Warning: Permanently added '10.128.0.40' (ED25519) to the list of known hosts. executing program executing program executing program executing program executing program [ 60.019160][ T5823] loop1: detected capacity change from 0 to 32768 [ 60.038524][ T5821] loop0: detected capacity change from 0 to 32768 [ 60.054783][ T5822] loop2: detected capacity change from 0 to 32768 [ 60.081523][ T5823] [ 60.081523][ T5823] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 60.081523][ T5823] [ 60.081523][ T5822] [ 60.081523][ T5822] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 60.081523][ T5822] [ 60.083260][ T5821] [ 60.083260][ T5821] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 60.083260][ T5821] [ 60.114770][ T5824] loop3: detected capacity change from 0 to 32768 [ 60.117769][ T5825] loop4: detected capacity change from 0 to 32768 [ 60.152682][ T5825] [ 60.152682][ T5825] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 60.152682][ T5825] [ 60.166319][ T11] [ 60.166319][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 60.166319][ T11] [ 60.194156][ T11] [ 60.194156][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 60.194156][ T11] [ 60.206876][ T5818] [ 60.206876][ T5818] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 60.206876][ T5818] [ 60.220788][ T11] [ 60.220788][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 60.220788][ T11] [ 60.226397][ T3518] [ 60.226397][ T3518] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 60.226397][ T3518] [ 60.236783][ T114] [ 60.236783][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 60.236783][ T114] [ 60.241951][ T35] [ 60.241951][ T35] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 60.241951][ T35] [ 60.263308][ T5824] [ 60.263308][ T5824] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 60.263308][ T5824] [ 60.275111][ T11] [ 60.275111][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 60.275111][ T11] [ 60.284099][ T35] [ 60.284099][ T35] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 60.284099][ T35] [ 60.297727][ T3518] [ 60.297727][ T3518] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 60.297727][ T3518] [ 60.308796][ T5818] [ 60.308796][ T5818] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 60.308796][ T5818] [ 60.310039][ T114] [ 60.310039][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 60.310039][ T114] [ 60.333419][ T5820] [ 60.333419][ T5820] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 60.333419][ T5820] [ 60.345052][ T113] [ 60.345052][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 60.345052][ T113] [ 60.352978][ T5816] [ 60.352978][ T5816] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 60.352978][ T5816] [ 60.357874][ T5817] [ 60.357874][ T5817] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 60.357874][ T5817] [ 60.372692][ T5816] [ 60.372692][ T5816] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 60.372692][ T5816] [ 60.388030][ T3483] [ 60.388030][ T3483] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 60.388030][ T3483] [ 60.388478][ T5820] [ 60.388478][ T5820] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 60.388478][ T5820] [ 60.399389][ T3483] [ 60.399389][ T3483] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 60.399389][ T3483] [ 60.409735][ T114] [ 60.409735][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 60.409735][ T114] [ 60.436095][ T5817] [ 60.436095][ T5817] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 60.436095][ T5817] [ 60.436477][ T113] [ 60.436477][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 60.436477][ T113] [ 60.457586][ T5819] [ 60.457586][ T5819] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 60.457586][ T5819] [ 60.534128][ T5819] [ 60.534128][ T5819] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 60.534128][ T5819] executing program executing program executing program executing program executing program [ 61.362269][ T5830] loop0: detected capacity change from 0 to 32768 [ 61.407791][ T5830] [ 61.407791][ T5830] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 61.407791][ T5830] [ 61.443633][ T5831] loop4: detected capacity change from 0 to 32768 [ 61.465124][ T5831] [ 61.465124][ T5831] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 61.465124][ T5831] [ 61.480914][ T5832] loop1: detected capacity change from 0 to 32768 [ 61.488258][ T11] [ 61.488258][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 61.488258][ T11] [ 61.510622][ T3518] [ 61.510622][ T3518] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 61.510622][ T3518] [ 61.539454][ T11] [ 61.539454][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 61.539454][ T11] [ 61.540702][ T5832] [ 61.540702][ T5832] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 61.540702][ T5832] [ 61.558322][ T114] [ 61.558322][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 61.558322][ T114] [ 61.562584][ T5833] loop2: detected capacity change from 0 to 32768 [ 61.572141][ T5816] [ 61.572141][ T5816] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 61.572141][ T5816] [ 61.582545][ T3518] [ 61.582545][ T3518] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 61.582545][ T3518] [ 61.590379][ T5816] [ 61.590379][ T5816] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 61.590379][ T5816] [ 61.599800][ T5834] loop3: detected capacity change from 0 to 32768 [ 61.621157][ T3518] [ 61.621157][ T3518] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 61.621157][ T3518] [ 61.622512][ T5820] [ 61.622512][ T5820] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 61.622512][ T5820] [ 61.642539][ T3518] [ 61.642539][ T3518] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 61.642539][ T3518] [ 61.665582][ T5833] [ 61.665582][ T5833] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 61.665582][ T5833] [ 61.676493][ T5817] [ 61.676493][ T5817] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 61.676493][ T5817] [ 61.692924][ T114] [ 61.692924][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 61.692924][ T114] [ 61.706884][ T3483] [ 61.706884][ T3483] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 61.706884][ T3483] [ 61.712812][ T5820] [ 61.712812][ T5820] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 61.712812][ T5820] [ 61.722554][ T3483] [ 61.722554][ T3483] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 61.722554][ T3483] [ 61.727934][ T113] [ 61.727934][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 61.727934][ T113] [ 61.746105][ T5818] [ 61.746105][ T5818] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 61.746105][ T5818] [ 61.759198][ T5834] [ 61.759198][ T5834] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 61.759198][ T5834] [ 61.799605][ T5817] [ 61.799605][ T5817] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 61.799605][ T5817] [ 61.812788][ T114] [ 61.812788][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 61.812788][ T114] [ 61.842549][ T5818] [ 61.842549][ T5818] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 61.842549][ T5818] [ 61.873465][ T3483] [ 61.873465][ T3483] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 61.873465][ T3483] executing program [ 61.913469][ T3483] [ 61.913469][ T3483] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 61.913469][ T3483] [ 61.951065][ T5819] [ 61.951065][ T5819] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 61.951065][ T5819] [ 61.990915][ T113] [ 61.990915][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 61.990915][ T113] executing program executing program [ 62.032875][ T5819] [ 62.032875][ T5819] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 62.032875][ T5819] executing program executing program [ 62.694698][ T5835] loop0: detected capacity change from 0 to 32768 [ 62.726069][ T5835] [ 62.726069][ T5835] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 62.726069][ T5835] [ 62.741619][ T5836] loop4: detected capacity change from 0 to 32768 [ 62.782680][ T3483] [ 62.782680][ T3483] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 62.782680][ T3483] [ 62.797177][ T5836] [ 62.797177][ T5836] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 62.797177][ T5836] [ 62.805430][ T5837] loop1: detected capacity change from 0 to 32768 [ 62.824658][ T3483] [ 62.824658][ T3483] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 62.824658][ T3483] [ 62.839761][ T11] [ 62.839761][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 62.839761][ T11] [ 62.850755][ T5816] [ 62.850755][ T5816] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 62.850755][ T5816] [ 62.850931][ T5837] [ 62.850931][ T5837] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 62.850931][ T5837] [ 62.874256][ T114] [ 62.874256][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 62.874256][ T114] [ 62.887736][ T11] [ 62.887736][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 62.887736][ T11] [ 62.902603][ T5816] [ 62.902603][ T5816] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 62.902603][ T5816] [ 62.922810][ T5820] [ 62.922810][ T5820] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 62.922810][ T5820] [ 62.935136][ T11] [ 62.935136][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 62.935136][ T11] [ 62.936580][ T113] [ 62.936580][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 62.936580][ T113] [ 62.948635][ T5838] loop2: detected capacity change from 0 to 32768 [ 62.962846][ T11] [ 62.962846][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 62.962846][ T11] [ 62.968905][ T5820] [ 62.968905][ T5820] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 62.968905][ T5820] [ 62.987383][ T114] [ 62.987383][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 62.987383][ T114] [ 63.004402][ T5817] [ 63.004402][ T5817] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 63.004402][ T5817] [ 63.005778][ T5838] [ 63.005778][ T5838] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 63.005778][ T5838] [ 63.015760][ T5817] [ 63.015760][ T5817] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 63.015760][ T5817] [ 63.067467][ T5839] loop3: detected capacity change from 0 to 32768 [ 63.092766][ T35] [ 63.092766][ T35] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 63.092766][ T35] [ 63.123017][ T35] [ 63.123017][ T35] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 63.123017][ T35] [ 63.124490][ T5839] [ 63.124490][ T5839] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 63.124490][ T5839] [ 63.144766][ T113] [ 63.144766][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 63.144766][ T113] [ 63.180775][ T5818] [ 63.180775][ T5818] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 63.180775][ T5818] [ 63.202884][ T5818] [ 63.202884][ T5818] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 63.202884][ T5818] [ 63.227271][ T35] executing program [ 63.227271][ T35] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 63.227271][ T35] executing program [ 63.283208][ T35] [ 63.283208][ T35] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 63.283208][ T35] [ 63.313029][ T114] [ 63.313029][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 63.313029][ T114] [ 63.330607][ T5819] executing program [ 63.330607][ T5819] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 63.330607][ T5819] [ 63.355389][ T5819] [ 63.355389][ T5819] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 63.355389][ T5819] executing program executing program [ 64.021283][ T5840] loop4: detected capacity change from 0 to 32768 [ 64.036379][ T5841] loop0: detected capacity change from 0 to 32768 [ 64.046232][ T5842] loop1: detected capacity change from 0 to 32768 [ 64.057343][ T5841] [ 64.057343][ T5841] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 64.057343][ T5841] [ 64.072630][ T5842] [ 64.072630][ T5842] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 64.072630][ T5842] [ 64.083853][ T5840] [ 64.083853][ T5840] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 64.083853][ T5840] [ 64.115239][ T3483] [ 64.115239][ T3483] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 64.115239][ T3483] [ 64.126122][ T35] [ 64.126122][ T35] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 64.126122][ T35] [ 64.146077][ T3483] [ 64.146077][ T3483] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 64.146077][ T3483] [ 64.157736][ T3441] [ 64.157736][ T3441] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 64.157736][ T3441] [ 64.168413][ T35] [ 64.168413][ T35] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 64.168413][ T35] [ 64.202619][ T3441] [ 64.202619][ T3441] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 64.202619][ T3441] [ 64.205940][ T113] [ 64.205940][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 64.205940][ T113] [ 64.224752][ T5820] [ 64.224752][ T5820] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 64.224752][ T5820] [ 64.224922][ T5816] [ 64.224922][ T5816] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 64.224922][ T5816] [ 64.242834][ T114] [ 64.242834][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 64.242834][ T114] [ 64.262607][ T5817] [ 64.262607][ T5817] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 64.262607][ T5817] [ 64.263032][ T5843] loop2: detected capacity change from 0 to 32768 [ 64.273638][ T5820] [ 64.273638][ T5820] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 64.273638][ T5820] [ 64.280024][ T113] [ 64.280024][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 64.280024][ T113] [ 64.292682][ T5817] [ 64.292682][ T5817] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 64.292682][ T5817] [ 64.305298][ T5843] [ 64.305298][ T5843] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 64.305298][ T5843] [ 64.338705][ T5816] [ 64.338705][ T5816] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 64.338705][ T5816] [ 64.351473][ T3483] [ 64.351473][ T3483] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 64.351473][ T3483] [ 64.388980][ T5844] loop3: detected capacity change from 0 to 32768 [ 64.395883][ T3483] [ 64.395883][ T3483] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 64.395883][ T3483] [ 64.408164][ T113] ================================================================== [ 64.416251][ T113] BUG: KASAN: slab-use-after-free in txEnd+0x354/0x560 [ 64.423150][ T113] Write of size 8 at addr ffff88807ae8c840 by task jfsCommit/113 [ 64.430870][ T113] [ 64.433230][ T113] CPU: 0 UID: 0 PID: 113 Comm: jfsCommit Not tainted 6.13.0-rc1-syzkaller-00182-gb8f52214c61a #0 [ 64.443744][ T113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 64.453827][ T113] Call Trace: [ 64.457114][ T113] [ 64.460049][ T113] dump_stack_lvl+0x241/0x360 [ 64.464744][ T113] ? __pfx_dump_stack_lvl+0x10/0x10 [ 64.469942][ T113] ? __pfx__printk+0x10/0x10 [ 64.474537][ T113] ? _printk+0xd5/0x120 [ 64.478730][ T113] ? __virt_addr_valid+0x183/0x530 [ 64.483846][ T113] ? __virt_addr_valid+0x183/0x530 [ 64.489042][ T113] print_report+0x169/0x550 [ 64.493544][ T113] ? __virt_addr_valid+0x183/0x530 [ 64.498651][ T113] ? __virt_addr_valid+0x183/0x530 [ 64.503755][ T113] ? __virt_addr_valid+0x45f/0x530 [ 64.508860][ T113] ? __phys_addr+0xba/0x170 [ 64.513363][ T113] ? txEnd+0x354/0x560 [ 64.517424][ T113] kasan_report+0x143/0x180 [ 64.521917][ T113] ? txEnd+0x354/0x560 [ 64.526022][ T113] kasan_check_range+0x282/0x290 [ 64.531041][ T113] txEnd+0x354/0x560 [ 64.534931][ T113] jfs_lazycommit+0x634/0xb80 [ 64.539601][ T113] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 64.545496][ T113] ? lockdep_hardirqs_on+0x99/0x150 [ 64.550689][ T113] ? __pfx_jfs_lazycommit+0x10/0x10 [ 64.555889][ T113] ? __pfx_default_wake_function+0x10/0x10 [ 64.561688][ T113] ? __kthread_parkme+0x169/0x1d0 [ 64.566708][ T113] ? __pfx_jfs_lazycommit+0x10/0x10 [ 64.571901][ T113] kthread+0x2f0/0x390 [ 64.575963][ T113] ? __pfx_jfs_lazycommit+0x10/0x10 [ 64.581152][ T113] ? __pfx_kthread+0x10/0x10 [ 64.585734][ T113] ret_from_fork+0x4b/0x80 [ 64.590142][ T113] ? __pfx_kthread+0x10/0x10 [ 64.594732][ T113] ret_from_fork_asm+0x1a/0x30 [ 64.599491][ T113] [ 64.602501][ T113] [ 64.604813][ T113] Allocated by task 5841: [ 64.609123][ T113] kasan_save_track+0x3f/0x80 [ 64.613795][ T113] __kasan_kmalloc+0x98/0xb0 [ 64.618374][ T113] __kmalloc_cache_noprof+0x243/0x390 [ 64.623732][ T113] lmLogOpen+0x320/0x1040 [ 64.628055][ T113] jfs_mount_rw+0xf1/0x6a0 [ 64.632471][ T113] jfs_fill_super+0x775/0xd90 [ 64.637137][ T113] get_tree_bdev_flags+0x48c/0x5c0 [ 64.642236][ T113] vfs_get_tree+0x90/0x2b0 [ 64.646641][ T113] do_new_mount+0x2be/0xb40 [ 64.651131][ T113] __se_sys_mount+0x2d6/0x3c0 [ 64.655796][ T113] do_syscall_64+0xf3/0x230 [ 64.660298][ T113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.666183][ T113] [ 64.668577][ T113] Freed by task 5816: [ 64.672546][ T113] kasan_save_track+0x3f/0x80 [ 64.677215][ T113] kasan_save_free_info+0x40/0x50 [ 64.682227][ T113] __kasan_slab_free+0x59/0x70 [ 64.686988][ T113] kfree+0x196/0x430 [ 64.690868][ T113] lmLogClose+0x2a1/0x530 [ 64.695198][ T113] jfs_umount+0x2ce/0x3a0 [ 64.699514][ T113] jfs_put_super+0x8a/0x190 [ 64.704005][ T113] generic_shutdown_super+0x139/0x2d0 [ 64.709367][ T113] kill_block_super+0x44/0x90 [ 64.714041][ T113] deactivate_locked_super+0xc4/0x130 [ 64.719402][ T113] cleanup_mnt+0x41f/0x4b0 [ 64.723810][ T113] task_work_run+0x24f/0x310 [ 64.728390][ T113] syscall_exit_to_user_mode+0x13f/0x340 [ 64.734013][ T113] do_syscall_64+0x100/0x230 [ 64.738591][ T113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.744475][ T113] [ 64.746797][ T113] The buggy address belongs to the object at ffff88807ae8c800 [ 64.746797][ T113] which belongs to the cache kmalloc-1k of size 1024 [ 64.760833][ T113] The buggy address is located 64 bytes inside of [ 64.760833][ T113] freed 1024-byte region [ffff88807ae8c800, ffff88807ae8cc00) [ 64.774617][ T113] [ 64.776928][ T113] The buggy address belongs to the physical page: [ 64.783334][ T113] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88807ae8f000 pfn:0x7ae88 [ 64.793390][ T113] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 64.801873][ T113] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 64.809845][ T113] page_type: f5(slab) [ 64.813813][ T113] raw: 00fff00000000040 ffff88801ac41dc0 0000000000000000 0000000000000001 [ 64.822384][ T113] raw: ffff88807ae8f000 000000008010000e 00000001f5000000 0000000000000000 [ 64.830954][ T113] head: 00fff00000000040 ffff88801ac41dc0 0000000000000000 0000000000000001 [ 64.839609][ T113] head: ffff88807ae8f000 000000008010000e 00000001f5000000 0000000000000000 [ 64.848268][ T113] head: 00fff00000000003 ffffea0001eba201 ffffffffffffffff 0000000000000000 [ 64.856924][ T113] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 64.865577][ T113] page dumped because: kasan: bad access detected [ 64.871983][ T113] page_owner tracks the page as allocated [ 64.877687][ T113] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5513, tgid 5513 (dhcpcd-run-hook), ts 36663876484, free_ts 36657973340 [ 64.899295][ T113] post_alloc_hook+0x1f3/0x230 [ 64.904053][ T113] get_page_from_freelist+0x3651/0x37a0 [ 64.909592][ T113] __alloc_pages_noprof+0x292/0x710 [ 64.914780][ T113] alloc_pages_mpol_noprof+0x3e8/0x680 [ 64.920226][ T113] alloc_slab_page+0x6a/0x140 [ 64.924901][ T113] allocate_slab+0x5a/0x2f0 [ 64.929393][ T113] ___slab_alloc+0xcd1/0x14b0 [ 64.934061][ T113] __slab_alloc+0x58/0xa0 [ 64.938376][ T113] __kmalloc_noprof+0x2e6/0x4c0 [ 64.943217][ T113] load_elf_binary+0x2eb/0x2770 [ 64.948053][ T113] bprm_execve+0xaf5/0x17a0 [ 64.952548][ T113] do_execveat_common+0x55f/0x6f0 [ 64.957557][ T113] __x64_sys_execve+0x92/0xb0 [ 64.962223][ T113] do_syscall_64+0xf3/0x230 [ 64.966808][ T113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.972796][ T113] page last free pid 5512 tgid 5512 stack trace: [ 64.979138][ T113] free_unref_page+0xde3/0x1130 [ 64.984013][ T113] __put_partials+0xeb/0x130 [ 64.988642][ T113] put_cpu_partial+0x17c/0x250 [ 64.993411][ T113] __slab_free+0x2ea/0x3d0 [ 64.997856][ T113] qlist_free_all+0x9a/0x140 [ 65.002444][ T113] kasan_quarantine_reduce+0x14f/0x170 [ 65.007907][ T113] __kasan_slab_alloc+0x23/0x80 [ 65.012753][ T113] __kmalloc_node_noprof+0x23c/0x4d0 [ 65.018025][ T113] __kvmalloc_node_noprof+0x72/0x190 [ 65.023300][ T113] seq_read_iter+0x20c/0xd70 [ 65.027880][ T113] proc_reg_read_iter+0x1c2/0x290 [ 65.032981][ T113] vfs_read+0x991/0xb70 [ 65.037130][ T113] ksys_read+0x18f/0x2b0 [ 65.041364][ T113] do_syscall_64+0xf3/0x230 [ 65.045859][ T113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.051750][ T113] [ 65.054069][ T113] Memory state around the buggy address: [ 65.059685][ T113] ffff88807ae8c700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 65.067729][ T113] ffff88807ae8c780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 65.075778][ T113] >ffff88807ae8c800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 65.083824][ T113] ^ [ 65.089958][ T113] ffff88807ae8c880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 65.098004][ T113] ffff88807ae8c900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 65.106071][ T113] ================================================================== [ 65.149590][ T5818] [ 65.149590][ T5818] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 65.149590][ T5818] [ 65.161053][ T5818] [ 65.161053][ T5818] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 65.161053][ T5818] [ 65.189712][ T114] [ 65.189712][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... executing program [ 65.189712][ T114] executing program [ 65.276768][ T5844] [ 65.276768][ T5844] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 65.276768][ T5844] [ 65.288545][ T113] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 65.295785][ T113] CPU: 1 UID: 0 PID: 113 Comm: jfsCommit Not tainted 6.13.0-rc1-syzkaller-00182-gb8f52214c61a #0 [ 65.306304][ T113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 65.316369][ T113] Call Trace: [ 65.319657][ T113] [ 65.322609][ T113] dump_stack_lvl+0x241/0x360 [ 65.327308][ T113] ? __pfx_dump_stack_lvl+0x10/0x10 [ 65.332530][ T113] ? __pfx__printk+0x10/0x10 [ 65.337138][ T113] ? preempt_schedule+0xe1/0xf0 [ 65.342004][ T113] ? vscnprintf+0x5d/0x90 [ 65.346345][ T113] panic+0x349/0x880 [ 65.350254][ T113] ? check_panic_on_warn+0x21/0xb0 [ 65.355384][ T113] ? __pfx_panic+0x10/0x10 [ 65.359820][ T113] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 65.365820][ T113] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 65.372160][ T113] ? print_report+0x502/0x550 [ 65.376890][ T113] check_panic_on_warn+0x86/0xb0 [ 65.381842][ T113] ? txEnd+0x354/0x560 [ 65.385928][ T113] end_report+0x77/0x160 [ 65.390177][ T113] kasan_report+0x154/0x180 [ 65.394691][ T113] ? txEnd+0x354/0x560 [ 65.398787][ T113] kasan_check_range+0x282/0x290 [ 65.403749][ T113] txEnd+0x354/0x560 [ 65.407673][ T113] jfs_lazycommit+0x634/0xb80 [ 65.412377][ T113] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 65.418285][ T113] ? lockdep_hardirqs_on+0x99/0x150 [ 65.423503][ T113] ? __pfx_jfs_lazycommit+0x10/0x10 [ 65.428726][ T113] ? __pfx_default_wake_function+0x10/0x10 [ 65.434552][ T113] ? __kthread_parkme+0x169/0x1d0 [ 65.439586][ T113] ? __pfx_jfs_lazycommit+0x10/0x10 [ 65.444811][ T113] kthread+0x2f0/0x390 [ 65.448898][ T113] ? __pfx_jfs_lazycommit+0x10/0x10 [ 65.454098][ T113] ? __pfx_kthread+0x10/0x10 [ 65.458700][ T113] ret_from_fork+0x4b/0x80 [ 65.463119][ T113] ? __pfx_kthread+0x10/0x10 [ 65.467706][ T113] ret_from_fork_asm+0x1a/0x30 [ 65.472500][ T113] [ 65.475837][ T113] Kernel Offset: disabled [ 65.480159][ T113] Rebooting in 86400 seconds..