Warning: Permanently added '10.128.0.80' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program [ 842.032944][ T3663] loop2: detected capacity change from 0 to 32768 [ 842.037135][ T3665] loop3: detected capacity change from 0 to 32768 [ 842.045136][ T3664] loop5: detected capacity change from 0 to 32768 [ 842.060483][ T3669] loop4: detected capacity change from 0 to 32768 [ 842.077370][ T27] audit: type=1800 audit(1668165133.304:2): pid=3674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor239" name="bus" dev="sda1" ino=1155 res=0 errno=0 [ 842.120549][ T3666] loop0: detected capacity change from 0 to 32768 [ 842.146444][ T27] audit: type=1800 audit(1668165133.304:3): pid=3673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor239" name="bus" dev="sda1" ino=1156 res=0 errno=0 [ 842.167530][ T3668] loop1: detected capacity change from 0 to 32768 [ 842.182930][ T27] audit: type=1800 audit(1668165133.304:4): pid=3675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor239" name="bus" dev="sda1" ino=1157 res=0 errno=0 [ 842.424241][ T27] audit: type=1800 audit(1668165133.304:5): pid=3677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor239" name="bus" dev="sda1" ino=1159 res=0 errno=0 [ 842.446739][ T27] audit: type=1800 audit(1668165133.304:6): pid=3678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor239" name="bus" dev="sda1" ino=1160 res=0 errno=0 [ 842.473590][ T27] audit: type=1800 audit(1668165133.334:7): pid=3676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor239" name="bus" dev="sda1" ino=1162 res=0 errno=0 [ 842.496780][ T27] audit: type=1800 audit(1668165133.354:8): pid=3669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor239" name="bus" dev="loop4" ino=7 res=0 errno=0 executing program executing program executing program [ 842.530804][ T27] audit: type=1800 audit(1668165133.364:9): pid=3665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor239" name="bus" dev="loop3" ino=7 res=0 errno=0 executing program executing program executing program [ 842.657114][ T27] audit: type=1800 audit(1668165133.364:10): pid=3671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor239" name="bus" dev="sda1" ino=1159 res=0 errno=0 [ 842.675581][ T3694] loop1: detected capacity change from 0 to 32768 [ 842.731408][ T3691] loop3: detected capacity change from 0 to 32768 [ 842.759678][ T3695] loop4: detected capacity change from 0 to 32768 [ 842.814743][ T3697] loop0: detected capacity change from 0 to 32768 [ 842.820041][ T27] audit: type=1800 audit(1668165133.404:11): pid=3663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor239" name="bus" dev="loop2" ino=7 res=0 errno=0 [ 842.839586][ T3701] loop2: detected capacity change from 0 to 32768 [ 842.950902][ T3700] loop5: detected capacity change from 0 to 32768 executing program executing program executing program executing program executing program executing program [ 843.251290][ T3719] loop3: detected capacity change from 0 to 32768 [ 843.384966][ T3722] loop1: detected capacity change from 0 to 32768 [ 843.407811][ T3728] loop2: detected capacity change from 0 to 32768 [ 843.491257][ T3726] loop4: detected capacity change from 0 to 32768 [ 843.581026][ T3732] loop0: detected capacity change from 0 to 32768 [ 843.588048][ T3730] loop5: detected capacity change from 0 to 32768 executing program executing program executing program executing program executing program [ 843.950079][ T3756] loop1: detected capacity change from 0 to 32768 executing program [ 844.084424][ T3757] loop4: detected capacity change from 0 to 32768 [ 844.092692][ T3758] loop2: detected capacity change from 0 to 32768 [ 844.158511][ T3762] loop3: detected capacity change from 0 to 32768 executing program [ 844.256500][ T3766] loop0: detected capacity change from 0 to 32768 executing program executing program executing program [ 844.401478][ T3774] loop5: detected capacity change from 0 to 32768 executing program [ 844.606422][ T3786] loop1: detected capacity change from 0 to 32768 