Warning: Permanently added '10.128.1.149' (ED25519) to the list of known hosts.
executing program
executing program
executing program
executing program
executing program
[ 64.270070][ T5213] loop0: detected capacity change from 0 to 32768
[ 64.277287][ T5217] loop4: detected capacity change from 0 to 32768
[ 64.297717][ T5216] loop3: detected capacity change from 0 to 32768
[ 64.310536][ T5215] loop2: detected capacity change from 0 to 32768
[ 64.323797][ T5213]
[ 64.323797][ T5213] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 64.323797][ T5213]
[ 64.346901][ T5215]
[ 64.346901][ T5215] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 64.346901][ T5215]
[ 64.354322][ T5218] loop1: detected capacity change from 0 to 32768
[ 64.371682][ T5213]
[ 64.371682][ T5213] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 64.371682][ T5213]
[ 64.374411][ T5217]
[ 64.374411][ T5217] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 64.374411][ T5217]
[ 64.401487][ T5213]
[ 64.401487][ T5213] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 64.401487][ T5213]
[ 64.414335][ T5216]
[ 64.414335][ T5216] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 64.414335][ T5216]
[ 64.416066][ T5218]
[ 64.416066][ T5218] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 64.416066][ T5218]
[ 64.425791][ T5215]
[ 64.425791][ T5215] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 64.425791][ T5215]
[ 64.442198][ T5217]
[ 64.442198][ T5217] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 64.442198][ T5217]
[ 64.462102][ T5215]
[ 64.462102][ T5215] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 64.462102][ T5215]
[ 64.481972][ T114]
[ 64.481972][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 64.481972][ T114]
[ 64.493553][ T5216]
[ 64.493553][ T5216] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 64.493553][ T5216]
[ 64.508226][ T5218]
[ 64.508226][ T5218] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 64.508226][ T5218]
[ 64.516088][ T5216]
[ 64.516088][ T5216] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 64.516088][ T5216]
[ 64.529341][ T5217]
[ 64.529341][ T5217] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 64.529341][ T5217]
[ 64.539100][ T113]
[ 64.539100][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 64.539100][ T113]
[ 64.540468][ T12]
[ 64.540468][ T12] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 64.540468][ T12]
[ 64.561960][ T63]
[ 64.561960][ T63] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 64.561960][ T63]
[ 64.564144][ T5218]
[ 64.564144][ T5218] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 64.564144][ T5218]
[ 64.583083][ T114]
[ 64.583083][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 64.583083][ T114]
[ 64.594900][ T113]
[ 64.594900][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 64.594900][ T113]
[ 64.607424][ T63]
[ 64.607424][ T63] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 64.607424][ T63]
[ 64.609129][ T12]
[ 64.609129][ T12] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 64.609129][ T12]
[ 64.619348][ T5211]
[ 64.619348][ T5211] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 64.619348][ T5211]
[ 64.630141][ T2571]
[ 64.630141][ T2571] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 64.630141][ T2571]
[ 64.641902][ T114]
[ 64.641902][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 64.641902][ T114]
[ 64.653236][ T2571]
