From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from lists.sourceforge.net (lists.sourceforge.net [216.105.38.7]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id 93FC2C43458 for ; Fri, 26 Jun 2026 21:28:26 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=lists.sourceforge.net; s=beta; h=Content-Transfer-Encoding:Content-Type:Cc: List-Subscribe:List-Help:List-Post:List-Archive:List-Unsubscribe:List-Id: Subject:From:MIME-Version:To:Date:Message-ID:Sender:Reply-To:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:In-Reply-To:References:List-Owner; bh=vVrVqsZsfqfHHf/geqcawFOOymmPb6s/8fB2q8PiHGM=; b=je/WgQh4idUEiwhxEYrCGSHMmq 8edSM3DN7I5YfU/uXZseLIbeg92lj1mCBd3Jem7r4dk6mzAcUc/EJM/7muTwjkG1sPEkOD5D2iZTo XnH7Qsrxgz5l7NsHTVh392CPkOI43CLbguKNLnRfgzruIT41u4SeetiuN0w23qEUtJgk=; Received: from [127.0.0.1] (helo=sfs-ml-1.v29.lw.sourceforge.com) by sfs-ml-1.v29.lw.sourceforge.com with esmtp (Exim 4.95) (envelope-from ) id 1wdE64-0005OG-8w; Fri, 26 Jun 2026 21:28:21 +0000 Received: from [172.30.29.66] (helo=mx.sourceforge.net) by sfs-ml-1.v29.lw.sourceforge.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.95) (envelope-from ) id 1wdE62-0005OA-Vz for linux-f2fs-devel@lists.sourceforge.net; Fri, 26 Jun 2026 21:28:20 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=sourceforge.net; s=x; h=From:MIME-Version:Content-Transfer-Encoding: Content-Type:Cc:To:Subject:Date:Message-ID:Sender:Reply-To:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=QgL504FovBntWDuvZXZlRMaKeEpOFyF0FTdvw+iqjas=; b=fAgbGsyLkmxX2kbt2ZzS4eKVqw FcDkURnB1yFVIRrl4MtAnFFiS3pybfqY7qobg2F57FXHi2zcgh+KG8JLObb138AaqrktVyzIuG+YL vDbrRZRQ8Cy7sgXN61bsk1S0DmxUvzmCdxaRbe1r7fycmQys9a6N6B2ZLHzPIgvnjyIQ=; DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=sf.net; s=x ; h=From:MIME-Version:Content-Transfer-Encoding:Content-Type:Cc:To:Subject: Date:Message-ID:Sender:Reply-To:Content-ID:Content-Description:Resent-Date: Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To: References:List-Id:List-Help:List-Unsubscribe:List-Subscribe:List-Post: List-Owner:List-Archive; bh=QgL504FovBntWDuvZXZlRMaKeEpOFyF0FTdvw+iqjas=; b=A i5YIOblE7dAw1tpeLSHISWI/qN+85l1KKj86yBDXpc+tuUYDkxQiS0oTpmlveWNpEffJ98Tfgab0X paEO4H7Hbb7FbM7PaskqlWUtzNYgIYteQ4RTIFuHr8KQSAsHdoKlzcIuqTOwkdATPw/WKPeGkeqEv xPHP2uDo5W1rC5ow=; Received: from mail-vk1-f176.google.com ([209.85.221.176]) by sfi-mx-2.v28.lw.sourceforge.com with esmtps (TLS1.2:ECDHE-RSA-AES128-GCM-SHA256:128) (Exim 4.95) id 1wdE5z-00043p-Fw for linux-f2fs-devel@lists.sourceforge.net; Fri, 26 Jun 2026 21:28:20 +0000 Received: by mail-vk1-f176.google.com with SMTP id 71dfb90a1353d-5bd8c2cf5baso618e0c.3 for ; Fri, 26 Jun 2026 14:28:19 