executing program [ 844.658705][ T3789] loop2: detected capacity change from 0 to 32768 [ 844.726610][ T3793] loop4: detected capacity change from 0 to 32768 [ 844.818200][ T3796] loop3: detected capacity change from 0 to 32768 executing program [ 844.924086][ T3805] loop0: detected capacity change from 0 to 32768 [ 844.938014][ T3808] loop5: detected capacity change from 0 to 32768 executing program executing program executing program executing program [ 845.225528][ T3820] loop1: detected capacity change from 0 to 32768 [ 845.273282][ T3826] loop2: detected capacity change from 0 to 32768 [ 845.298748][ T3827] loop3: detected capacity change from 0 to 32768 executing program [ 845.393931][ T3829] loop4: detected capacity change from 0 to 32768 executing program [ 845.580711][ T3834] loop0: detected capacity change from 0 to 32768 executing program executing program [ 845.667937][ T3844] loop5: detected capacity change from 0 to 32768 executing program [ 845.833991][ T3853] loop2: detected capacity change from 0 to 32768 [ 845.904751][ T3854] loop4: detected capacity change from 0 to 32768 [ 845.945500][ T3863] loop0: detected capacity change from 0 to 32768 [ 845.955920][ T3857] loop3: detected capacity change from 0 to 32768 executing program executing program executing program executing program executing program executing program [ 846.406794][ T3874] loop1: detected capacity change from 0 to 32768 [ 846.418801][ T3875] loop5: detected capacity change from 0 to 32768 [ 846.424027][ T3879] loop2: detected capacity change from 0 to 32768 [ 846.465806][ T3881] loop4: detected capacity change from 0 to 32768 executing program [ 846.567975][ T3888] loop3: detected capacity change from 0 to 32768 executing program [ 846.682038][ T3894] loop0: detected capacity change from 0 to 32768 [ 846.756952][ T3902] loop5: detected capacity change from 0 to 32768 executing program executing program executing program [ 846.969475][ T3907] loop1: detected capacity change from 0 to 32768 [ 847.037891][ T3911] loop4: detected capacity change from 0 to 32768 executing program [ 847.086686][ T27] kauditd_printk_skb: 137 callbacks suppressed [ 847.086700][ T27] audit: type=1800 audit(1668165138.314:149): pid=3923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor239" name="bus" dev="sda1" ino=1159 res=0 errno=0 [ 847.147676][ T3914] loop2: detected capacity change from 0 to 32768 [ 847.209843][ T27] audit: type=1800 audit(1668165138.384:150): pid=3925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor239" name="bus" dev="sda1" ino=1153 res=0 errno=0 executing program [ 847.278016][ T3919] loop3: detected capacity change from 0 to 32768 executing program executing program [ 847.376891][ T27] audit: type=1800 audit(1668165138.404:151): pid=3927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor239" name="bus" dev="sda1" ino=1159 res=0 errno=0 [ 847.411495][ T3924] loop0: detected capacity change from 0 to 32768 executing program [ 847.501105][ T27] audit: type=1800 audit(1668165138.404:152): pid=3911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor239" name="bus" dev="loop4" ino=7 res=0 errno=0 [ 847.535664][ T3933] loop5: detected capacity change from 0 to 32768 executing program [ 847.627417][ T3939] loop1: detected capacity change from 0 to 32768 [ 847.643423][ T3936] loop4: detected capacity change from 0 to 32768 [ 847.667819][ T27] audit: type=1800 audit(1668165138.474:153): pid=3929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor239" name="bus" dev="sda1" ino=1153 res=0 errno=0 [ 847.713464][ T3944] loop2: detected capacity change from 0 to 32768 executing program [ 847.780971][ T3948] loop3: detected capacity change from 0 to 32768 [ 847.813499][ T27] audit: type=1800 audit(1668165138.524:154): pid=3931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor239" name="bus" dev="sda1" ino=1153 res=0 errno=0 [ 847.835694][ T27] audit: type=1800 audit(1668165138.524:155): pid=3930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor239" name="bus" dev="sda1" ino=1151 