[ 64.653236][ T2571] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 64.653236][ T2571]
[ 64.660642][ T113]
[ 64.660642][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 64.660642][ T113]
[ 64.671612][ T35]
[ 64.671612][ T35] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 64.671612][ T35]
[ 64.684353][ T5211]
[ 64.684353][ T5211] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 64.684353][ T5211]
[ 64.692224][ T5209]
[ 64.692224][ T5209] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 64.692224][ T5209]
[ 64.702534][ T63]
[ 64.702534][ T63] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 64.702534][ T63]
[ 64.723224][ T35]
[ 64.723224][ T35] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 64.723224][ T35]
[ 64.723371][ T63]
[ 64.723371][ T63] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 64.723371][ T63]
[ 64.744571][ T5214]
[ 64.744571][ T5214] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 64.744571][ T5214]
[ 64.757756][ T114] ==================================================================
[ 64.765850][ T114] BUG: KASAN: slab-use-after-free in txEnd+0x354/0x560
[ 64.771139][ T5210]
[ 64.771139][ T5210] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 64.771139][ T5210]
[ 64.772808][ T114] Write of size 8 at addr ffff88802db5e040 by task jfsCommit/114
[ 64.783654][ T113]
[ 64.783654][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 64.783654][ T113]
[ 64.790894][ T114]
[ 64.790922][ T114] CPU: 0 UID: 0 PID: 114 Comm: jfsCommit Not tainted 6.10.0-syzkaller-12888-g5437f30d3458 #0
[ 64.790948][ T114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 64.811079][ T5214]
[ 64.811079][ T5214] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 64.811079][ T5214]
[ 64.813786][ T114] Call Trace:
[ 64.835772][ T5210]
[ 64.835772][ T5210] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 64.835772][ T5210]
[ 64.837908][ T114]
[ 64.837919][ T114] dump_stack_lvl+0x241/0x360
[ 64.853230][ T113]
[ 64.853230][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 64.853230][ T113]
[ 64.856182][ T114] ? __pfx_dump_stack_lvl+0x10/0x10
[ 64.866959][ T5209]
[ 64.866959][ T5209] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 64.866959][ T5209]
[ 64.871953][ T114] ? __pfx__printk+0x10/0x10
[ 64.871989][ T114] ? _printk+0xd5/0x120
[ 64.872008][ T114] ? __virt_addr_valid+0x183/0x530
[ 64.897091][ T114] ? __virt_addr_valid+0x183/0x530
[ 64.902229][ T114] print_report+0x169/0x550
[ 64.906760][ T114] ? __virt_addr_valid+0x183/0x530
[ 64.908943][ T113]
[ 64.908943][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 64.908943][ T113]
[ 64.911879][ T114] ? __virt_addr_valid+0x183/0x530
[ 64.927424][ T114] ? __virt_addr_valid+0x45f/0x530
[ 64.932638][ T114] ? __phys_addr+0xba/0x170
[ 64.937936][ T114] ? txEnd+0x354/0x560
[ 64.942016][ T114] kasan_report+0x143/0x180
[ 64.946536][ T114] ? txEnd+0x354/0x560
[ 64.950729][ T114] kasan_check_range+0x282/0x290
[ 64.955685][ T114] txEnd+0x354/0x560
[ 64.959606][ T114] jfs_lazycommit+0x634/0xb80
[ 64.964306][ T114] ? _raw_spin_unlock_irqrestore+0x8f/0x140
[ 64.970219][ T114] ? lockdep_hardirqs_on+0x99/0x150
[ 64.975453][ T114] ? __pfx_jfs_lazycommit+0x10/0x10
[ 64.980667][ T114] ? __pfx_default_wake_function+0x10/0x10
[ 64.986506][ T114] ? __kthread_parkme+0x169/0x1d0
[ 64.991560][ T114] ? __pfx_jfs_lazycommit+0x10/0x10
[ 64.996867][ T114] kthread+0x2f0/0x390