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1782509289; x=1783114089; darn=lists.sourceforge.net; h=from:mime-version:content-transfer-encoding:content-type:cc:to :subject:date:message-id:from:to:cc:subject:date:message-id:reply-to :content-type; bh=QgL504FovBntWDuvZXZlRMaKeEpOFyF0FTdvw+iqjas=; b=Xest/typbT2C/mTKz0+stSJhGJHLTHEFhw4kOCWTM0ZChUMglMLlovITmQ9URlAfMC kcvNt/z0VM4Ut5s28/9z9UE9B4PLqCxz+c8dNq/A1jlgxTfWkmXcd1brXI/xTpWOdVzH vKiN+Npsc+CbxGXM8KHYbfz64xt290A/jhMzwE9uGiJBpACO7XiqmS5zNVh1oB0kut5J dDgco1fdWBiu5hpZ6XhqmiiHvf4g8DQqNCLLjelQ5DjdyMdC8xDIX8D1LWbqfWsngzaH 1R42oJTVVhK0mqGRxW3q14ZBrEqjqtHCUQxzj1zEbflcynkGsz+2bcSlmx9OutciHMw8 DfSA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1782509289; x=1783114089; h=from:mime-version:content-transfer-encoding:content-type:cc:to :subject:date:message-id:x-gm-gg:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to:content-type; bh=QgL504FovBntWDuvZXZlRMaKeEpOFyF0FTdvw+iqjas=; b=Yq1YC/2TctzGj5k1JjCQ6kXmfC+Nio4P32N1dmrEwZBX3elD9S9k4p3d22HERHGjwM bTkx7a+bnxegRUChrisbABAutH/rTbTqdb5/ezex7u36Ie4NPpJXo2zg5mYlM9qeMCaO s6sxLUCYsk4jwoykT2fL4OU9QFNoqYFM0wLrGyagJv/jT3RQCht4nzMLgpsK+wGmpLuS eTWW2GKvkN/dMSNUWi7E/PJhSJhk4l4AFUJdadNp4mnmi4N2I4r0Tt6Xn74yhoo7p20H rlS/Je15/zo+9N4nPrI4FZi1/Q7qI1wfgRzOTHj49Im80b+FTHNR4oRbGx9z+iq6wmfp 8VIQ== X-Forwarded-Encrypted: i=1; AHgh+RpYs8cg7TuSBS9V4W171tTF2fOPIcK5Z4soNcLp004RWsTbVyPGwvNHrpjg/AHhGw16NigT5jOH7jxrJsDFO1o/@lists.sourceforge.net X-Gm-Message-State: AOJu0YwUPlMdFzvjRGGHA4H8OIlsztjrqmvPH9Oo3uzBzxMV/blMMoqu G9UX0YRfpAvuHCKGvL6dAU40aizfXSDLoO0zpO+IMwOR/+RZJy5R4Hb1fo5cn7yd X-Gm-Gg: AfdE7ckPgp9YagdUtAkIjzf3r/ptXGtcYCxSBLlu1dSZkytHDwqd4oWrLiM43ARsK1m rSyAfsGB8yy87DQJiHRzic2Txd7X/9e2+C5FUIfnAgPW/uVDlYTsWqdN+0QScrjmWz5N/WHJX4h KsO5ns6Nayjd6T8zBLiynQerd0WVKae6vUxDWUiN/d1wu1Wj8MWB8mO/slb22Za2QVwyiEL86rF DmMCuGqx8ShdwUSm4S0nX0XkeSgN3erOSN2/F/cjGqkmfVEaIIt8VWxJq7Ep7EaKu+9Q28l3uq2 wyAfvdpLLc1Um+bFPN3VTlhyusQ0tKjVPtF1RqiX0Ad1LxKGdsTGGkpmxkx1uUfMToaIB0BJLbh vSbWawAh3IvPDjSrhne5W9GB5RHsheKe6E4Plme+1/b9NE1ZMSe4hbJlDoBc7byblh/6tpHLjpS vyHqyJSs6/Eg21SjXn8nxGAUYvbyyi6sMEwx/GMW8qbquVlJSTqZ3ZzCl9PZpH083hWHGMxLua/ SSOeeyneiBG X-Received: by 2002:ac5:c92d:0:b0:5bd:4143:6a8a with SMTP id 71dfb90a1353d-5bd69c2ca69mr1235294e0c.1.1782509288971; Fri, 26 Jun 2026 14:28:08 -0700 (PDT) Received: from [192.168.10.115] ([132.170.207.48]) by smtp.gmail.com with ESMTPSA id 71dfb90a1353d-5bd7908a922sm1841418e0c.10.2026.06.26.14.28.08 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 26 Jun 2026 14:28:08 -0700 (PDT) Message-ID: <6a3eeee8.516c2524.21c3a2.ac0d@mx.google.com> Date: Fri, 26 Jun 2026 14:28:08 -0700 (PDT) To: jaegeuk@kernel.org, chao@kernel.org, linux-f2fs-devel@lists.sourceforge.net, linux-kernel@vger.kernel.org