loop3): Inconsistent error blkaddr:5634, sit bitmap:0 [ 43.338456][ T4057] CPU: 1 PID: 4057 Comm: syz-executor966 Tainted: G B 5.15.181-syzkaller #0 [ 43.341185][ T4057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 43.343770][ T4057] Call trace: [ 43.344592][ T4057] dump_backtrace+0x0/0x43c [ 43.345753][ T4057] show_stack+0x2c/0x3c [ 43.346804][ T4057] __dump_stack+0x30/0x40 [ 43.347951][ T4057] dump_stack_lvl+0xf8/0x160 [ 43.349193][ T4057] dump_stack+0x1c/0x5c [ 43.350237][ T4057] f2fs_is_valid_blkaddr+0xa00/0xf80 [ 43.351633][ T4057] f2fs_iget+0x1a74/0x5170 [ 43.352801][ T4057] f2fs_nfs_get_inode+0x80/0x118 [ 43.354165][ T4057] generic_fh_to_dentry+0x9c/0x104 [ 43.355502][ T4057] f2fs_fh_to_dentry+0x44/0x58 [ 43.356742][ T4057] exportfs_decode_fh_raw+0x10c/0x49c [ 43.358181][ T4057] exportfs_decode_fh+0x50/0x80 [ 43.359506][ T4057] do_handle_open+0x514/0x8e8 [ 43.360718][ T4057] __arm64_sys_open_by_handle_at+0x80/0x94 [ 43.362278][ T4057] invoke_syscall+0x98/0x2b8 [ 43.363515][ T4057] el0_svc_common+0x138/0x258 [ 43.364760][ T4057] do_el0_svc+0x58/0x14c [ 43.365901][ T4057] el0_svc+0x78/0x1e0 [ 43.366939][ T4057] el0t_64_sync_handler+0xcc/0xe4 [ 43.368264][ T4057] el0t_64_sync+0x1a0/0x1a4 [ 43.370402][ T4057] F2FS-fs (loop3): sanity_check_inode: inode (ino=8) extent info [5634, 0, 3] is incorrect, run fsck to fix [ 43.373745][ T4057] ================================================================== [ 43.375949][ T4057] BUG: KASAN: double-free or invalid-free in kmem_cache_free+0xdc/0x3b4 [ 43.378098][ T4057] [ 43.378710][ T4057] CPU: 1 PID: 4057 Comm: syz-executor966 Tainted: G B 5.15.181-syzkaller #0 [ 43.381428][ T4057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 43.384140][ T4057] Call trace: [ 43.385029][ T4057] dump_backtrace+0x0/0x43c [ 43.386206][ T4057] show_stack+0x2c/0x3c [ 43.387311][ T4057] __dump_stack+0x30/0x40 [ 43.388449][ T4057] dump_stack_lvl+0xf8/0x160 [ 43.389731][ T4057] print_address_description+0x78/0x30c [ 43.391211][ T4057] kasan_report_invalid_free+0x4c/0x7c [ 43.392708][ T4057] ____kasan_slab_free+0x134/0x164 [ 43.394028][ T4057] __kasan_slab_free+0x18/0x28 [ 43.395326][ T4057] slab_free_freelist_hook+0x128/0x1e8 [ 43.396806][ T4057] kmem_cache_free+0xdc/0x3b4 [ 43.398056][ T4057] f2fs_destroy_extent_tree+0x2d0/0x688 [ 43.399561][ T4057] f2fs_evict_inode+0x32c/0x1520 [ 43.400905][ T4057] evict+0x3c8/0x810 [ 43.401994][ T4057] iput+0x6c4/0x77c [ 43.402990][ T4057] iget_failed+0x148/0x194 [ 43.404172][ T4057] f2fs_iget+0x58c/0x5170 [ 43.405333][ T4057] f2fs_nfs_get_inode+0x80/0x118 [ 43.406660][ T4057] generic_fh_to_dentry+0x9c/0x104 [ 43.408035][ T4057] f2fs_fh_to_dentry+0x44/0x58 [ 43.409298][ T4057] exportfs_decode_fh_raw+0x10c/0x49c [ 43.410716][ T4057] exportfs_decode_fh+0x50/0x80 [ 43.411971][ T4057] do_handle_open+0x514/0x8e8 [ 43.413214][ T4057] __arm64_sys_open_by_handle_at+0x80/0x94 [ 43.414791][ T4057] invoke_syscall+0x98/0x2b8 [ 43.416001][ T4057] el0_svc_common+0x138/0x258 [ 43.417271][ T4057] do_el0_svc+0x58/0x14c [ 43.418375][ T4057] el0_svc+0x78/0x1e0 [ 43.419497][ T4057] el0t_64_sync_handler+0xcc/0xe4 [ 43.420854][ T4057] el0t_64_sync+0x1a0/0x1a4 [ 43.422083][ T4057] [ 43.422676][ T4057] Allocated by task 4036: [ 43.423847][ T4057] __kasan_slab_alloc+0x8c/0xcc [ 43.425142][ T4057] slab_post_alloc_hook+0x74/0x408 [ 43.426518][ T4057] kmem_cache_alloc+0x1e0/0x3e4 [ 43.427789][ T4057] f2fs_init_extent_tree+0x43c/0xaac [ 43.429202][ T4057] f2fs_iget+0x10c4/0x5170 [ 43.430406][ T4057] f2fs_nfs_get_inode+0x80/0x118 [ 43.431734][ T4057] generic_fh_to_dentry+0x9c/0x104 [ 43.433169][ T4057] f2fs_fh_to_dentry+0x44/0x58 [ 43.434416][ T4057] exportfs_decode_fh_raw+0x10c/0x49c [ 43.435810][ T4057] exportfs_decode_fh+0x50/0x80 [ 43.437115][ T4057] do_handle_open+0x514/0x8e8 [ 43.438367][ T4057] __arm64_sys_open_by_handle_at+0x80/0x94 [ 43.440007][ T4057] invoke_syscall+0x98/0x2b8 [ 43.441236][ T4057] el0_svc_common+0x138/0x258 [ 43.442506][ T4057] do_el0_svc+0x58/0x14c [ 43.443751][ T4057] el0_svc+0x78/0x1e0 [ 43.444884][ T4057] el0t_64_sync_handler+0xcc/0xe4 [ 43.446249][ T4057] el0t_64_sync+0x1a0/0x1a4 [ 43.447516][ T4057] [ 43.448105][ T4057] Freed by task 4036: [ 43.449171][ T4057] kasan_set_track+0x4c/0x84 [ 43.450423][ T4057] kasan_set_free_info+0x28/0x4c [ 43.451787][ T4057] ____kasan_slab_free+0x118/0x164 [ 43.453140][ T4057] __kasan_slab_free+0x18/0x28 [ 43.454473][ T4057] slab_free_freelist_hook+0x128/0x1e8 [ 43.455968][ T4057] kmem_cache_free+0xdc/0x3b4 [ 43.457254][ T4057] f2fs_destroy_extent_tree+0x2d0/0x688 [ 43.458763][ T4057] f2fs_evict_inode+0x32c/0x1520 [ 43.460113][ T4057] evict+0x3c8/0x810 [ 43.461195][ T4057] iput+0x6c4/0x77c [ 43.462258][ T4057] iget_failed+0x148/0x194 [ 43.463446][ T4057] f2fs_iget+0x58c/0x5170 [ 43.464621][ T4057] f2fs_nfs_get_inode+0x80/0x118 [ 43.465967][ T4057] generic_fh_to_dentry+0x9c/0x104 [ 43.467381][ T4057] f2fs_fh_to_dentry+0x44/0x58 [ 43.468658][ T4057] exportfs_decode_fh_raw+0x10c/0x49c [ 43.470105][ T4057] exportfs_decode_fh+0x50/0x80 [ 43.471382][ T4057] do_handle_open+0x514/0x8e8 [ 43.472613][ T4057] __arm64_sys_open_by_handle_at+0x80/0x94 [ 43.474183][ T4057] invoke_syscall+0x98/0x2b8 [ 43.475429][ T4057] el0_svc_common+0x138/0x258 [ 43.476696][ T4057] do_el0_svc+0x58/0x14c [ 43.477875][ T4057] el0_svc+0x78/0x1e0 [ 43.478937][ T4057] el0t_64_sync_handler+0xcc/0xe4 [ 43.480250][ T4057] el0t_64_sync+0x1a0/0x1a4 [ 43.481441][ T4057] [ 43.482028][ T4057] The buggy address belongs to the object at ffff0000de7e5190 [ 43.482028][ T4057] which belongs to the cache f2fs_extent_tree of size 136 [ 43.486016][ T4057] The buggy address is located 0 bytes inside of [ 43.486016][ T4057] 136-byte region [ffff0000de7e5190, ffff0000de7e5218) [ 43.489632][ T4057] The buggy address belongs to the page: [ 43.491163][ T4057] page:000000005ed5591e refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11e7e5 [ 43.493948][ T4057] flags: 0x5ffc00000000200(slab|node=0|zone=2|lastcpupid=0x7ff) [ 43.496049][ T4057] raw: 05ffc00000000200 0000000000000000 dead000000000122 ffff0000c6983c80 [ 43.498339][ T4057] raw: 0000000000000000 0000000080140014 00000001ffffffff 0000000000000000 [ 43.500656][ T4057] page dumped because: kasan: bad access