Warning: Permanently added '10.128.0.161' (ED25519) to the list of known hosts. [ 35.323237][ T6086] syz-executor285[6086]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set executing program [ 35.337709][ T6086] loop0: detected capacity change from 0 to 2048 [ 35.348007][ T6088] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 35.352698][ T6086] syz-executor285: attempt to access beyond end of device [ 35.352698][ T6086] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048 [ 35.358848][ T6086] syz-executor285: attempt to access beyond end of device [ 35.358848][ T6086] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048 executing program [ 35.393291][ T6089] loop0: detected capacity change from 0 to 2048 [ 35.404058][ T6090] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 35.405609][ T6089] syz-executor285: attempt to access beyond end of device [ 35.405609][ T6089] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048 [ 35.413788][ T6089] syz-executor285: attempt to access beyond end of device [ 35.413788][ T6089] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048 executing program [ 35.447264][ T6091] loop0: detected capacity change from 0 to 2048 [ 35.453925][ T6092] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 35.458256][ T6091] syz-executor285: attempt to access beyond end of device [ 35.458256][ T6091] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048 [ 35.464128][ T6091] syz-executor285: attempt to access beyond end of device [ 35.464128][ T6091] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048 executing program [ 35.506321][ T6093] loop0: detected capacity change from 0 to 2048 [ 35.513103][ T6094] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 35.517184][ T6093] syz-executor285: attempt to access beyond end of device [ 35.517184][ T6093] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048 [ 35.524932][ T6093] syz-executor285: attempt to access beyond end of device [ 35.524932][ T6093] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048 executing program [ 35.558529][ T6095] loop0: detected capacity change from 0 to 2048 [ 35.565176][ T6096] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 35.569373][ T6095] syz-executor285: attempt to access beyond end of device [ 35.569373][ T6095] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048 [ 35.574179][ T6095] syz-executor285: attempt to access beyond end of device [ 35.574179][ T6095] loop0: rw=0, sector=5066549580791844, nr_sectors = 2 limit=2048 executing program [ 35.605245][ T6097] loop0: detected capacity change from 0 to 2048 [ 35.612916][ T6098] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 35.646100][ T6099] loop0: detected capacity change from 0 to 2048 [ 35.653211][ T6100] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 35.686889][ T6101] loop0: detected capacity change from 0 to 2048 [ 35.694440][ T6102] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 35.724645][ T6103] loop0: detected capacity change from 0 to 2048 [ 35.732116][ T6104] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 35.765638][ T6105] loop0: detected capacity change from 0 to 2048 [ 35.772722][ T6106] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 35.812503][ T6107] loop0: detected capacity change from 0 to 2048 [ 35.818893][ T6108] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 35.856459][ T6109] loop0: detected capacity change from 0 to 2048 [ 35.863602][ T6110] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 35.902975][ T6111] loop0: detected capacity change from 0 to 2048 [ 35.913568][ T6112] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 35.941380][ T6113] loop0: detected capacity change from 0 to 2048 [ 35.948841][ T6114] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 35.985577][ T6115] loop0: detected capacity change from 0 to 2048 [ 35.991640][ T6116] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 36.020361][ T6117] loop0: detected capacity change from 0 to 2048 [ 36.026188][ T6118] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 36.065805][ T6119] loop0: detected capacity change from 0 to 2048 [ 36.071259][ T6120] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 36.110896][ T6121] loop0: detected capacity change from 0 to 2048 [ 36.117206][ T6122] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 36.160311][ T6123] loop0: detected capacity change from 0 to 2048 [ 36.167062][ T6124] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 36.205430][ T6125] loop0: detected capacity change from 0 to 2048 [ 36.213086][ T6126] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 36.247538][ T6127] loop0: detected capacity change from 0 to 2048 [ 36.262253][ T6128] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 36.296724][ T6129] loop0: detected capacity change from 0 to 2048 [ 36.303260][ T6130] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 36.339830][ T6131] loop0: detected capacity change from 0 to 2048 [ 36.347012][ T6132] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 36.384961][ T6133] loop0: detected capacity change from 0 to 2048 [ 36.392526][ T6134] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 36.430722][ T6135] loop0: detected capacity change from 0 to 2048 [ 36.436370][ T6136] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 36.491793][ T6137] loop0: detected capacity change from 0 to 2048 [ 36.497632][ T6138] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 36.540633][ T6139] loop0: detected capacity change from 0 to 2048 [ 36.546796][ T6140] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 36.582284][ T6141] loop0: detected capacity change from 0 to 2048 [ 36.590253][ T6142] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 36.634590][ T6143] loop0: detected capacity change from 0 to 2048 [ 36.640725][ T6144] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 36.670999][ T6145] loop0: detected capacity change from 0 to 2048 [ 36.681075][ T6146] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 36.717947][ T6147] loop0: detected capacity change from 0 to 2048 [ 36.726388][ T6148] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 36.756282][ T6149] loop0: detected capacity change from 0 to 2048 [ 36.762214][ T6150] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 36.795149][ T6151] loop0: detected capacity change from 0 to 2048 [ 36.802136][ T6152] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 36.852022][ T6153] loop0: detected capacity change from 0 to 2048 [ 36.857453][ T6154] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 36.885750][ T6155] loop0: detected capacity change from 0 to 2048 [ 36.893328][ T6156] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 36.932067][ T6157] loop0: detected capacity change from 0 to 2048 [ 36.938072][ T6158] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 36.970879][ T6159] loop0: detected capacity change from 0 to 2048 [ 36.981722][ T6160] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 37.026536][ T6161] loop0: detected capacity change from 0 to 2048 [ 37.032562][ T6162] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 37.063996][ T6163] loop0: detected capacity change from 0 to 2048 [ 37.070281][ T6164] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 37.115110][ T6165] loop0: detected capacity change from 0 to 2048 [ 37.121429][ T6166] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 37.155273][ T6167] loop0: detected capacity change from 0 to 2048 [ 37.161542][ T6168] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 37.194763][ T6169] loop0: detected capacity change from 0 to 2048 [ 37.208598][ T6170] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 37.245693][ T6171] loop0: detected capacity change from 0 to 2048 [ 37.251369][ T6172] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 37.281912][ T6173] loop0: detected capacity change from 0 to 2048 [ 37.289616][ T6174] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 37.334930][ T6175] loop0: detected capacity change from 0 to 2048 [ 37.343172][ T6176] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 37.382602][ T6177] loop0: detected capacity change from 0 to 2048 [ 37.388844][ T6178] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 37.422639][ T6179] loop0: detected capacity change from 0 to 2048 [ 37.432654][ T6180] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 37.463006][ T6181] loop0: detected capacity change from 0 to 2048 [ 37.471247][ T6182] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 37.506137][ T6183] loop0: detected capacity change from 0 to 2048 [ 37.513669][ T6184] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 37.540598][ T6185] loop0: detected capacity change from 0 to 2048 [ 37.547351][ T6186] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 37.574515][ T6187] loop0: detected capacity change from 0 to 2048 [ 37.580246][ T6188] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 37.615901][ T6189] loop0: detected capacity change from 0 to 2048 [ 37.622100][ T6190] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 37.656645][ T6191] loop0: detected capacity change from 0 to 2048 [ 37.663289][ T6192] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 37.692166][ T6193] loop0: detected capacity change from 0 to 2048 [ 37.710257][ T6194] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 37.749898][ T6195] loop0: detected capacity change from 0 to 2048 [ 37.755883][ T6196] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 37.797070][ T6197] loop0: detected capacity change from 0 to 2048 [ 37.803538][ T6198] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 37.838585][ T6199] loop0: detected capacity change from 0 to 2048 [ 37.847585][ T6200] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 37.881082][ T6201] loop0: detected capacity change from 0 to 2048 [ 37.888777][ T6202] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 37.922050][ T6203] loop0: detected capacity change from 0 to 2048 [ 37.928241][ T6204] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 37.964018][ T6205] loop0: detected capacity change from 0 to 2048 [ 37.973115][ T6206] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 38.010746][ T6207] loop0: detected capacity change from 0 to 2048 [ 38.019839][ T6208] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 38.062632][ T6209] loop0: detected capacity change from 0 to 2048 [ 38.071218][ T6210] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 38.103686][ T6211] loop0: detected capacity change from 0 to 2048 [ 38.111474][ T6212] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 38.143871][ T6213] loop0: detected capacity change from 0 to 2048 [ 38.153221][ T6214] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 38.183828][ T6215] loop0: detected capacity change from 0 to 2048 [ 38.191040][ T6216] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 38.236935][ T6217] loop0: detected capacity change from 0 to 2048 [ 38.242899][ T6218] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 38.281460][ T6219] loop0: detected capacity change from 0 to 2048 [ 38.286662][ T6220] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 38.316800][ T6221] loop0: detected capacity change from 0 to 2048 [ 38.325076][ T6222] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 38.358807][ T6223] loop0: detected capacity change from 0 to 2048 [ 38.366611][ T6224] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 38.419958][ T6225] loop0: detected capacity change from 0 to 2048 [ 38.425586][ T6226] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 38.491716][ T6227] loop0: detected capacity change from 0 to 2048 [ 38.500996][ T6228] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 38.534770][ T6229] loop0: detected capacity change from 0 to 2048 [ 38.543213][ T6230] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 38.585505][ T6231] loop0: detected capacity change from 0 to 2048 [ 38.601448][ T6232] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 38.647001][ T6233] loop0: detected capacity change from 0 to 2048 [ 38.656041][ T6234] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 38.694246][ T6235] loop0: detected capacity change from 0 to 2048 [ 38.699720][ T6236] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 38.739137][ T6237] loop0: detected capacity change from 0 to 2048 [ 38.745598][ T6238] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 38.788000][ T6239] loop0: detected capacity change from 0 to 2048 [ 38.793908][ T6240] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 38.827156][ T6241] loop0: detected capacity change from 0 to 2048 [ 38.833949][ T6242] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 38.874499][ T6243] loop0: detected capacity change from 0 to 2048 [ 38.884399][ T6244] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds executing program [ 38.912158][ T6245] loop0: detected capacity change from 0 to 2048 [ 38.919609][ T6246] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 43.969489][ C1] ================================================================== [ 43.971457][ C1] BUG: KASAN: slab-use-after-free in __lock_acquire+0x114/0x75e8 [ 43.973441][ C1] Read of size 8 at addr ffff0000c8a34118 by task swapper/1/0 [ 43.975162][ C1] [ 43.975771][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 [ 43.977972][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 43.980450][ C1] Call trace: [ 43.981256][ C1] dump_backtrace+0x1b8/0x1e4 [ 43.982367][ C1] show_stack+0x2c/0x44 [ 43.983425][ C1] dump_stack_lvl+0xd0/0x124 [ 43.984544][ C1] print_report+0x174/0x514 [ 43.985682][ C1] kasan_report+0xd8/0x138 [ 43.986827][ C1] __asan_report_load8_noabort+0x20/0x2c [ 43.988275][ C1] __lock_acquire+0x114/0x75e8 [ 43.989390][ C1] lock_acquire+0x23c/0x71c [ 43.990503][ C1] _raw_spin_lock_irqsave+0x5c/0x7c [ 43.991809][ C1] try_to_wake_up+0xb0/0xe80 [ 43.992976][ C1] wake_up_process+0x18/0x24 [ 43.994148][ C1] nilfs_construction_timeout+0x40/0x50 [ 43.995511][ C1] call_timer_fn+0x19c/0x8cc [ 43.996703][ C1] __run_timers+0x55c/0x734 [ 43.997864][ C1] run_timer_softirq+0x7c/0x114 [ 43.999061][ C1] __do_softirq+0x2d0/0xd54 [ 44.000206][ C1] ____do_softirq+0x14/0x20 [ 44.001361][ C1] call_on_irq_stack+0x24/0x4c [ 44.002571][ C1] do_softirq_own_stack+0x20/0x2c [ 44.003891][ C1] __irq_exit_rcu+0x200/0x494 [ 44.005058][ C1] irq_exit_rcu+0x14/0x84 [ 44.006133][ C1] el1_interrupt+0x38/0x68 [ 44.007228][ C1] el1h_64_irq_handler+0x18/0x24 [ 44.008511][ C1] el1h_64_irq+0x64/0x68 [ 44.009525][ C1] arch_local_irq_enable+0x8/0xc [ 44.010743][ C1] do_idle+0x1f0/0x4e8 [ 44.011832][ C1] cpu_startup_entry+0x5c/0x74 [ 44.013050][ C1] secondary_start_kernel+0x198/0x1c0 [ 44.014509][ C1] __secondary_switched+0xb8/0xbc [ 44.015906][ C1] [ 44.016488][ C1] Allocated by task 2: [ 44.017494][ C1] kasan_set_track+0x4c/0x7c [ 44.018658][ C1] kasan_save_alloc_info+0x24/0x30 [ 44.019878][ C1] __kasan_slab_alloc+0x74/0x8c [ 44.021190][ C1] slab_post_alloc_hook+0x90/0x4a0 [ 44.022429][ C1] kmem_cache_alloc_node+0x2c8/0x46c [ 44.023742][ C1] dup_task_struct+0x74/0x888 [ 44.024920][ C1] copy_process+0x488/0x34b8 [ 44.026061][ C1] kernel_clone+0x1d8/0x80c [ 44.027157][ C1] kernel_thread+0x184/0x200 [ 44.028337][ C1] kthreadd+0x464/0x670 [ 44.029430][ C1] ret_from_fork+0x10/0x20 [ 44.030584][ C1] [ 44.031144][ C1] Freed by task 0: [ 44.032024][ C1] kasan_set_track+0x4c/0x7c [ 44.033162][ C1] kasan_save_free_info+0x38/0x5c [ 44.034438][ C1] ____kasan_slab_free+0x144/0x1c0 [ 44.035770][ C1] __kasan_slab_free+0x18/0x28 [ 44.036931][ C1] kmem_cache_free+0x2e4/0x56c [ 44.038116][ C1] free_task+0xe8/0x14c [ 44.039150][ C1] __put_task_struct+0x178/0x210 [ 44.040393][ C1] put_task_struct+0x88/0x10c [ 44.041591][ C1] delayed_put_task_struct+0xdc/0x2d8 [ 44.042921][ C1] rcu_core+0x8a4/0x1b28 [ 44.044009][ C1] rcu_core_si+0x10/0x1c [ 44.045105][ C1] __do_softirq+0x2d0/0xd54 [ 44.046202][ C1] [ 44.046813][ C1] Last potentially related work creation: [ 44.048245][ C1] kasan_save_stack+0x40/0x6c [ 44.049447][ C1] __kasan_record_aux_stack+0xcc/0xe8 [ 44.050786][ C1] kasan_record_aux_stack_noalloc+0x14/0x20 [ 44.052196][ C1] call_rcu+0x104/0xaf4 [ 44.053220][ C1] put_task_struct_rcu_user+0x70/0xd8 [ 44.054578][ C1] finish_task_switch+0x5b4/0x614 [ 44.055827][ C1] __schedule+0x1368/0x23b4 [ 44.056952][ C1] schedule+0xc4/0x170 [ 44.057989][ C1] worker_thread+0xb64/0xef4 [ 44.059115][ C1] kthread+0x288/0x310 [ 44.060169][ C1] ret_from_fork+0x10/0x20 [ 44.061292][ C1] [ 44.061889][ C1] Second to last potentially related work creation: [ 44.063533][ C1] kasan_save_stack+0x40/0x6c [ 44.064643][ C1] __kasan_record_aux_stack+0xcc/0xe8 [ 44.066006][ C1] kasan_record_aux_stack_noalloc+0x14/0x20 [ 44.067515][ C1] call_rcu+0x104/0xaf4 [ 44.068556][ C1] release_task+0x145c/0x1544 [ 44.069748][ C1] wait_consider_task+0x15d0/0x2660 [ 44.071052][ C1] do_wait+0x2f4/0xac8 [ 44.072074][ C1] kernel_wait4+0x24c/0x3d8 [ 44.073169][ C1] __arm64_sys_wait4+0x11c/0x2a0 [ 44.074392][ C1] invoke_syscall+0x98/0x2b8 [ 44.075565][ C1] el0_svc_common+0x130/0x23c [ 44.076726][ C1] do_el0_svc+0x48/0x58 [ 44.077753][ C1] el0_svc+0x54/0x158 [ 44.078758][ C1] el0t_64_sync_handler+0x84/0xfc [ 44.079967][ C1] el0t_64_sync+0x190/0x194 [ 44.081052][ C1] [ 44.081610][ C1] The buggy address belongs to the object at ffff0000c8a33780 [ 44.081610][ C1] which belongs to the cache task_struct of size 6848 [ 44.085090][ C1] The buggy address is located 2456 bytes inside of [ 44.085090][ C1] freed 6848-byte region [ffff0000c8a33780, ffff0000c8a35240) [ 44.088584][ C1] [ 44.089165][ C1] The buggy address belongs to the physical page: [ 44.090752][ C1] page:00000000e885fc14 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108a30 [ 44.093224][ C1] head:00000000e885fc14 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 44.095431][ C1] anon flags: 0x5ffc00000000840(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 44.097491][ C1] page_type: 0xffffffff() [ 44.098595][ C1] raw: 05ffc00000000840 ffff0000c185a500 0000000000000000 0000000000000001 [ 44.100713][ C1] raw: 0000000000000000 0000000080040004 00000001ffffffff 0000000000000000 [ 44.102863][ C1] page dumped because: kasan: bad access detected [ 44.104494][ C1] [ 44.105071][ C1] Memory state around the buggy address: [ 44.106470][ C1] ffff0000c8a34000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 44.108487][ C1] ffff0000c8a34080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 44.110490][ C1] >ffff0000c8a34100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 44.112579][ C1] ^ [ 44.113785][ C1] ffff0000c8a34180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 44.115823][ C1] ffff0000c8a34200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 44.117821][ C1] ================================================================== [ 44.119820][ C1] Disabling lock debugging due to kernel taint