[ 65.001045][ T114] ? __pfx_jfs_lazycommit+0x10/0x10
[ 65.006252][ T114] ? __pfx_kthread+0x10/0x10
[ 65.010863][ T114] ret_from_fork+0x4b/0x80
[ 65.015309][ T114] ? __pfx_kthread+0x10/0x10
[ 65.019926][ T114] ret_from_fork_asm+0x1a/0x30
[ 65.024734][ T114]
[ 65.027764][ T114]
[ 65.030093][ T114] Allocated by task 5215:
executing program
[ 65.034426][ T114] kasan_save_track+0x3f/0x80
[ 65.039124][ T114] __kasan_kmalloc+0x98/0xb0
[ 65.043730][ T114] __kmalloc_cache_noprof+0x19c/0x2c0
[ 65.049121][ T114] lmLogOpen+0x320/0x1040
[ 65.053478][ T114] jfs_mount_rw+0xf1/0x6a0
[ 65.057920][ T114] jfs_fill_super+0x681/0xc50
[ 65.062618][ T114] mount_bdev+0x20a/0x2d0
[ 65.067041][ T114] legacy_get_tree+0xee/0x190
[ 65.071726][ T114] vfs_get_tree+0x90/0x2a0
[ 65.076146][ T114] do_new_mount+0x2be/0xb40
[ 65.080661][ T114] __se_sys_mount+0x2d6/0x3c0
[ 65.085360][ T114] do_syscall_64+0xf3/0x230
[ 65.089886][ T114] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 65.095795][ T114]
[ 65.098124][ T114] Freed by task 5211:
[ 65.102190][ T114] kasan_save_track+0x3f/0x80
[ 65.106874][ T114] kasan_save_free_info+0x40/0x50
[ 65.111919][ T114] poison_slab_object+0xe0/0x150
[ 65.116961][ T114] __kasan_slab_free+0x37/0x60
[ 65.121749][ T114] kfree+0x149/0x360
[ 65.125660][ T114] lmLogClose+0x2a1/0x530
[ 65.130016][ T114] jfs_umount+0x2ce/0x3a0
[ 65.134441][ T114] jfs_put_super+0x8a/0x190
[ 65.139035][ T114] generic_shutdown_super+0x136/0x2d0
[ 65.144416][ T114] kill_block_super+0x44/0x90
[ 65.149092][ T114] deactivate_locked_super+0xc4/0x130
[ 65.154468][ T114] cleanup_mnt+0x41f/0x4b0
[ 65.158974][ T114] task_work_run+0x24f/0x310
[ 65.163581][ T114] syscall_exit_to_user_mode+0x168/0x370
[ 65.169230][ T114] do_syscall_64+0x100/0x230
[ 65.173924][ T114] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 65.179839][ T114]
[ 65.182161][ T114] The buggy address belongs to the object at ffff88802db5e000
[ 65.182161][ T114] which belongs to the cache kmalloc-1k of size 1024
[ 65.196478][ T114] The buggy address is located 64 bytes inside of
[ 65.196478][ T114] freed 1024-byte region [ffff88802db5e000, ffff88802db5e400)
[ 65.210544][ T114]
[ 65.212883][ T114] The buggy address belongs to the physical page:
[ 65.219304][ T114] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2db58
[ 65.228173][ T114] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 65.236764][ T114] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 65.244763][ T114] page_type: 0xfdffffff(slab)
[ 65.249538][ T114] raw: 00fff00000000040 ffff888015441dc0 0000000000000000 dead000000000001
[ 65.258229][ T114] raw: 0000000000000000 0000000000100010 00000001fdffffff 0000000000000000
[ 65.266871][ T114] head: 00fff00000000040 ffff888015441dc0 0000000000000000 dead000000000001
[ 65.275759][ T114] head: 0000000000000000 0000000000100010 00000001fdffffff 0000000000000000
[ 65.284618][ T114] head: 00fff00000000003 ffffea0000b6d601 ffffffffffffffff 0000000000000000
[ 65.293306][ T114] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[ 65.302078][ T114] page dumped because: kasan: bad access detected
[ 65.308515][ T114] page_owner tracks the page as allocated
[ 65.314497][ T114] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 14004616852, free_ts 0
[ 65.334221][ T114] post_alloc_hook+0x1f3/0x230
[ 65.339098][ T114] get_page_from_freelist+0x2e4c/0x2f10
[ 65.344657][ T114] __alloc_pages_noprof+0x256/0x6c0
[ 65.349876][ T114] alloc_slab_page+0x5f/0x120
