DUID 00:04:76:8b:f6:84:a4:3b:36:39:6c:68:e7:10:38:dd:b7:2c
forked to background, child pid 4645
[   30.691503][ T4646] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.702940][ T4646] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK

syzkaller
Warning: Permanently added '10.128.1.113' (ECDSA) to the list of known hosts.
syzkaller login: [   50.683398][ T5067] cgroup: Unknown subsys name 'net'
[   50.831127][ T5067] cgroup: Unknown subsys name 'rlimit'
executing program
executing program
executing program
executing program
executing program
executing program
[   51.690963][ T5093] loop1: detected capacity change from 0 to 32768
[   51.766210][ T5083] loop5: detected capacity change from 0 to 32768
[   52.115503][ T5099] loop4: detected capacity change from 0 to 32768
[   52.131634][ T5092] loop2: detected capacity change from 0 to 32768
executing program
executing program
[   52.227393][ T5087] loop3: detected capacity change from 0 to 32768
[   52.276277][ T5096] loop0: detected capacity change from 0 to 32768
executing program
executing program
executing program
executing program
[   53.077607][ T5104] loop1: detected capacity change from 0 to 32768
[   53.109073][ T5107] loop5: detected capacity change from 0 to 32768
[   53.374497][ T5112] loop0: detected capacity change from 0 to 32768
executing program
[   53.440782][ T5114] loop3: detected capacity change from 0 to 32768
[   53.482245][ T5118] loop2: detected capacity change from 0 to 32768
executing program
[   53.590635][ T5117] loop4: detected capacity change from 0 to 32768
executing program
[   53.876410][ T5117] read_mapping_page failed!
executing program
executing program
[   53.900995][ T5117] jfs_mount_rw: diMount failed!
[   53.959138][ T5078] ==================================================================
[   53.967265][ T5078] BUG: KASAN: double-free in __kmem_cache_free+0x71/0x110
[   53.974410][ T5078] Free of addr ffff88807bbb0000 by task syz-executor495/5078
[   53.981783][ T5078] 
[   53.984119][ T5078] CPU: 0 PID: 5078 Comm: syz-executor495 Not tainted 6.2.0-rc2-syzkaller-00313-g9b43a525db12 #0
[   53.995722][ T5078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[   54.005792][ T5078] Call Trace:
[   54.009085][ T5078]  <TASK>
[   54.012026][ T5078]  dump_stack_lvl+0x1b1/0x290
[   54.016735][ T5078]  ? nf_tcp_handle_invalid+0x630/0x630
[   54.022207][ T5078]  ? __wake_up_klogd+0xcd/0x100
[   54.027068][ T5078]  ? panic+0x710/0x710
[   54.031148][ T5078]  ? _printk+0xc0/0x100
[   54.035314][ T5078]  ? _raw_spin_lock_irqsave+0x8e/0x100
[   54.040786][ T5078]  ? __kmem_cache_free+0x71/0x110
[   54.045904][ T5078]  print_address_description+0x74/0x340
[   54.051467][ T5078]  print_report+0x107/0x1f0
[   54.055980][ T5078]  ? _raw_spin_unlock+0x40/0x40
[   54.060843][ T5078]  ? __virt_addr_valid+0x21b/0x2d0
[   54.065972][ T5078]  ? __phys_addr+0xb5/0x160
[   54.070493][ T5078]  ? __kmem_cache_free+0x71/0x110
[   54.075527][ T5078]  ? __kmem_cache_free+0x71/0x110
[   54.080644][ T5078]  kasan_report_invalid_free+0xac/0xd0
[   54.086128][ T5078]  ? __kmem_cache_free+0x71/0x110
