Warning: Permanently added '10.128.1.166' (ECDSA) to the list of known hosts. executing program [ 126.099665][ T5006] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5006 'syz-executor326' executing program [ 126.284342][ T5006] loop0: detected capacity change from 0 to 32768 [ 126.560484][ T5009] loop0: detected capacity change from 0 to 32768 executing program executing program [ 127.359021][ T5012] loop0: detected capacity change from 0 to 32768 executing program [ 127.608593][ T5014] loop0: detected capacity change from 0 to 32768 executing program [ 127.857646][ T5016] loop0: detected capacity change from 0 to 32768 executing program [ 128.107755][ T5018] loop0: detected capacity change from 0 to 32768 executing program [ 128.359037][ T5020] loop0: detected capacity change from 0 to 32768 executing program [ 128.622568][ T5022] loop0: detected capacity change from 0 to 32768 [ 128.861797][ T5024] loop0: detected capacity change from 0 to 32768 executing program executing program [ 129.394044][ T5027] loop0: detected capacity change from 0 to 32768 executing program [ 129.645271][ T5029] loop0: detected capacity change from 0 to 32768 executing program [ 129.889534][ T5031] loop0: detected capacity change from 0 to 32768 [ 130.124084][ T5033] loop0: detected capacity change from 0 to 32768 executing program executing program [ 130.406707][ T5035] loop0: detected capacity change from 0 to 32768 executing program [ 130.656705][ T5037] loop0: detected capacity change from 0 to 32768 executing program [ 130.906606][ T5039] loop0: detected capacity change from 0 to 32768 [ 131.152212][ T5041] loop0: detected capacity change from 0 to 32768 executing program executing program [ 131.432677][ T5043] loop0: detected capacity change from 0 to 32768 executing program [ 131.689587][ T5045] loop0: detected capacity change from 0 to 32768 executing program [ 131.933129][ T5047] loop0: detected capacity change from 0 to 32768 [ 132.181400][ T5049] loop0: detected capacity change from 0 to 32768 executing program executing program [ 132.458703][ T5051] loop0: detected capacity change from 0 to 32768 executing program [ 132.701090][ T5053] loop0: detected capacity change from 0 to 32768 executing program [ 132.948479][ T5055] loop0: detected capacity change from 0 to 32768 executing program [ 133.195434][ T5057] loop0: detected capacity change from 0 to 32768 [ 133.443867][ T5059] loop0: detected capacity change from 0 to 32768 executing program [ 133.715886][ T5061] loop0: detected capacity change from 0 to 32768 executing program [ 133.997926][ T5063] loop0: detected capacity change from 0 to 32768 executing program executing program [ 134.268296][ T5065] loop0: detected capacity change from 0 to 32768 executing program [ 134.512705][ T5067] loop0: detected capacity change from 0 to 32768 executing program [ 134.755040][ T5069] loop0: detected capacity change from 0 to 32768 executing program [ 134.994927][ T5071] loop0: detected capacity change from 0 to 32768 executing program [ 135.241152][ T5073] loop0: detected capacity change from 0 to 32768 executing program [ 135.484301][ T5075] loop0: detected capacity change from 0 to 32768 executing program [ 135.726709][ T5077] loop0: detected capacity change from 0 to 32768 executing program [ 135.976567][ T5079] loop0: detected capacity change from 0 to 32768 executing program [ 136.220710][ T5081] loop0: detected capacity change from 0 to 32768 executing program [ 136.471808][ T5083] loop0: detected capacity change from 0 to 32768 executing program [ 136.728533][ T5085] loop0: detected capacity change from 0 to 32768 executing program [ 136.980524][ T5087] loop0: detected capacity change from 0 to 32768 executing program [ 137.225839][ T5089] loop0: detected capacity change from 0 to 32768 executing program [ 137.473712][ T5091] loop0: detected capacity change from 0 to 32768 [ 137.722609][ T5093] loop0: detected capacity change from 0 to 32768 executing program [ 137.997934][ T5095] loop0: detected capacity change from 0 to 32768 executing program [ 138.798271][ T5098] loop0: detected capacity change from 0 to 32768 executing program executing program [ 139.060006][ T5100] loop0: detected capacity change from 0 to 32768 executing program [ 139.313912][ T5102] loop0: detected capacity change from 0 to 32768 executing program [ 139.563612][ T5104] loop0: detected capacity change from 0 to 32768 executing program [ 139.818112][ T5106] loop0: detected capacity change from 0 to 32768 executing program [ 140.065467][ T5108] loop0: detected capacity change from 0 to 32768 executing program [ 140.312064][ T5110] loop0: detected capacity change from 0 to 32768 executing program [ 140.558445][ T5112] loop0: detected capacity change from 0 to 32768 [ 140.806282][ T5114] loop0: detected capacity change from 0 to 32768 executing program [ 141.086507][ T5116] loop0: detected capacity change from 0 to 32768 executing program [ 141.373056][ T5118] loop0: detected capacity change from 0 to 32768 executing program executing program [ 141.681266][ T5120] loop0: detected capacity change from 0 to 32768 executing program [ 141.917792][ T5122] loop0: detected capacity change from 0 to 32768 executing program [ 142.150734][ T5124] loop0: detected capacity change from 0 to 32768 executing program [ 142.394398][ T5126] loop0: detected capacity change from 0 to 32768 executing program [ 142.642488][ T5128] loop0: detected capacity change from 0 to 32768 executing program [ 142.888499][ T5130] loop0: detected capacity change from 0 to 32768 executing program [ 143.136075][ T5132] loop0: detected capacity change from 0 to 32768 [ 143.386475][ T5134] loop0: detected capacity change from 0 to 32768 executing program [ 143.666849][ T5136] loop0: detected capacity change from 0 to 32768 executing program [ 143.946604][ T5138] loop0: detected capacity change from 0 to 32768 executing program executing program [ 144.231287][ T5140] loop0: detected capacity change from 0 to 32768 executing program [ 144.487179][ T5142] loop0: detected capacity change from 0 to 32768 executing program [ 144.732654][ T5144] loop0: detected capacity change from 0 to 32768 [ 144.988784][ T5146] loop0: detected capacity change from 0 to 32768 [ 145.549220][ T5147] read_mapping_page failed! [ 145.554016][ T5147] jfs_mount_rw: diMount failed! [ 145.562714][ T5004] ================================================================== [ 145.570793][ T5004] BUG: KASAN: double-free in diUnmount+0xf3/0x100 [ 145.577227][ T5004] Free of addr ffff88807d330000 by task syz-executor326/5004 [ 145.584679][ T5004] [ 145.587004][ T5004] CPU: 1 PID: 5004 Comm: syz-executor326 Not tainted 6.4.0-syzkaller-09904-ga507db1d8fdc #0 [ 145.597153][ T5004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 145.607207][ T5004] Call Trace: [ 145.610481][ T5004] [ 145.613410][ T5004] dump_stack_lvl+0x1e7/0x2d0 [ 145.618174][ T5004] ? irq_work_queue+0xca/0x150 [ 145.622961][ T5004] ? nf_tcp_handle_invalid+0x650/0x650 [ 145.628422][ T5004] ? panic+0x770/0x770 [ 145.632493][ T5004] ? _printk+0xd5/0x120 [ 145.636654][ T5004] ? diUnmount+0xf3/0x100 [ 145.640981][ T5004] print_report+0x163/0x540 [ 145.645492][ T5004] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 145.651394][ T5004] ? _raw_spin_unlock+0x40/0x40 [ 145.656252][ T5004] ? __virt_addr_valid+0x22f/0x2e0 [ 145.661373][ T5004] ? __phys_addr+0xba/0x170 [ 145.665896][ T5004] ? diUnmount+0xf3/0x100 [ 145.670231][ T5004] ? diUnmount+0xf3/0x100 [ 145.674574][ T5004] kasan_report_invalid_free+0xeb/0x110 [ 145.680140][ T5004] ? diUnmount+0xf3/0x100 [ 145.684473][ T5004] ____kasan_slab_free+0xfb/0x120 [ 145.689525][ T5004] __kmem_cache_free+0x25f/0x3b0 [ 145.694476][ T5004] ? diUnmount+0xf3/0x100 [ 145.698810][ T5004] diUnmount+0xf3/0x100 [ 145.702968][ T5004] jfs_umount+0x186/0x3a0 [ 145.707304][ T5004] jfs_put_super+0x8a/0x190 [ 145.711815][ T5004] ? jfs_free_inode+0x30/0x30 [ 145.716677][ T5004] generic_shutdown_super+0x134/0x340 [ 145.722054][ T5004] kill_block_super+0x68/0xa0 [ 145.726739][ T5004] deactivate_locked_super+0xa4/0x110 [ 145.732115][ T5004] cleanup_mnt+0x426/0x4c0 [ 145.736536][ T5004] ? _raw_spin_unlock_irq+0x23/0x50 [ 145.741746][ T5004] task_work_run+0x24a/0x300 [ 145.746350][ T5004] ? task_work_cancel+0x2b0/0x2b0 [ 145.751383][ T5004] ? exit_to_user_mode_loop+0x39/0x100 [ 145.756847][ T5004] exit_to_user_mode_loop+0xd9/0x100 [ 145.762137][ T5004] exit_to_user_mode_prepare+0xb1/0x140 [ 145.767700][ T5004] syscall_exit_to_user_mode+0x64/0x280 [ 145.773257][ T5004] do_syscall_64+0x4d/0xc0 [ 145.777680][ T5004] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 145.783588][ T5004] RIP: 0033:0x7fad688c7a17 [ 145.788092][ T5004] Code: ff d0 48 89 c7 b8 3c 00 00 00 0f 05 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 145.807699][ T5004] RSP: 002b:00007fff97ba7c68 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 145.816112][ T5004] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fad688c7a17 [ 145.824081][ T5004] RDX: 00007fff97ba7d2a RSI: 000000000000000a RDI: 00007fff97ba7d20 [ 145.832064][ T5004] RBP: 00007fff97ba7d20 R08: 00000000ffffffff R09: 00007fff97ba7b00 [ 145.840043][ T5004] R10: 0000555556e26653 R11: 0000000000000202 R12: 00007fff97ba8de0 [ 145.848365][ T5004] R13: 0000555556e265f0 R14: 00007fff97ba7c90 R15: 00007fff97ba8e00 [ 145.856535][ T5004] [ 145.859563][ T5004] [ 145.861886][ T5004] Allocated by task 4427: [ 145.866224][ T5004] kasan_set_track+0x4f/0x70 [ 145.870822][ T5004] __kasan_slab_alloc+0x66/0x70 [ 145.875677][ T5004] slab_post_alloc_hook+0x68/0x3a0 [ 145.880800][ T5004] kmem_cache_alloc+0x123/0x300 [ 145.885663][ T5004] getname_flags+0xbc/0x4e0 [ 145.890173][ T5004] do_sys_openat2+0xd2/0x1d0 [ 145.894857][ T5004] __x64_sys_openat+0x247/0x290 [ 145.899710][ T5004] do_syscall_64+0x41/0xc0 [ 145.904129][ T5004] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 