res=0 errno=0 executing program executing program executing program [ 847.972221][ T3958] loop0: detected capacity change from 0 to 32768 [ 847.976491][ T27] audit: type=1800 audit(1668165138.584:156): pid=3930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor239" name="bus" dev="sda1" ino=1151 res=0 errno=0 executing program executing program [ 848.118827][ T3962] loop5: detected capacity change from 0 to 32768 [ 848.185060][ T27] audit: type=1800 audit(1668165138.684:157): pid=3938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor239" name="bus" dev="sda1" ino=1155 res=0 errno=0 [ 848.247340][ T3965] loop4: detected capacity change from 0 to 32768 [ 848.272268][ T3968] loop1: detected capacity change from 0 to 32768 [ 848.311860][ T3972] loop2: detected capacity change from 0 to 32768 executing program [ 848.350318][ T27] audit: type=1800 audit(1668165138.694:158): pid=3937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor239" name="bus" dev="sda1" ino=1151 res=0 errno=0 [ 848.399722][ T3975] loop3: detected capacity change from 0 to 32768 executing program [ 848.453153][ T3987] loop0: detected capacity change from 0 to 32768 executing program executing program executing program executing program [ 848.752010][ T3989] loop5: detected capacity change from 0 to 32768 [ 848.779386][ T3994] loop1: detected capacity change from 0 to 32768 [ 848.877433][ T3996] loop4: detected capacity change from 0 to 32768 [ 848.934468][ T4003] loop3: detected capacity change from 0 to 32768 executing program [ 848.978742][ T4001] loop2: detected capacity change from 0 to 32768 executing program executing program [ 849.210420][ T4014] loop5: detected capacity change from 0 to 32768 executing program executing program executing program [ 849.401326][ T4022] loop0: detected capacity change from 0 to 32768 [ 849.477137][ T4025] loop4: detected capacity change from 0 to 32768 executing program [ 849.577250][ T4028] loop3: detected capacity change from 0 to 32768 executing program [ 849.715362][ T4032] loop2: detected capacity change from 0 to 32768 [ 849.802555][ T4040] loop5: detected capacity change from 0 to 32768 executing program executing program [ 849.852168][ T4044] loop1: detected capacity change from 0 to 32768 executing program executing program [ 849.967284][ T4051] loop0: detected capacity change from 0 to 32768 [ 850.101682][ T4053] loop3: detected capacity change from 0 to 32768 executing program executing program [ 850.237829][ T4057] loop4: detected capacity change from 0 to 32768 [ 850.280626][ T4059] loop2: detected capacity change from 0 to 32768 [ 850.393764][ T4066] loop5: detected capacity change from 0 to 32768 executing program executing program [ 850.439409][ T4069] loop1: detected capacity change from 0 to 32768 executing program executing program [ 850.636014][ T4078] loop0: detected capacity change from 0 to 32768 [ 850.653650][ T4079] loop3: detected capacity change from 0 to 32768 executing program [ 850.746746][ T4087] loop4: detected capacity change from 0 to 32768 [ 850.823068][ T4083] loop2: detected capacity change from 0 to 32768 executing program executing program [ 851.032699][ T4090] loop5: detected capacity change from 0 to 32768 executing program executing program [ 851.141122][ T4097] loop1: detected capacity change from 0 to 32768 executing program executing program [ 851.259363][ T4102] loop3: detected capacity change from 0 to 32768 [ 851.268466][ T4105] loop0: detected capacity change from 0 to 32768 [ 851.366975][ T4108] loop4: detected capacity change from 0 to 32768 executing program [ 851.457685][ T4114] loop5: detected capacity change from 0 to 32768 [ 851.463860][ T4115] loop2: detected capacity change from 0 to 32768 executing program [ 851.601786][ T4126] loop1: detected capacity change from 0 to 32768 executing program executing program executing program executing program [ 851.838567][ T4128] loop3: detected capacity change from 0 to 32768 executing