MIME-Version: 1.0 From: sanan.hasanou@gmail.com X-Headers-End: 1wdE5z-00043p-Fw Subject: [f2fs-dev] general protection fault in f2fs_in_warm_node_list X-BeenThere: linux-f2fs-devel@lists.sourceforge.net X-Mailman-Version: 2.1.21 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: syzkaller@googlegroups.com, contact@pgazz.com Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Errors-To: linux-f2fs-devel-bounces@lists.sourceforge.net Good day, dear maintainers, We found a bug using a modified version of syzkaller. Kernel Branch: 7.0-rc1 Kernel Config: Unfortunately, we don't have any reproducer for this bug yet. Thank you! Best regards, Sanan Hasanov Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] SMP KASAN KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] CPU: 0 UID: 0 PID: 3043 Comm: kworker/u8:10 Not tainted 7.0.0-rc1 #1 PREEMPT_{RT,(full)} Hardware name: QEMU Ubuntu 24.04 PC v2 (i440FX + PIIX, arch_caps fix, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 Workqueue: bat_events batadv_tt_purge RIP: 0010:NODE_MAPPING fs/f2fs/f2fs.h:2260 [inline] RIP: 0010:is_node_folio fs/f2fs/f2fs.h:2270 [inline] RIP: 0010:f2fs_in_warm_node_list+0xc5/0x2a0 fs/f2fs/node.c:330 Code: 00 00 4d 03 3c 24 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 19 09 07 fe 4d 8b 3f 49 83 c7 30 4c 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 ff e8 fc 08 07 fe 4d 3b 37 74 14 e8 b2 RSP: 0018:ffffc9000e9af568 EFLAGS: 00010216 RAX: 0000000000000006 RBX: ffffea0000ed41c0 RCX: ffff88802cf2b980 RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 RBP: ffffc9000e9af590 R08: ffff8880224bd66b R09: 1ffff11004497acd R10: dffffc0000000000 R11: ffffed1004497ace R12: ffff888050544780 R13: dffffc0000000000 R14: ffff88803e405010 R15: 0000000000000030 FS: 0000000000000000(0000) GS:ffff8880dc0a8000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055a77139e428 CR3: 0000000033d4c000 CR4: 00000000000006f0 Call Trace: f2fs_write_end_io+0x785/0x1390 fs/f2fs/data.c:400 bio_endio+0x936/0x980 block/bio.c:1792 blk_update_request+0x5a5/0xe40 block/blk-mq.c:1016 blk_mq_end_request+0x4a/0x80 block/blk-mq.c:1178 blk_flush_complete_seq+0x667/0xd10 block/blk-flush.c:191 flush_end_io+0xc67/0xf40 block/blk-flush.c:251 __blk_mq_end_request+0x5bf/0x710 block/blk-mq.c:1168 blk_mq_end_request+0x5e/0x80 block/blk-mq.c:1180 lo_complete_rq+0xe3/0x260 drivers/block/loop.c:314 blk_complete_reqs block/blk-mq.c:1253 [inline] blk_done_softirq+0x10e/0x160 block/blk-mq.c:1258 handle_softirqs+0x1c7/0x690 kernel/softirq.c:622 __do_softirq kernel/softirq.c:656 [inline] __local_bh_enable_ip+0x16a/0x270 kernel/softirq.c:302 local_bh_enable include/linux/bottom_half.h:33 [inline] spin_unlock_bh