Warning: Permanently added '10.128.0.212' (ECDSA) to the list of known hosts.
[ 36.027278] IPVS: ftp: loaded support on port[0] = 21
executing program
[ 36.144350] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 37.853407] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer
[ 42.928301] ==================================================================
[ 42.935692] BUG: KASAN: use-after-free in __lock_acquire+0x2c57/0x3f20
[ 42.942334] Read of size 8 at addr ffff8880b3866920 by task swapper/1/0
[ 42.949063]
[ 42.950695] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 4.14.305-syzkaller #0
[ 42.957788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023
[ 42.967121] Call Trace:
[ 42.969687]
[ 42.971830] dump_stack+0x1b2/0x281
[ 42.975446] print_address_description.cold+0x54/0x1d3
[ 42.980706] kasan_report_error.cold+0x8a/0x191
[ 42.985374] ? __lock_acquire+0x2c57/0x3f20
[ 42.989681] __asan_report_load8_noabort+0x68/0x70
[ 42.994603] ? __lock_acquire+0x2c57/0x3f20
[ 42.998995] __lock_acquire+0x2c57/0x3f20
[ 43.003126] ? save_trace+0xd6/0x290
[ 43.006832] ? mark_lock+0x64e/0x1050
[ 43.010620] ? check_usage_forwards+0x2d0/0x2d0
[ 43.015270] ? __lock_acquire+0x5fc/0x3f20
[ 43.019489] ? trace_hardirqs_on+0x10/0x10
[ 43.023758] ? __lock_acquire+0x2190/0x3f20
[ 43.028092] ? trace_hardirqs_on+0x10/0x10
[ 43.032322] lock_acquire+0x170/0x3f0
[ 43.036104] ? try_to_wake_up+0x6a/0x1100
[ 43.040241] _raw_spin_lock_irqsave+0x8c/0xc0
[ 43.044711] ? try_to_wake_up+0x6a/0x1100
[ 43.048850] try_to_wake_up+0x6a/0x1100
[ 43.052804] ? lock_acquire+0x170/0x3f0
[ 43.056757] ? migrate_swap_stop+0x880/0x880
[ 43.061147] ? rcu_lockdep_current_cpu_online+0xed/0x140
[ 43.066576] call_timer_fn+0x14a/0x650
[ 43.070466] ? nilfs_transaction_unlock+0x470/0x470
[ 43.075470] ? collect_expired_timers+0x250/0x250
[ 43.080291] ? _raw_spin_unlock_irq+0x24/0x80
[ 43.084762] ? nilfs_transaction_unlock+0x470/0x470
[ 43.089903] expire_timers+0x232/0x4d0
[ 43.093816] run_timer_softirq+0x1d5/0x5a0
[ 43.098029] ? expire_timers+0x4d0/0x4d0
[ 43.102070] ? kvm_clock_read+0x1f/0x30
[ 43.106030] ? kvm_sched_clock_read+0x5/0x10
[ 43.110414] ? sched_clock+0x2a/0x40
[ 43.114107] ? rcu_lockdep_current_cpu_online+0xed/0x140
[ 43.119544] __do_softirq+0x24d/0x9ff
[ 43.123330] ? check_preemption_disabled+0x35/0x240
[ 43.128325] irq_exit+0x193/0x240
[ 43.131764] smp_apic_timer_interrupt+0x141/0x5e0
[ 43.136589] apic_timer_interrupt+0x93/0xa0
[ 43.140892]
[ 43.143110] RIP: 0010:native_safe_halt+0xe/0x10
[ 43.147842] RSP: 0018:ffff8880b5477e68 EFLAGS: 000002c6 ORIG_RAX: ffffffffffffff10
[ 43.155528] RAX: 1ffffffff11e13dc RBX: dffffc0000000000 RCX: 0000000000000000
[ 43.162785] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffff8880b5464bc4
[ 43.170041] RBP: ffffffff88f09ed0 R08: ffffffff88cccd68 R09: 0000000000000000
[ 43.177288] R10: 0000000000000000 R11: 0000000000000000 R12: ffffed1016a8c868
[ 43.184535] R13: ffff8880b5464340 R14: 0000000000000000 R15: 0000000000000000
[ 43.191786] default_idle+0x47/0x370
[ 43.195478] do_idle+0x250/0x3c0
[ 43.198830] cpu_startup_entry+0x14/0x20
[ 43.202872] start_secondary+0x4db/0x670
[ 43.206917] ? set_cpu_sibling_map+0x1680/0x1680
[ 43.211653] secondary_startup_64+0xa5/0xb0
[ 43.215950]
[ 43.217558] Allocated by task 2:
[ 43.220909] kasan_kmalloc+0xeb/0x160
[ 43.224688] kmem_cache_alloc_node+0x146/0x410
[ 43.229264] copy_process.part.0+0x17d3/0x71c0
[ 43.233824] _do_fork+0x184/0xc80
[ 43.237255] kernel_thread+0x2f/0x40
[ 43.240945] kthreadd+0x51a/0x770
[ 43.244375] ret_from_fork+0x24/0x30
[ 43.248076]
[ 43.249682] Freed by task 0:
[ 43.252679] kasan_slab_free+0xc3/0x1a0
[ 43.256631] kmem_cache_free+0x7c/0x2b0
[ 43.260585] __put_task_struct+0x276/0x470
[ 43.264807] delayed_put_task_struct+0x1fb/0x2e0
[ 43.269542] rcu_process_callbacks+0x780/0x1180
[ 43.274190] __do_softirq+0x24d/0x9ff
[ 43.277964]
[ 43.279582] The buggy address belongs to the object at ffff8880b3866140
[ 43.279582] which belongs to the cache task_struct of size 6144
[ 43.292304] The buggy address is located 2016 bytes inside of
[ 43.292304] 6144-byte region [ffff8880b3866140, ffff8880b3867940)