program [ 852.017282][ T4137] loop4: detected capacity change from 0 to 32768 [ 852.020231][ T4136] loop0: detected capacity change from 0 to 32768 [ 852.072148][ T4142] loop5: detected capacity change from 0 to 32768 [ 852.096432][ T27] kauditd_printk_skb: 137 callbacks suppressed executing program [ 852.096454][ T27] audit: type=1800 audit(1668165143.314:296): pid=4151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor239" name="bus" dev="sda1" ino=1157 res=0 errno=0 [ 852.142323][ T4141] loop2: detected capacity change from 0 to 32768 [ 852.210983][ T4153] loop3: detected capacity change from 0 to 32768 [ 852.259808][ T27] audit: type=1800 audit(1668165143.324:297): pid=4137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor239" name="bus" dev="loop4" ino=7 res=0 errno=0 [ 852.283575][ T27] audit: type=1800 audit(1668165143.344:298): pid=4154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor239" name="bus" dev="sda1" ino=1160 res=0 errno=0 [ 852.311339][ T27] audit: type=1800 audit(1668165143.384:299): pid=4149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor239" name="bus" dev="sda1" ino=1159 res=0 errno=0 [ 852.323204][ T4159] loop1: detected capacity change from 0 to 32768 [ 852.338118][ T27] audit: type=1800 audit(1668165143.404:300): pid=4154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor239" name="bus" dev="loop5" ino=7 res=0 errno=0 [ 852.370468][ T27] audit: type=1800 audit(1668165143.444:301): pid=4158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor239" name="bus" dev="sda1" ino=1157 res=0 errno=0 [ 852.396722][ T27] audit: type=1800 audit(1668165143.464:302): pid=4160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor239" name="bus" dev="sda1" ino=1163 res=0 errno=0 [ 852.422286][ T27] audit: type=1800 audit(1668165143.594:303): pid=4153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor239" name="bus" dev="loop3" ino=7 res=0 errno=0 [ 852.463385][ T27] audit: type=1800 audit(1668165143.624:304): pid=4160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor239" name="bus" dev="sda1" ino=1163 res=0 errno=0 executing program executing program executing program executing program [ 852.551788][ T27] audit: type=1800 audit(1668165143.624:305): pid=4162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor239" name="bus" dev="sda1" ino=1150 res=0 errno=0 [ 852.681817][ T4167] loop0: detected capacity change from 0 to 32768 [ 852.700876][ T4169] loop2: detected capacity change from 0 to 32768 [ 852.720514][ T4171] loop5: detected capacity change from 0 to 32768 [ 852.737334][ T4170] loop4: detected capacity change from 0 to 32768 executing program executing program executing program executing program executing program [ 853.064290][ T4184] loop1: detected capacity change from 0 to 32768 [ 853.093834][ T4187] loop5: detected capacity change from 0 to 32768 [ 853.165543][ T4189] loop3: detected capacity change from 0 to 32768 [ 853.175572][ T4192] loop2: detected capacity change from 0 to 32768 [ 853.235702][ T4193] loop0: detected capacity change from 0 to 32768 executing program executing program executing program executing program executing program [ 853.612863][ T4209] loop4: detected capacity change from 0 to 32768 [ 853.645714][ T4217] loop2: detected capacity change from 0 to 32768 [ 853.657358][ T4211] loop1: detected capacity change from 0 to 32768 [ 853.688756][ T4215] loop3: detected capacity change from 0 to 32768 [ 853.697467][ T4216] loop5: detected capacity change from 0 to 32768 executing program executing program executing program executing program executing program [ 854.111918][ T4234] loop0: detected capacity change from 0 to 32768 [ 854.209887][ T4240] loop1: detected capacity change from 0 to 32768 [ 854.244188][ T4239] loop4: detected capacity change from 0 to 32768 [ 854.269496][ T4243] loop5: detected capacity change from 0 to 32768 [ 854.277572][ T4242] loop3: detected capacity change from 0 to 32768 executing program executing program executing program [ 