[   54.091610][ T5078]  ____kasan_slab_free+0xfb/0x120
[   54.096653][ T5078]  slab_free_freelist_hook+0x12e/0x1a0
[   54.102136][ T5078]  ? diUnmount+0xef/0x100
[   54.106476][ T5078]  __kmem_cache_free+0x71/0x110
[   54.111343][ T5078]  diUnmount+0xef/0x100
[   54.115513][ T5078]  jfs_umount+0x17c/0x3b0
[   54.119862][ T5078]  jfs_put_super+0x86/0x190
[   54.124384][ T5078]  ? jfs_free_inode+0x20/0x20
[   54.129080][ T5078]  generic_shutdown_super+0x130/0x310
[   54.134478][ T5078]  kill_block_super+0x79/0xd0
[   54.139349][ T5078]  deactivate_locked_super+0xa7/0xf0
[   54.144649][ T5078]  cleanup_mnt+0x494/0x520
[   54.149171][ T5078]  ? lockdep_hardirqs_on+0x8d/0x130
[   54.154377][ T5078]  task_work_run+0x243/0x300
[   54.158977][ T5078]  ? task_work_cancel+0x290/0x290
[   54.164023][ T5078]  ? exit_to_user_mode_loop+0x42/0x150
[   54.169496][ T5078]  exit_to_user_mode_loop+0x124/0x150
[   54.174887][ T5078]  exit_to_user_mode_prepare+0xb2/0x140
[   54.180448][ T5078]  syscall_exit_to_user_mode+0x26/0x60
[   54.185917][ T5078]  do_syscall_64+0x49/0xb0
[   54.190348][ T5078]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   54.196257][ T5078] RIP: 0033:0x7f5c51c21387
[   54.200677][ T5078] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[   54.220306][ T5078] RSP: 002b:00007fff68dcff18 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6
[   54.228741][ T5078] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f5c51c21387
[   54.236726][ T5078] RDX: 00007fff68dcffd9 RSI: 000000000000000a RDI: 00007fff68dcffd0
[   54.244713][ T5078] RBP: 00007fff68dcffd0 R08: 00000000ffffffff R09: 00007fff68dcfdb0
[   54.252695][ T5078] R10: 0000555556046693 R11: 0000000000000206 R12: 00007fff68dd1090
[   54.260694][ T5078] R13: 00005555560465f0 R14: 00007fff68dcff40 R15: 00007fff68dd10d0
[   54.268691][ T5078]  </TASK>
[   54.271720][ T5078] 
[   54.274048][ T5078] Allocated by task 4432:
[   54.278373][ T5078]  kasan_set_track+0x3d/0x60
[   54.282977][ T5078]  __kasan_slab_alloc+0x65/0x70
[   54.287841][ T5078]  kmem_cache_alloc+0x1b3/0x350
[   54.292733][ T5078]  getname_flags+0xb8/0x4e0
[   54.297265][ T5078]  do_sys_openat2+0xba/0x4e0
[   54.301866][ T5078]  __x64_sys_openat+0x243/0x290
[   54.306756][ T5078]  do_syscall_64+0x3d/0xb0
[   54.311187][ T5078]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   54.317091][ T5078] 
[   54.319411][ T5078] Freed by task 4432:
[   54.323389][ T5078]  kasan_set_track+0x3d/0x60
[   54.327992][ T5078]  kasan_save_free_info+0x27/0x40
[   54.333021][ T5078]  ____kasan_slab_free+0xd6/0x120
[   54.338053][ T5078]  slab_free_freelist_hook+0x12e/0x1a0
[   54.343519][ T5078]  kmem_cache_free+0x94/0x1d0
[   54.345286][ T5127] loop5: detected capacity change from 0 to 32768
[   54.348185][ T5078]  do_sys_openat2+0x417/0x4e0
[   54.348204][ T5078]  __x64_sys_openat+0x243/0x290
[   54.348217][ T5078]  do_syscall_64+0x3d/0xb0
[   54.348234][ T5078]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   54.374423][ T5078] 
[   54.376749][ T5078] The buggy address belongs to the object at ffff88807bbb0000
[   54.376749][ T5078]  which belongs to the cache names_cache of size 4096