include/linux/spinlock_rt.h:116 [inline] batadv_tt_global_purge net/batman-adv/translation-table.c:2250 [inline] batadv_tt_purge+0x45c/0x9e0 net/batman-adv/translation-table.c:3510 process_one_work kernel/workqueue.c:3275 [inline] process_scheduled_works+0xa5a/0x15e0 kernel/workqueue.c:3358 worker_thread+0xab9/0xff0 kernel/workqueue.c:3439 kthread+0x355/0x410 kernel/kthread.c:467 ret_from_fork+0x49c/0xa10 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:245 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:NODE_MAPPING fs/f2fs/f2fs.h:2260 [inline] RIP: 0010:is_node_folio fs/f2fs/f2fs.h:2270 [inline] RIP: 0010:f2fs_in_warm_node_list+0xc5/0x2a0 fs/f2fs/node.c:330 Code: 00 00 4d 03 3c 24 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 19 09 07 fe 4d 8b 3f 49 83 c7 30 4c 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 ff e8 fc 08 07 fe 4d 3b 37 74 14 e8 b2 RSP: 0018:ffffc9000e9af568 EFLAGS: 00010216 RAX: 0000000000000006 RBX: ffffea0000ed41c0 RCX: ffff88802cf2b980 RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 RBP: ffffc9000e9af590 R08: ffff8880224bd66b R09: 1ffff11004497acd R10: dffffc0000000000 R11: ffffed1004497ace R12: ffff888050544780 R13: dffffc0000000000 R14: ffff88803e405010 R15: 0000000000000030 FS: 0000000000000000(0000) GS:ffff8880dc0a8000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055a77139e428 CR3: 0000000033d4c000 CR4: 00000000000006f0 ---------------- Code disassembly (best guess): 0: 00 00 add %al,(%rax) 2: 4d 03 3c 24 add (%r12),%r15 6: 4c 89 f8 mov %r15,%rax 9: 48 c1 e8 03 shr $0x3,%rax d: 42 80 3c 28 00 cmpb $0x0,(%rax,%r13,1) 12: 74 08 je 0x1c 14: 4c 89 ff mov %r15,%rdi 17: e8 19 09 07 fe call 0xfe070935 1c: 4d 8b 3f mov (%r15),%r15 1f: 49 83 c7 30 add $0x30,%r15 23: 4c 89 f8 mov %r15,%rax 26: 48 c1 e8 03 shr $0x3,%rax * 2a: 42 80 3c 28 00 cmpb $0x0,(%rax,%r13,1) <-- trapping instruction 2f: 74 08 je 0x39 31: 4c 89 ff mov %r15,%rdi 34: e8 fc 08 07 fe call 0xfe070935 39: 4d 3b 37 cmp (%r15),%r14 3c: 74 14 je 0x52 3e: e8 .byte 0xe8 3f: b2 .byte 0xb2 <<<<<<<<<<<<<<< tail report >>>>>>>>>>>>>>> _______________________________________________ Linux-f2fs-devel mailing list Linux-f2fs-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/linux-f2fs-devel From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-vk1-f177.google.com (mail-vk1-f177.google.com [209.85.221.177]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 1969835675B for ; Fri, 26 Jun 2026 21:28:09 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.221.177 