854.630279][ T4254] loop2: detected capacity change from 0 to 32768 [ 854.687899][ T121] ================================================================== [ 854.695993][ T121] BUG: KASAN: use-after-free in jfs_lazycommit+0x7e4/0xb80 [ 854.703253][ T121] Read of size 4 at addr ffff888021aeca94 by task jfsCommit/121 [ 854.710865][ T121] [ 854.713181][ T121] CPU: 1 PID: 121 Comm: jfsCommit Not tainted 6.1.0-rc4-syzkaller-00159-g4bbf3422df78 #0 [ 854.722978][ T121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 854.733015][ T121] Call Trace: [ 854.736299][ T121] [ 854.739221][ T121] dump_stack_lvl+0x1b1/0x28e [ 854.743953][ T121] ? nf_tcp_handle_invalid+0x62e/0x62e [ 854.749408][ T121] ? __wake_up_klogd+0xcd/0x100 [ 854.754284][ T121] ? panic+0x710/0x710 [ 854.758355][ T121] ? _printk+0xc0/0x100 [ 854.762500][ T121] print_address_description+0x74/0x340 [ 854.768079][ T121] print_report+0x107/0x1f0 [ 854.772567][ T121] ? __virt_addr_valid+0x21b/0x2d0 [ 854.777686][ T121] ? __phys_addr+0xb5/0x160 [ 854.782172][ T121] ? jfs_lazycommit+0x7e4/0xb80 [ 854.787006][ T121] kasan_report+0xcd/0x100 [ 854.791411][ T121] ? jfs_lazycommit+0x7e4/0xb80 [ 854.796246][ T121] jfs_lazycommit+0x7e4/0xb80 [ 854.800908][ T121] ? txFreelock+0x580/0x580 [ 854.805393][ T121] ? do_task_dead+0xc0/0xc0 [ 854.809905][ T121] ? _raw_spin_unlock+0x40/0x40 [ 854.814761][ T121] ? lockdep_hardirqs_on_prepare+0x428/0x790 [ 854.820731][ T121] ? __kthread_parkme+0x166/0x1c0 [ 854.825782][ T121] kthread+0x266/0x300 [ 854.829840][ T121] ? txFreelock+0x580/0x580 [ 854.834324][ T121] ? kthread_blkcg+0xd0/0xd0 [ 854.838905][ T121] ret_from_fork+0x1f/0x30 [ 854.843326][ T121] [ 854.846345][ T121] [ 854.848651][ T121] Allocated by task 4240: [ 854.852954][ T121] kasan_set_track+0x3d/0x60 [ 854.857529][ T121] __kasan_kmalloc+0x97/0xb0 [ 854.862103][ T121] jfs_fill_super+0xfb/0xc50 [ 854.866693][ T121] mount_bdev+0x26c/0x3a0 [ 854.871041][ T121] legacy_get_tree+0xea/0x180 [ 854.875722][ T121] vfs_get_tree+0x88/0x270 [ 854.880121][ T121] do_new_mount+0x289/0xad0 [ 854.884613][ T121] __se_sys_mount+0x2d3/0x3c0 [ 854.889270][ T121] do_syscall_64+0x3d/0xb0 [ 854.893674][ T121] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 854.899551][ T121] [ 854.901859][ T121] Freed by task 3653: [ 854.905818][ T121] kasan_set_track+0x3d/0x60 [ 854.910389][ T121] kasan_save_free_info+0x27/0x40 [ 854.915398][ T121] ____kasan_slab_free+0xd6/0x120 [ 854.920412][ T121] slab_free_freelist_hook+0x12e/0x1a0 [ 854.925850][ T121] __kmem_cache_free+0x71/0x110 [ 854.930685][ T121] generic_shutdown_super+0x130/0x310 [ 854.936041][ T121] kill_block_super+0x79/0xd0 [ 854.940704][ T121] deactivate_locked_super+0xa7/0xf0 [ 854.945972][ T121] cleanup_mnt+0x494/0x520 [ 854.950373][ T121] task_work_run+0x243/0x300 [ 854.954945][ T121] exit_to_user_mode_loop+0x124/0x150 [ 854.960350][ T121] exit_to_user_mode_prepare+0xb2/0x140 [ 854.965881][ T121] syscall_exit_to_user_mode+0x26/0x60 [ 854.971328][ T121] do_syscall_64+0x49/0xb0 [ 854.975726][ T121] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 854.981603][ T121] [ 854.983910][ T121] The buggy address belongs to the object at ffff888021aeca00 [ 854.983910][ T121] which belongs to the cache kmalloc-256 of size 256 [ 854.998031][ T121] The buggy address is located 148 bytes inside of [ 854.998031][ T121] 256-byte region [ffff888021aeca00, ffff888021aecb00) [ 855.011282][ T121] [ 855.013591][ T121] The buggy address belongs to the physical page: [ 855.019979][ T121] page:ffffea000086bb00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x21aec [ 855.031060][ T121] head:ffffea000086bb00 order:1 compound_mapcount:0 compound_pincount:0 [ 855.039363][ T121] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 855.047327][ T121] raw: 00fff00000010200 0000000000000000 dead000000000001 ffff888012041b40 [ 855.055892][ T121] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 855.064456][ T121] page dumped because: kasan: bad access detected [ 855.070931][ T121] page_owner