detected [ 43.502367][ T4057] [ 43.502979][ T4057] Memory state around the buggy address: [ 43.504535][ T4057] ffff0000de7e5080: fb fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb [ 43.506724][ T4057] ffff0000de7e5100: fb fb fb fb fb fb fb fb fb fb fc fc fc fc fc fc [ 43.508927][ T4057] >ffff0000de7e5180: fc fc fa fb fb fb fb fb fb fb fb fb fb fb fb fb [ 43.511075][ T4057] ^ [ 43.512334][ T4057] ffff0000de7e5200: fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc fc [ 43.514432][ T4057] ffff0000de7e5280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 43.516604][ T4057] ================================================================== [ 43.525816][ T4028] F2FS-fs (loop4): sanity_check_inode: inode (ino=8) extent info [5634, 0, 3] is incorrect, run fsck to fix executing program executing program [ 43.568558][ T4034] F2FS-fs (loop2): Found nat_bits in checkpoint [ 43.607459][ T4034] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 43.610946][ T4034] F2FS-fs (loop2): Inconsistent error blkaddr:5634, sit bitmap:0 [ 43.613039][ T4034] CPU: 1 PID: 4034 Comm: syz-executor966 Tainted: G B 5.15.181-syzkaller #0 [ 43.615663][ T4034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 43.618409][ T4034] Call trace: [ 43.619285][ T4034] dump_backtrace+0x0/0x43c [ 43.620536][ T4034] show_stack+0x2c/0x3c [ 43.621639][ T4034] __dump_stack+0x30/0x40 [ 43.622820][ T4034] dump_stack_lvl+0xf8/0x160 [ 43.624078][ T4034] dump_stack+0x1c/0x5c executing program [ 43.625205][ T4034] f2fs_is_valid_blkaddr+0xa00/0xf80 [ 43.626579][ T4034] f2fs_iget+0x1a74/0x5170 [ 43.627771][ T4034] f2fs_nfs_get_inode+0x80/0x118 [ 43.629093][ T4034] generic_fh_to_dentry+0x9c/0x104 [ 43.630498][ T4034] f2fs_fh_to_dentry+0x44/0x58 [ 43.631771][ T4034] exportfs_decode_fh_raw+0x10c/0x49c [ 43.633213][ T4034] exportfs_decode_fh+0x50/0x80 [ 43.634519][ T4034] do_handle_open+0x514/0x8e8 [ 43.635770][ T4034] __arm64_sys_open_by_handle_at+0x80/0x94 [ 43.637390][ T4034] invoke_syscall+0x98/0x2b8 [ 43.638610][ T4034] el0_svc_common+0x138/0x258 [ 43.639857][ T4034] do_el0_svc+0x58/0x14c [ 43.641033][ T4034] el0_svc+0x78/0x1e0 [ 43.642058][ T4034] el0t_64_sync_handler+0xcc/0xe4 [ 43.643461][ T4034] el0t_64_sync+0x1a0/0x1a4 [ 43.711766][ T4034] F2FS-fs (loop2): sanity_check_inode: inode (ino=8) extent info [5634, 0, 3] is incorrect, run fsck to fix [ 43.716175][ T4072] F2FS-fs (loop2): Inconsistent error blkaddr:5634, sit bitmap:0 [ 43.718735][ T4072] CPU: 1 PID: 4072 Comm: syz-executor966 Tainted: G B 5.15.181-syzkaller #0 [ 43.721455][ T4072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 43.724174][ T4072] Call trace: [ 43.725051][ T4072] dump_backtrace+0x0/0x43c [ 43.726252][ T4072] show_stack+0x2c/0x3c [ 43.727393][ T4072] __dump_stack+0x30/0x40 [ 43.728559][ T4072] dump_stack_lvl+0xf8/0x160 [ 43.729772][ T4072] dump_stack+0x1c/0x5c [ 43.730896][ T4072] f2fs_is_valid_blkaddr+0xa00/0xf80 [ 43.732340][ T4072] f2fs_iget+0x1a74/0x5170 [ 43.733564][ T4072] f2fs_nfs_get_inode+0x80/0x118 [ 43.734910][ T4072] generic_fh_to_dentry+0x9c/0x104 [ 43.736381][ T4072] f2fs_fh_to_dentry+0x44/0x58 [ 43.737669][ T4072] exportfs_decode_fh_raw+0x10c/0x49c [ 43.739172][ T4072] exportfs_decode_fh+0x50/0x80 [ 43.740441][ T4072] do_handle_open+0x514/0x8e8 [ 43.741657][ T4072] __arm64_sys_open_by_handle_at+0x80/0x94 [ 43.743254][ T4072] invoke_syscall+0x98/0x2b8 [ 43.744457][ T4072] el0_svc_common+0x138/0x258 [ 43.745769][ T4072] do_el0_svc+0x58/0x14c [ 43.746945][ T4072] el0_svc+0x78/0x1e0 [ 43.748025][ T4072] el0t_64_sync_handler+0xcc/0xe4 [ 43.749380][ T4072] el0t_64_sync+0x1a0/0x1a4 executing program [ 43.836347][ T4072] F2FS-fs (loop2): sanity_check_inode: inode (ino=8) extent info [5634, 0, 3] is incorrect, run fsck to fix [ 43.839763][ T4072] ================================================================== [ 43.841907][ T4072] BUG: KASAN: double-free or invalid-free in kmem_cache_free+0xdc/0x3b4 [ 43.844187][ T4072] [ 43.844800][ T4072] CPU: 0 PID: 4072 Comm: syz-executor966 Tainted: G B 5.15.181-syzkaller #0 [ 43.847482][ T4072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 43.850254][ T4072] Call trace: [ 43.851156][ T4072] dump_backtrace+0x0/0x43c [ 43.852400][ T4072] show_stack+0x2c/0x3c [ 43.853525][ T4072] __dump_stack+0x30/0x40 [ 43.854698][ T4072] dump_stack_lvl+0xf8/0x160 [ 43.855999][ T4072] print_address_description+0x78/0x30c [ 43.857567][ T4072] kasan_report_invalid_free+0x4c/0x7c [ 43.859096][ T4072] ____kasan_slab_free+0x134/0x164 [ 43.860523][ T4072] __kasan_slab_free+0x18/0x28 [ 43.861865][ T4072] slab_free_freelist_hook+0x128/0x1e8 [ 43.863356][ T4072] kmem_cache_free+0xdc/0x3b4 [ 43.864616][ T4072] f2fs_destroy_extent_tree+0x2d0/0x688 [ 43.866117][ T4072] f2fs_evict_inode+0x32c/0x1520 [ 43.867423][ T4072] evict+0x3c8/0x810 [ 43.868438][ T4072] iput+0x6c4/0x77c [ 43.869480][ T4072] iget_failed+0x148/0x194 [ 43.870699][ T4072] f2fs_iget+0x58c/0x5170 [ 43.871866][ T4072] f2fs_nfs_get_inode+0x80/0x118 [ 43.873178][ T4072] generic_fh_to_dentry+0x9c/0x104 [ 43.874603][ T4072] f2fs_fh_to_dentry+0x44/0x58 [ 43.875903][ T4072] exportfs_decode_fh_raw+0x10c/0x49c [ 43.877357][ T4072] exportfs_decode_fh+0x50/0x80 [ 43.878676][ T4072] do_handle_open+0x514/0x8e8 [ 43.879935][ T4072] __arm64_sys_open_by_handle_at+0x80/0x94 [ 43.881509][ T4072] invoke_syscall+0x98/0x2b8 [ 43.882773][ T4072] el0_svc_common+0x138/0x258 [ 43.884058][ T4072] do_el0_svc+0x58/0x14c [ 43.885183][ T4072] el0_svc+0x78/0x1e0 [ 43.886244][ T4072] el0t_64_sync_handler+0xcc/0xe4 [ 43.887617][ T4072] el0t_64_sync+0x1a0/0x1a4 [ 43.888809][ T4072] [ 43.889426][ T4072] Allocated by task 4034: [ 43.890626][ T4072] __kasan_slab_alloc+0x8c/0xcc [ 43.891948][ T4072] slab_post_alloc_hook+0x74/0x408 [ 43.893339][ T4072] kmem_cache_alloc+0x1e0/0x3e4 [ 43.894702][ T4072] f2fs_init_extent_tree+0x43c/0xaac [ 43.896139][ T4072] f2fs_iget+0x10c4/0x5170 [ 43.897301][ T4072] f2fs_nfs_get_inode+0x80/0x118 [ 43.898628][ T4072] generic_fh_to_dentry+0x9c/0x104 [ 43.900050][ T4072] f2fs_fh_to_dentry+0x44/0x58 [ 43.901343][ T4072] exportfs_decode_fh_raw+0x10c/0x49c [ 43.902780][ T4072] exportfs_decode_fh+0x50/0x80 [ 43.904101][ T4072] do_handle_open+0x514/0x8e8 [ 43.905339][ T4072] __arm64_sys_open_by_handle_at+0x80/0x94 [ 43.906940][ T4072] invoke_syscall+0x98/0x2b8 [ 43.908221][ T4072] el0_svc_common+0x138/0x258 [ 43.909484][ T4072] do_el0_svc+0x58/0x14c [ 43.910664][ T4072] el0_svc+0x78/0x1e0 [ 43.911759][ T4072] el0t_64_sync_handler+0xcc/0xe4 [ 43.913132][ T4072] el0t_64_sync+0x1a0/0x1a4 [ 43.914367][ T4072] [ 43.914996][ T4072] Freed by task 4034: [ 43.916048][ T4072] kasan_set_track+0x4c/0x84 [ 43.917326][ T4072] kasan_set_free_info+0x28/0x4c [ 43.918620][ T4072] ____kasan_slab_free+0x118/0x164 [ 43.919999][ T4072] __kasan_slab_free+0x18/0x28 [ 43.921270][ T4072] slab_free_freelist_hook+0x128/0x1e8 [ 43.922785][ T4072] kmem_cache_free+0xdc/0x3b4 [ 43.924078][ T4072] f2fs_destroy_extent_tree+0x2d0/0x688 [ 43.925622][ T4072] f2fs_evict_inode+0x32c/0x1520 [ 43.926963][ T4072] evict+0x3c8/0x810 [ 43.928030][ T4072] iput+0x6c4/0x77c [ 43.929100][ T4072] iget_failed+0x148/0x194 [ 43.930283][ T4072] f2fs_iget+0x58c/0x5170 [ 43.931440][ T4072] f2fs_nfs_get_inode+0x80/0x118 [ 43.932771][ T4072] generic_fh_to_dentry+0x9c/0x104 [ 43.934179][ T4072] f2fs_fh_to_dentry+0x44/0x58 [ 43.935441][ T4072] exportfs_decode_fh_raw+0x10c/0x49c [ 43.936873][ T4072] exportfs_decode_fh+0x50/0x80 [ 43.938175][ T4072] do_handle_open+0x514/0x8e8 [ 43.939401][ T4072] __arm64_sys_open_by_handle_at+0x80/0x94 [ 43.941001][ T4072] invoke_syscall+0x98/0x2b8 [ 43.942256][ T4072] el0_svc_common+0x138/0x258 [ 43.943549][ T4072] do_el0_svc+0x58/0x14c [ 43.944681][ T4072] el0_svc+0x78/0x1e0 [ 43.945759][ T4072] el0t_64_sync_handler+0xcc/0xe4 [ 43.947129][ T4072] el0t_64_sync+0x1a0/0x1a4 [ 43.948320][ T4072] [ 43.948953][ T4072] The buggy address belongs to the object at ffff0000de70b258 [ 43.948953][ T4072] which belongs to the cache f2fs_extent_tree of size 136 [ 43.952850][ T4072] The buggy address is located 0 bytes inside of [ 43.952850][ T4072] 136-byte region [ffff0000de70b258, ffff0000de70b2e0) [ 43.956386][ T4072] The buggy address belongs to the page: [ 43.957918][ T4072] page:000000001a959967 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11e70b [ 43.960688][ T4072] flags: 0x5ffc00000000200(slab|node=0|zone=2|lastcpupid=0x7ff) [ 43.962777][ T4072] raw: 05ffc00000000200 0000000000000000 dead000000000122 ffff0000c6983c80 [ 43.965127][ T4072] raw: 0000000000000000 0000000080140014 00000001ffffffff 0000000000000000 [ 43.967457][ T4072] page dumped because: kasan: bad access detected [ 43.969224][ T4072] [ 43.969835][ T4072] Memory state around the buggy address: [ 43.971364][ T4072] ffff0000de70b100: fb fb fb fb fb fb fb fb fb fb fc fc fc fc fc fc [ 43.973546][ T4072] ffff0000de70b180: fc fc fa fb fb fb fb fb fb fb fb fb fb fb fb fb [ 43.975697][ T4072] >ffff0000de70b200: fb fb fb fc fc fc fc fc fc fc fc fa fb fb fb fb [ 43.977888][ T4072] ^ [ 43.979817][ T4072] ffff0000de70b280: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 43.981996][ T4072] ffff0000de70b300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 43.984232][ T4072] ================================================================== executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program