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1782509291; cv=none; b=YrX9LxGt8Tq80+I3njMHJMcU4BUAdxq6hBRBHYxHv0lsio405pGo11kuzjcRwnARuYS5iZanW/IS8aUzjjp4qQ7NT3U26LPic/qtpI0N6xVRLE13OLdj8+AFrfnvvKPoY1LxpiBPgOfKmEHHsYhUQ0xYOiD0JTP4sQ6LDnDMek0= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1782509291; c=relaxed/simple; bh=ByHn0lsIAEnSLw323OP3N+XWxvDI2ZbrxSM1YjNUiw4=; h=Message-ID:Date:Subject:To:Cc:Content-Type:MIME-Version:From; b=IEBycrU8Cxk8B9MrHbj2tDL6EbvM61zy/Xdmo2Qh0+2NryWwG2XmqhOI6aNYfwEkrk7/uzI3QaR20afZHAn6INx3g3ENQrVoUXe7kYNRWKmBasq+13doalkiJxm5n0Gfj8iA5SbwmWUUwctt5sDnzSS/52XNzEwZERTTZqemHKw= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com; spf=pass smtp.mailfrom=gmail.com; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b=EF9QRCEE; arc=none smtp.client-ip=209.85.221.177 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=gmail.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b="EF9QRCEE" Received: by mail-vk1-f177.google.com with SMTP id 71dfb90a1353d-5bd8c2cf5baso617e0c.3 for ; Fri, 26 Jun 2026 14:28:09 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1782509289; x=1783114089; darn=vger.kernel.org; h=from:mime-version:content-transfer-encoding:content-type:cc:to :subject:date:message-id:from:to:cc:subject:date:message-id:reply-to :content-type; bh=QgL504FovBntWDuvZXZlRMaKeEpOFyF0FTdvw+iqjas=; b=EF9QRCEEac4gV0kJC6P3CxET/VySS2vHrTZ5UKtymonPbc45K30LN3hVk9++W2GnVr SA2gIn1tnaXVIFeI4VxCTfDVxQ9H5G0pWx0txpjV89/Hk1dTm15N0wOT8JKhzACn+0Ok Hv1FqvHj0KoQ/RlRQ0YL/C4iAaQeig9xS5PYXztQm9CfkCCXcWlFVQ703CpZQNjj6Zww xGNPRDzLkokn6ztU3Rcn9tBoCVoWGvpW5PwTC1v610tKozM6XJNE4TrfEGv7iz3Tqfk7 nwzYc6oo4d6xmm8+J3W09SZ1UfeLwYH7qwJZbJjUllvR+HN/XcuhpCwPwOUXDSjMYRYS mj4A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1782509289; x=1783114089; h=from:mime-version:content-transfer-encoding:content-type:cc:to :subject:date:message-id:x-gm-gg:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to:content-type; bh=QgL504FovBntWDuvZXZlRMaKeEpOFyF0FTdvw+iqjas=; b=Z4T67y25+snpZJeOvvVMvReqq3XiLL6ncTGOHxwFg5ez7tb23CVhM4dqEs/kX7AS2+ cU8hkDAFsHBWwbVcp54YrhipIYnA2aBy10vsUL/nOsQ2KsYsMamhVFS1fVUjU1lpiz/j 24W6Nf0OGu1yeDMvNC2D4TZhXDweRuSIpxIYRbCqiFcM+RjZoirOECEJMT/6N2k5Icm9 g90kfSqlZzO3eBdEFkBqB2+TwydKb7LYdO0itjIOdbpw+gVb7ohNwrY6e2zDqZrOpGqM hkMbUMn9RvO72ySZkP8lvEnEe0Cbfg34bzwMZIVsPmMkVXHt4Mpd3T2KkenuEf66dWPM 9TOA== X-Forwarded-Encrypted: i=1; AHgh+Rqnxe01omPj3Wxxa9jZyXoXILSSbLEg1EGU2cAUOLqyM9U6ZzI4nnasRIQ1DE3cvBGSfYhF+ENuVOcWPjc=@vger.kernel.org X-Gm-Message-State: AOJu0YyTgO+Um9oG6GtjtxMmOP0k7qfKIl87hj5+weVnhyUBoGquLAP8 sQsXf0AIMsTNJZPb7l6LBdqpou9f32oC24bBMpDOl7gYjKVY9saTTqfe X-Gm-Gg: AfdE7cnUnWN5YGjIMH6vVUCnkM6+psBFTTGLgs0zX00638CKmlLc2GqcOjwq3Gl8ZIZ nWSgfiZhegQKDlU9beYzoyFC1BN+EW18Iq2YZiqTYU5kuH7h+831HUjtQHsSWfh3SErPa8CgJNc ehP7R1iT3tc2jZlELv7PWxxOO4qfSBahEHBNslvrdeZamKL035RlLyS3I5D+qVuXq4M+4kT1pjE