[ 43.304324] The buggy address belongs to the page:
[ 43.309233] page:ffffea0002ce1980 count:1 mapcount:0 mapping:ffff8880b3866140 index:0x0 compound_mapcount: 0
[ 43.319179] flags: 0xfff00000008100(slab|head)
[ 43.323744] raw: 00fff00000008100 ffff8880b3866140 0000000000000000 0000000100000001
[ 43.331606] raw: ffffea0002cd0c20 ffffea00025d3aa0 ffff88823f8307c0 0000000000000000
[ 43.339470] page dumped because: kasan: bad access detected
[ 43.345154]
[ 43.346757] Memory state around the buggy address:
[ 43.351665] ffff8880b3866800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 43.359005] ffff8880b3866880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 43.366340] >ffff8880b3866900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 43.373674] ^
[ 43.378061] ffff8880b3866980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 43.385396] ffff8880b3866a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 43.392728] ==================================================================
[ 43.400063] Disabling lock debugging due to kernel taint
[ 43.405492] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 43.405492]
[ 43.413440] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 4.14.305-syzkaller #0
[ 43.421738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023
[ 43.431064] Call Trace:
[ 43.433627]
[ 43.435768] dump_stack+0x1b2/0x281
[ 43.439373] panic+0x21d/0x451
[ 43.442551] ? add_taint.cold+0x16/0x16
[ 43.446530] ? lock_downgrade+0x740/0x740
[ 43.450662] check_panic_on_warn.cold+0x19/0x35
[ 43.455309] kasan_end_report+0x3a/0x40
[ 43.459261] kasan_report_error.cold+0xa7/0x191
[ 43.463909] ? __lock_acquire+0x2c57/0x3f20
[ 43.468212] __asan_report_load8_noabort+0x68/0x70
[ 43.473122] ? __lock_acquire+0x2c57/0x3f20
[ 43.477418] __lock_acquire+0x2c57/0x3f20
[ 43.481547] ? save_trace+0xd6/0x290
[ 43.485241] ? mark_lock+0x64e/0x1050
[ 43.489021] ? check_usage_forwards+0x2d0/0x2d0
[ 43.493667] ? __lock_acquire+0x5fc/0x3f20
[ 43.497890] ? trace_hardirqs_on+0x10/0x10
[ 43.502114] ? __lock_acquire+0x2190/0x3f20
[ 43.506414] ? trace_hardirqs_on+0x10/0x10
[ 43.510626] lock_acquire+0x170/0x3f0
[ 43.514411] ? try_to_wake_up+0x6a/0x1100
[ 43.518542] _raw_spin_lock_irqsave+0x8c/0xc0
[ 43.523014] ? try_to_wake_up+0x6a/0x1100
[ 43.527136] try_to_wake_up+0x6a/0x1100
[ 43.531089] ? lock_acquire+0x170/0x3f0
[ 43.535049] ? migrate_swap_stop+0x880/0x880
[ 43.539437] ? rcu_lockdep_current_cpu_online+0xed/0x140
[ 43.544868] call_timer_fn+0x14a/0x650
[ 43.548775] ? nilfs_transaction_unlock+0x470/0x470
[ 43.553773] ? collect_expired_timers+0x250/0x250
[ 43.558596] ? _raw_spin_unlock_irq+0x24/0x80
[ 43.563073] ? nilfs_transaction_unlock+0x470/0x470
[ 43.568077] expire_timers+0x232/0x4d0
[ 43.571947] run_timer_softirq+0x1d5/0x5a0
[ 43.576168] ? expire_timers+0x4d0/0x4d0
[ 43.580210] ? kvm_clock_read+0x1f/0x30
[ 43.584161] ? kvm_sched_clock_read+0x5/0x10
[ 43.588562] ? sched_clock+0x2a/0x40
[ 43.592259] ? rcu_lockdep_current_cpu_online+0xed/0x140
[ 43.597691] __do_softirq+0x24d/0x9ff
[ 43.601478] ? check_preemption_disabled+0x35/0x240
[ 43.606479] irq_exit+0x193/0x240
[ 43.609916] smp_apic_timer_interrupt+0x141/0x5e0
[ 43.614738] apic_timer_interrupt+0x93/0xa0
[ 43.619035]
[ 43.621252] RIP: 0010:native_safe_halt+0xe/0x10
[ 43.625891] RSP: 0018:ffff8880b5477e68 EFLAGS: 000002c6 ORIG_RAX: ffffffffffffff10
[ 43.633576] RAX: 1ffffffff11e13dc RBX: dffffc0000000000 RCX: 0000000000000000
[ 43.640833] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffff8880b5464bc4
[ 43.648082] RBP: ffffffff88f09ed0 R08: ffffffff88cccd68 R09: 0000000000000000
[ 43.655332] R10: 0000000000000000 R11: 0000000000000000 R12: ffffed1016a8c868
[ 43.662582] R13: ffff8880b5464340 R14: 0000000000000000 R15: 0000000000000000
[ 43.669839] default_idle+0x47/0x370
[ 43.673535] do_idle+0x250/0x3c0
[ 43.676880] cpu_startup_entry+0x14/0x20
[ 43.680918] start_secondary+0x4db/0x670
[ 43.684957] ? set_cpu_sibling_map+0x1680/0x1680
[ 43.689690] secondary_startup_64+0xa5/0xb0
[ 43.694327] Kernel Offset: disabled
[ 43.697940] Rebooting in 86400 seconds..