[   54.390891][ T5078] The buggy address is located 0 bytes inside of
[   54.390891][ T5078]  4096-byte region [ffff88807bbb0000, ffff88807bbb1000)
[   54.404092][ T5078] 
[   54.406420][ T5078] The buggy address belongs to the physical page:
[   54.412830][ T5078] page:ffffea0001eeec00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7bbb0
[   54.422988][ T5078] head:ffffea0001eeec00 order:3 compound_mapcount:0 subpages_mapcount:0 compound_pincount:0
[   54.425000][ T5123] loop1: detected capacity change from 0 to 32768
[   54.433035][ T5078] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[   54.433058][ T5078] raw: 00fff00000010200 ffff8880129eb640 dead000000000122 0000000000000000
[   54.433070][ T5078] raw: 0000000000000000 0000000000070007 00000001ffffffff 0000000000000000
[   54.433077][ T5078] page dumped because: kasan: bad access detected
[   54.433085][ T5078] page_owner tracks the page as allocated
[   54.433090][ T5078] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4432, tgid 4432 (udevd), ts 53913147594, free_ts 53900967707
[   54.443483][ T5130] loop2: detected capacity change from 0 to 32768
[   54.447452][ T5078]  get_page_from_freelist+0x742/0x7c0
[   54.447475][ T5078]  __alloc_pages+0x259/0x560
[   54.447490][ T5078]  alloc_slab_page+0xbd/0x190
[   54.447505][ T5078]  allocate_slab+0x5e/0x3c0
[   54.447520][ T5078]  ___slab_alloc+0x782/0xe20
[   54.447534][ T5078]  kmem_cache_alloc+0x268/0x350
[   54.447546][ T5078]  getname_flags+0xb8/0x4e0
[   54.538290][ T5078]  do_sys_openat2+0xba/0x4e0
[   54.542896][ T5078]  __x64_sys_openat+0x243/0x290
[   54.547761][ T5078]  do_syscall_64+0x3d/0xb0
[   54.552195][ T5078]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   54.558092][ T5078] page last free stack trace:
[   54.562745][ T5078]  free_pcp_prepare+0x751/0x780
[   54.567582][ T5078]  free_unref_page+0x19/0x4c0
[   54.572242][ T5078]  free_large_kmalloc+0xfb/0x190
[   54.577164][ T5078]  diMount+0x654/0x870
[   54.581217][ T5078]  jfs_mount_rw+0x33e/0x740
[   54.585794][ T5078]  jfs_remount+0x3db/0x710
[   54.590194][ T5078]  reconfigure_super+0x3bc/0x7b0
[   54.595121][ T5078]  __se_sys_fsconfig+0xad5/0x1060
[   54.600128][ T5078]  do_syscall_64+0x3d/0xb0
[   54.604532][ T5078]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   54.610418][ T5078] 
[   54.612723][ T5078] Memory state around the buggy address:
[   54.618333][ T5078]  ffff88807bbaff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   54.626374][ T5078]  ffff88807bbaff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   54.634417][ T5078] >ffff88807bbb0000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   54.642459][ T5078]                    ^
[   54.646509][ T5078]  ffff88807bbb0080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   54.654548][ T5078]  ffff88807bbb0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   54.662585][ T5078] ==================================================================
[   54.784289][ T5078] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   54.791696][ T5078] CPU: 1 PID: 5078 Comm: syz-executor495 Not tainted 6.2.0-rc2-syzkaller-00313-g9b43a525db12 #0