iG7hx361vDpEQiNjXB7c+mSajf213oEDM+9SQR4YKfDamI/JyAQVqFHrI0OPOyn+OGtaYuDJvB9 NlnWr3Pi5EpX4hLST/pRFAgWKrBp7DWdfHHjw3iOm3JVfb+hoLtejFnq+RwrjDIjtG1JhxYWfKP UeF9nCy5FqAaTOBPgDRjxYhrkRaB0MpFKl8BuqbJm8qEde58q5ekOhjvfPs1A9iEpKXzG6Uuv4W ZaocYzymq7zcni5HmvtCOp2pfiDCJLQpbT+m+iGoyBD6EZrmDymS2HEhYZie2O8Cr0po5ERB5ij 6TJeFJvlM0P X-Received: by 2002:ac5:c92d:0:b0:5bd:4143:6a8a with SMTP id 71dfb90a1353d-5bd69c2ca69mr1235294e0c.1.1782509288971; Fri, 26 Jun 2026 14:28:08 -0700 (PDT) Received: from [192.168.10.115] ([132.170.207.48]) by smtp.gmail.com with ESMTPSA id 71dfb90a1353d-5bd7908a922sm1841418e0c.10.2026.06.26.14.28.08 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 26 Jun 2026 14:28:08 -0700 (PDT) Message-ID: <6a3eeee8.516c2524.21c3a2.ac0d@mx.google.com> Date: Fri, 26 Jun 2026 14:28:08 -0700 (PDT) Subject: general protection fault in f2fs_in_warm_node_list To: jaegeuk@kernel.org, chao@kernel.org, linux-f2fs-devel@lists.sourceforge.net, linux-kernel@vger.kernel.org Cc: syzkaller@googlegroups.com, contact@pgazz.com Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 From: sanan.hasanou@gmail.com Good day, dear maintainers, We found a bug using a modified version of syzkaller. Kernel Branch: 7.0-rc1 Kernel Config: Unfortunately, we don't have any reproducer for this bug yet. Thank you! Best regards, Sanan Hasanov Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] SMP KASAN KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] CPU: 0 UID: 0 PID: 3043 Comm: kworker/u8:10 Not tainted 7.0.0-rc1 #1 PREEMPT_{RT,(full)} Hardware name: QEMU Ubuntu 24.04 PC v2 (i440FX + PIIX, arch_caps fix, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 Workqueue: bat_events batadv_tt_purge RIP: 0010:NODE_MAPPING fs/f2fs/f2fs.h:2260 [inline] RIP: 0010:is_node_folio fs/f2fs/f2fs.h:2270 [inline] RIP: 0010:f2fs_in_warm_node_list+0xc5/0x2a0 fs/f2fs/node.c:330 Code: 00 00 4d 03 3c 24 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 19 09 07 fe 4d 8b 3f 49 83 c7 30 4c 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 ff e8 fc 08 07 fe 4d 3b 37 74 14 e8 b2 RSP: 0018:ffffc9000e9af568 EFLAGS: 00010216 RAX: 0000000000000006 RBX: ffffea0000ed41c0 RCX: ffff88802cf2b980 RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 RBP: ffffc9000e9af590 R08: ffff8880224bd66b R09: 1ffff11004497acd R10: dffffc0000000000 R11: ffffed1004497ace R12: ffff888050544780 R13: dffffc0000000000 R14: ffff88803e405010 R15: 0000000000000030 FS: 0000000000000000(0000) GS:ffff8880dc0a8000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055a77139e428 CR3: 0000000033d4c000 CR4: 00000000000006f0 Call Trace: f2fs_write_end_io+0x785/0x1390 fs/f2fs/data.c:400 bio_endio+0x936/0x980 block/bio.c:1792 blk_update_request+0x5a5/0xe40 block/blk-mq.c:1016 