145.910030][ T5004] [ 145.912351][ T5004] Freed by task 4427: [ 145.916323][ T5004] kasan_set_track+0x4f/0x70 [ 145.920914][ T5004] kasan_save_free_info+0x28/0x40 [ 145.925945][ T5004] ____kasan_slab_free+0xd6/0x120 [ 145.931503][ T5004] kmem_cache_free+0x292/0x500 [ 145.936274][ T5004] do_sys_openat2+0x17a/0x1d0 [ 145.940955][ T5004] __x64_sys_openat+0x247/0x290 [ 145.945895][ T5004] do_syscall_64+0x41/0xc0 [ 145.950314][ T5004] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 145.956239][ T5004] [ 145.958565][ T5004] The buggy address belongs to the object at ffff88807d330000 [ 145.958565][ T5004] which belongs to the cache names_cache of size 4096 [ 145.972707][ T5004] The buggy address is located 0 bytes inside of [ 145.972707][ T5004] 4096-byte region [ffff88807d330000, ffff88807d331000) [ 145.985902][ T5004] [ 145.988226][ T5004] The buggy address belongs to the physical page: [ 145.994637][ T5004] page:ffffea0001f4cc00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7d330 [ 146.004799][ T5004] head:ffffea0001f4cc00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 146.013733][ T5004] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 146.021717][ T5004] page_type: 0xffffffff() [ 146.026051][ T5004] raw: 00fff00000010200 ffff8880146758c0 dead000000000122 0000000000000000 [ 146.034636][ T5004] raw: 0000000000000000 0000000000070007 00000001ffffffff 0000000000000000 [ 146.043220][ T5004] page dumped because: kasan: bad access detected [ 146.049632][ T5004] page_owner tracks the page as allocated [ 146.055344][ T5004] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4427, tgid 4427 (syslogd), ts 145559402161, free_ts 145553994657 [ 146.076444][ T5004] post_alloc_hook+0x1e6/0x210 [ 146.081216][ T5004] get_page_from_freelist+0x31e8/0x3370 [ 146.086766][ T5004] __alloc_pages+0x255/0x670 [ 146.091357][ T5004] alloc_slab_page+0x6a/0x160 [ 146.096035][ T5004] new_slab+0x84/0x2f0 [ 146.100198][ T5004] ___slab_alloc+0xade/0x1100 [ 146.104881][ T5004] kmem_cache_alloc+0x1bf/0x300 [ 146.109738][ T5004] getname_flags+0xbc/0x4e0 [ 146.114248][ T5004] do_sys_openat2+0xd2/0x1d0 [ 146.119019][ T5004] __x64_sys_openat+0x247/0x290 [ 146.123875][ T5004] do_syscall_64+0x41/0xc0 [ 146.128291][ T5004] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 146.134191][ T5004] page last free stack trace: [ 146.138860][ T5004] free_unref_page_prepare+0x903/0xa30 [ 146.144315][ T5004] free_unref_page+0x37/0x3f0 [ 146.148987][ T5004] free_large_kmalloc+0xff/0x190 [ 146.153921][ T5004] diMount+0x657/0x870 [ 146.157988][ T5004] jfs_mount_rw+0x2da/0x6a0 [ 146.162496][ T5004] jfs_remount+0x3d1/0x6b0 [ 146.166920][ T5004] reconfigure_super+0x43e/0x870 [ 146.171864][ T5004] __se_sys_fsconfig+0xa2c/0xf70 [ 146.176809][ T5004] do_syscall_64+0x41/0xc0 [ 146.181227][ T5004] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 146.187132][ T5004] [ 146.189463][ T5004] Memory state around the buggy address: [ 146.195092][ T5004] ffff88807d32ff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 146.203156][ T5004] ffff88807d32ff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 146.211215][ T5004] >ffff88807d330000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 146.219270][ T5004] ^ [ 146.223330][ T5004] ffff88807d330080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 146.231388][ T5004] ffff88807d330100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 146.239446][ T5004] ================================================================== [ 146.247895][ T5004] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 146.255213][ T5004] CPU: 0 PID: 5004 Comm: syz-executor326 Not tainted 6.4.0-syzkaller-09904-ga507db1d8fdc #0 [ 146.265290][ T5004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 146.275370][ T5004] Call Trace: [ 146.278645][ T5004] [ 146.281578][ T5004] dump_stack_lvl+0x1e7/0x2d0 [ 146.286269][ T5004] ? nf_tcp_handle_invalid+0x650/0x650 [ 146.291734][ T5004] ? panic+0x770/0x770 [ 146.295815][ T5004] ? preempt_schedule_common+0x83/0xc0 [ 146.301377][ T5004] ? vscnprintf+0x5d/0x80 [ 146.305738][ T5004] ? diUnmount+0x40/0x100 [ 146.310074][ T5004] panic+0x30f/0x770 [ 146.313981][ T5004] ? check_panic_on_warn+0x21/0xa0 [ 146.319102][ T5004] ? __memcpy_flushcache+0x2b0/0x2b0 [ 146.324401][ T5004] ? _raw_spin_unlock_irqrestore+0x12c/0x140 [ 146.330396][ T5004] ? _raw_spin_unlock+0x40/0x40 [ 146.335258][ T5004] ? print_report+0x4fb/0x540 [ 146.339946][ T5004] ? diUnmount+0xf3/0x100 [ 146.344284][ T5004] check_panic_on_warn+0x82/0xa0 [ 146.349229][ T5004] ? diUnmount+0xf3/0x100 [ 146.353563][ T5004] end_report+0x6e/0x130 [ 146.357816][ T5004] kasan_report_invalid_free+0xfb/0x110 [ 146.363371][ T5004] ? diUnmount+0xf3/0x100 [ 146.367733][ T5004] ____kasan_slab_free+0xfb/0x120 [ 146.372761][ T5004] __kmem_cache_free+0x25f/0x3b0 [ 146.377710][ T5004] ? diUnmount+0xf3/0x100 [ 146.382043][ T5004] diUnmount+0xf3/0x100 [ 146.386203][ T5004] jfs_umount+0x186/0x3a0 [ 146.390540][ T5004] jfs_put_super+0x8a/0x190 [ 146.395064][ T5004] ? jfs_free_inode+0x30/0x30 [ 146.399757][ T5004] generic_shutdown_super+0x134/0x340 [ 146.405136][ T5004] kill_block_super+0x68/0xa0 [ 146.409821][ T5004] deactivate_locked_super+0xa4/0x110 [ 146.415197][ T5004] cleanup_mnt+0x426/0x4c0 [ 146.419618][ T5004] ? _raw_spin_unlock_irq+0x23/0x50 [ 146.424834][ T5004] task_work_run+0x24a/0x300 [ 146.429441][ T5004] ? task_work_cancel+0x2b0/0x2b0 [ 146.434489][ T5004] ? exit_to_user_mode_loop+0x39/0x100 [ 146.439951][ T5004] exit_to_user_mode_loop+0xd9/0x100 [ 146.445240][ T5004] exit_to_user_mode_prepare+0xb1/0x140 [ 146.451048][ T5004] syscall_exit_to_user_mode+0x64/0x280 [ 146.456605][ T5004] do_syscall_64+0x4d/0xc0 [ 146.461030][ T5004] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 146.466935][ T5004] RIP: 0033:0x7fad688c7a17 [ 146.471355][ T5004] Code: ff d0 48 89 c7 b8 3c 00 00 00 0f 05 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 146.490963][ T5004] RSP: 002b:00007fff97ba7c68 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 146.499381][ T5004] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fad688c7a17 [ 146.507358][ T5004] RDX: 00007fff97ba7d2a RSI: 000000000000000a RDI: 00007fff97ba7d20 [ 146.515333][ T5004] RBP: 00007fff97ba7d20 R08: 00000000ffffffff R09: 00007fff97ba7b00 [ 146.523308][ T5004] R10: 0000555556e26653 R11: 0000000000000202 R12: 00007fff97ba8de0 [ 146.531281][ T5004] R13: 0000555556e265f0 R14: 00007fff97ba7c90 R15: 00007fff97ba8e00 [ 146.539269][ T5004] [ 146.542597][ T5004] Kernel Offset: disabled [ 146.546923][ T5004] Rebooting in 86400 seconds..