[ 65.354576][ T114] allocate_slab+0x5a/0x2f0
[ 65.359426][ T114] ___slab_alloc+0xcd1/0x14b0
[ 65.364106][ T114] __slab_alloc+0x58/0xa0
[ 65.368441][ T114] __kmalloc_node_track_caller_noprof+0x281/0x440
[ 65.374862][ T114] krealloc_noprof+0x7d/0x120
[ 65.379564][ T114] add_sysfs_param+0xca/0x7f0
[ 65.384248][ T114] kernel_add_sysfs_param+0xb4/0x130
[ 65.389625][ T114] param_sysfs_builtin+0x16e/0x1f0
[ 65.394758][ T114] param_sysfs_builtin_init+0x31/0x40
[ 65.400511][ T114] do_one_initcall+0x248/0x880
[ 65.405465][ T114] do_initcall_level+0x157/0x210
[ 65.410416][ T114] do_initcalls+0x3f/0x80
[ 65.414777][ T114] page_owner free stack trace missing
[ 65.420152][ T114]
[ 65.422483][ T114] Memory state around the buggy address:
[ 65.428107][ T114] ffff88802db5df00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
executing program
[ 65.436345][ T114] ffff88802db5df80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 65.444419][ T114] >ffff88802db5e000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 65.452670][ T114] ^
[ 65.458834][ T114] ffff88802db5e080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 65.466905][ T114] ffff88802db5e100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 65.474980][ T114] ==================================================================
[ 65.491302][ T113]
[ 65.491302][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 65.491302][ T113]
[ 65.538902][ T5212]
[ 65.538902][ T5212] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 65.538902][ T5212]
[ 65.546305][ T114] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 65.546322][ T114] CPU: 1 UID: 0 PID: 114 Comm: jfsCommit Not tainted 6.10.0-syzkaller-12888-g5437f30d3458 #0
[ 65.546344][ T114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 65.546354][ T114] Call Trace:
[ 65.546361][ T114]
[ 65.546368][ T114] dump_stack_lvl+0x241/0x360
[ 65.546395][ T114] ? __pfx_dump_stack_lvl+0x10/0x10
[ 65.546415][ T114] ? __pfx__printk+0x10/0x10
[ 65.546435][ T114] ? preempt_schedule+0xe1/0xf0
[ 65.546454][ T114] ? vscnprintf+0x5d/0x90
[ 65.546469][ T114] panic+0x349/0x860
[ 65.546487][ T114] ? check_panic_on_warn+0x21/0xb0
[ 65.546504][ T114] ? __pfx_panic+0x10/0x10
[ 65.546524][ T114] ? _raw_spin_unlock_irqrestore+0x130/0x140
[ 65.546542][ T114] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 65.546558][ T114] ? print_report+0x502/0x550
[ 65.546579][ T114] check_panic_on_warn+0x86/0xb0
[ 65.546595][ T114] ? txEnd+0x354/0x560
[ 65.546609][ T114] end_report+0x77/0x160
[ 65.546627][ T114] kasan_report+0x154/0x180
[ 65.546646][ T114] ? txEnd+0x354/0x560
[ 65.546663][ T114] kasan_check_range+0x282/0x290
[ 65.546682][ T114] txEnd+0x354/0x560
[ 65.546698][ T114] jfs_lazycommit+0x634/0xb80
[ 65.546714][ T114] ? _raw_spin_unlock_irqrestore+0x8f/0x140
[ 65.546730][ T114] ? lockdep_hardirqs_on+0x99/0x150
[ 65.546751][ T114] ? __pfx_jfs_lazycommit+0x10/0x10
[ 65.546767][ T114] ? __pfx_default_wake_function+0x10/0x10
[ 65.546786][ T114] ? __kthread_parkme+0x169/0x1d0
[ 65.546809][ T114] ? __pfx_jfs_lazycommit+0x10/0x10
[ 65.546824][ T114] kthread+0x2f0/0x390
[ 65.546838][ T114] ? __pfx_jfs_lazycommit+0x10/0x10
[ 65.546853][ T114] ? __pfx_kthread+0x10/0x10
[ 65.546868][ T114] ret_from_fork+0x4b/0x80
[ 65.546889][ T114] ? __pfx_kthread+0x10/0x10
[ 65.546903][ T114] ret_from_fork_asm+0x1a/0x30
[ 65.546930][ T114]
[ 65.549561][ T114] Kernel Offset: disabled