blk_mq_end_request+0x4a/0x80 block/blk-mq.c:1178 blk_flush_complete_seq+0x667/0xd10 block/blk-flush.c:191 flush_end_io+0xc67/0xf40 block/blk-flush.c:251 __blk_mq_end_request+0x5bf/0x710 block/blk-mq.c:1168 blk_mq_end_request+0x5e/0x80 block/blk-mq.c:1180 lo_complete_rq+0xe3/0x260 drivers/block/loop.c:314 blk_complete_reqs block/blk-mq.c:1253 [inline] blk_done_softirq+0x10e/0x160 block/blk-mq.c:1258 handle_softirqs+0x1c7/0x690 kernel/softirq.c:622 __do_softirq kernel/softirq.c:656 [inline] __local_bh_enable_ip+0x16a/0x270 kernel/softirq.c:302 local_bh_enable include/linux/bottom_half.h:33 [inline] spin_unlock_bh include/linux/spinlock_rt.h:116 [inline] batadv_tt_global_purge net/batman-adv/translation-table.c:2250 [inline] batadv_tt_purge+0x45c/0x9e0 net/batman-adv/translation-table.c:3510 process_one_work kernel/workqueue.c:3275 [inline] process_scheduled_works+0xa5a/0x15e0 kernel/workqueue.c:3358 worker_thread+0xab9/0xff0 kernel/workqueue.c:3439 kthread+0x355/0x410 kernel/kthread.c:467 ret_from_fork+0x49c/0xa10 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:245 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:NODE_MAPPING fs/f2fs/f2fs.h:2260 [inline] RIP: 0010:is_node_folio fs/f2fs/f2fs.h:2270 [inline] RIP: 0010:f2fs_in_warm_node_list+0xc5/0x2a0 fs/f2fs/node.c:330 Code: 00 00 4d 03 3c 24 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 19 09 07 fe 4d 8b 3f 49 83 c7 30 4c 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 ff e8 fc 08 07 fe 4d 3b 37 74 14 e8 b2 RSP: 0018:ffffc9000e9af568 EFLAGS: 00010216 RAX: 0000000000000006 RBX: ffffea0000ed41c0 RCX: ffff88802cf2b980 RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 RBP: ffffc9000e9af590 R08: ffff8880224bd66b R09: 1ffff11004497acd R10: dffffc0000000000 R11: ffffed1004497ace R12: ffff888050544780 R13: dffffc0000000000 R14: ffff88803e405010 R15: 0000000000000030 FS: 0000000000000000(0000) GS:ffff8880dc0a8000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055a77139e428 CR3: 0000000033d4c000 CR4: 00000000000006f0 ---------------- Code disassembly (best guess): 0: 00 00 add %al,(%rax) 2: 4d 03 3c 24 add (%r12),%r15 6: 4c 89 f8 mov %r15,%rax 9: 48 c1 e8 03 shr $0x3,%rax d: 42 80 3c 28 00 cmpb $0x0,(%rax,%r13,1) 12: 74 08 je 0x1c 14: 4c 89 ff mov %r15,%rdi 17: e8 19 09 07 fe call 0xfe070935 1c: 4d 8b 3f mov (%r15),%r15 1f: 49 83 c7 30 add $0x30,%r15 23: 4c 89 f8 mov %r15,%rax 26: 48 c1 e8 03 shr $0x3,%rax * 2a: 42 80 3c 28 00 cmpb $0x0,(%rax,%r13,1) <-- trapping instruction 2f: 74 08 je 0x39 31: 4c 89 ff mov %r15,%rdi 34: e8 fc 08 07 fe call 0xfe070935 39: 4d 3b 37 cmp (%r15),%r14 3c: 74 14 je 0x52 3e: e8 .byte 0xe8 3f: b2 .byte 0xb2 <<<<<<<<<<<<<<< tail report >>>>>>>>>>>>>>>