tracks the page as allocated [ 855.076622][ T121] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3793, tgid 3790 (syz-executor239), ts 844787750126, free_ts 844712741228 [ 855.098390][ T121] get_page_from_freelist+0x742/0x7c0 [ 855.103759][ T121] __alloc_pages+0x259/0x560 [ 855.108354][ T121] alloc_slab_page+0x70/0xf0 [ 855.112925][ T121] allocate_slab+0x5e/0x4b0 [ 855.117410][ T121] ___slab_alloc+0x782/0xe20 [ 855.121983][ T121] __kmem_cache_alloc_node+0x252/0x310 [ 855.127433][ T121] __kmalloc+0x9e/0x1a0 [ 855.131604][ T121] __list_lru_init+0xa0/0x5f0 [ 855.136287][ T121] alloc_super+0x7a7/0x920 [ 855.140688][ T121] sget+0x20e/0x560 [ 855.144482][ T121] mount_bdev+0xe8/0x3a0 [ 855.148713][ T121] legacy_get_tree+0xea/0x180 [ 855.153378][ T121] vfs_get_tree+0x88/0x270 [ 855.157779][ T121] do_new_mount+0x289/0xad0 [ 855.162264][ T121] __se_sys_mount+0x2d3/0x3c0 [ 855.166923][ T121] do_syscall_64+0x3d/0xb0 [ 855.171325][ T121] page last free stack trace: [ 855.175975][ T121] free_pcp_prepare+0x80c/0x8f0 [ 855.181674][ T121] free_unref_page+0x7d/0x5f0 [ 855.186332][ T121] __unfreeze_partials+0x1ab/0x200 [ 855.191421][ T121] put_cpu_partial+0x106/0x170 [ 855.196171][ T121] qlist_free_all+0x2b/0x70 [ 855.200661][ T121] kasan_quarantine_reduce+0x169/0x180 [ 855.206101][ T121] __kasan_slab_alloc+0x1f/0x70 [ 855.210933][ T121] kmem_cache_alloc+0x1cc/0x300 [ 855.215772][ T121] insert_revoke_hash+0x29/0x1f0 [ 855.220738][ T121] __ext4_forget+0x290/0x740 [ 855.225331][ T121] ext4_free_blocks+0x94f/0x2810 [ 855.230286][ T121] ext4_ext_map_blocks+0x3680/0x6880 [ 855.235553][ T121] ext4_map_blocks+0xa49/0x1cc0 [ 855.240385][ T121] ext4_convert_unwritten_extents+0x2ed/0x700 [ 855.246438][ T121] ext4_dio_write_end_io+0xbe/0x160 [ 855.251620][ T121] iomap_dio_complete+0x160/0x740 [ 855.256660][ T121] [ 855.258966][ T121] Memory state around the buggy address: [ 855.264576][ T121] ffff888021aec980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 855.272616][ T121] ffff888021aeca00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 855.280657][ T121] >ffff888021aeca80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 855.288696][ T121] ^ [ 855.293262][ T121] ffff888021aecb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 855.301303][ T121] ffff888021aecb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 855.309343][ T121] ================================================================== [ 855.317380][ T121] Kernel panic - not syncing: panic_on_warn set ... [ 855.323944][ T121] CPU: 1 PID: 121 Comm: jfsCommit Not tainted 6.1.0-rc4-syzkaller-00159-g4bbf3422df78 #0 [ 855.333724][ T121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 855.343765][ T121] Call Trace: [ 855.347032][ T121] [ 855.349951][ T121] dump_stack_lvl+0x1b1/0x28e [ 855.354618][ T121] ? nf_tcp_handle_invalid+0x62e/0x62e [ 855.360062][ T121] ? panic+0x710/0x710 [ 855.364122][ T121] ? vscnprintf+0x59/0x80 [ 855.368435][ T121] panic+0x2d6/0x710 [ 855.372423][ T121] ? memcpy_page_flushcache+0xfc/0xfc [ 855.377786][ T121] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 855.383665][ T121] ? rcu_read_lock_sched_held+0x5d/0x110 [ 855.389322][ T121] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 855.395290][ T121] ? jfs_lazycommit+0x7e4/0xb80 [ 855.400123][ T121] end_report+0x91/0xa0 [ 855.404266][ T121] kasan_report+0xda/0x100 [ 855.408668][ T121] ? jfs_lazycommit+0x7e4/0xb80 [ 855.413504][ T121] jfs_lazycommit+0x7e4/0xb80 [ 855.418177][ T121] ? txFreelock+0x580/0x580 [ 855.422671][ T121] ? do_task_dead+0xc0/0xc0 [ 855.427338][ T121] ? _raw_spin_unlock+0x40/0x40 [ 855.432172][ T121] ? lockdep_hardirqs_on_prepare+0x428/0x790 [ 855.438138][ T121] ? __kthread_parkme+0x166/0x1c0 [ 855.443147][ T121] kthread+0x266/0x300 [ 855.447203][ T121] ? txFreelock+0x580/0x580 [ 855.451688][ T121] ? kthread_blkcg+0xd0/0xd0 [ 855.456264][ T121] ret_from_fork+0x1f/0x30 [ 855.460674][ T121] [ 855.463825][ T121] Kernel Offset: disabled [ 855.468140][ T121] Rebooting in 86400 seconds..