[   54.802335][ T5078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[   54.812400][ T5078] Call Trace:
[   54.815687][ T5078]  <TASK>
[   54.818621][ T5078]  dump_stack_lvl+0x1b1/0x290
[   54.823317][ T5078]  ? nf_tcp_handle_invalid+0x630/0x630
[   54.828793][ T5078]  ? panic+0x710/0x710
[   54.832863][ T5078]  ? lock_release+0x81/0x820
[   54.837461][ T5078]  ? vscnprintf+0x59/0x80
[   54.841793][ T5078]  ? __kmem_cache_free+0x70/0x110
[   54.846839][ T5078]  panic+0x2d6/0x710
[   54.850739][ T5078]  ? check_panic_on_warn+0x1d/0xa0
[   54.855854][ T5078]  ? memcpy_page_flushcache+0x100/0x100
[   54.861403][ T5078]  ? _raw_spin_unlock_irqrestore+0x110/0x120
[   54.867390][ T5078]  ? _raw_spin_unlock+0x40/0x40
[   54.872257][ T5078]  ? print_report+0x1b4/0x1f0
[   54.876950][ T5078]  ? __kmem_cache_free+0x71/0x110
[   54.881977][ T5078]  check_panic_on_warn+0x80/0xa0
[   54.886914][ T5078]  ? __kmem_cache_free+0x71/0x110
[   54.891933][ T5078]  end_report+0x47/0x90
[   54.896076][ T5078]  kasan_report_invalid_free+0xb7/0xd0
[   54.901525][ T5078]  ? __kmem_cache_free+0x71/0x110
[   54.906538][ T5078]  ____kasan_slab_free+0xfb/0x120
[   54.911552][ T5078]  slab_free_freelist_hook+0x12e/0x1a0
[   54.916999][ T5078]  ? diUnmount+0xef/0x100
[   54.921325][ T5078]  __kmem_cache_free+0x71/0x110
[   54.926166][ T5078]  diUnmount+0xef/0x100
[   54.930308][ T5078]  jfs_umount+0x17c/0x3b0
[   54.934634][ T5078]  jfs_put_super+0x86/0x190
[   54.939129][ T5078]  ? jfs_free_inode+0x20/0x20
[   54.943793][ T5078]  generic_shutdown_super+0x130/0x310
[   54.949159][ T5078]  kill_block_super+0x79/0xd0
[   54.953836][ T5078]  deactivate_locked_super+0xa7/0xf0
[   54.959113][ T5078]  cleanup_mnt+0x494/0x520
[   54.963517][ T5078]  ? lockdep_hardirqs_on+0x8d/0x130
[   54.968699][ T5078]  task_work_run+0x243/0x300
[   54.973282][ T5078]  ? task_work_cancel+0x290/0x290
[   54.978295][ T5078]  ? exit_to_user_mode_loop+0x42/0x150
[   54.983742][ T5078]  exit_to_user_mode_loop+0x124/0x150
[   54.989104][ T5078]  exit_to_user_mode_prepare+0xb2/0x140
[   54.994636][ T5078]  syscall_exit_to_user_mode+0x26/0x60
[   55.000103][ T5078]  do_syscall_64+0x49/0xb0
[   55.004508][ T5078]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   55.010391][ T5078] RIP: 0033:0x7f5c51c21387
[   55.014793][ T5078] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[   55.034389][ T5078] RSP: 002b:00007fff68dcff18 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6
[   55.042795][ T5078] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f5c51c21387
[   55.050754][ T5078] RDX: 00007fff68dcffd9 RSI: 000000000000000a RDI: 00007fff68dcffd0
[   55.058712][ T5078] RBP: 00007fff68dcffd0 R08: 00000000ffffffff R09: 00007fff68dcfdb0
[   55.066669][ T5078] R10: 0000555556046693 R11: 0000000000000206 R12: 00007fff68dd1090
[   55.074626][ T5078] R13: 00005555560465f0 R14: 00007fff68dcff40 R15: 00007fff68dd10d0
[   55.082607][ T5078]  </TASK>
[   55.085800][ T5078] Kernel Offset: disabled
[   55.090126][ T5078] Rebooting in 86400 seconds..