Warning: Permanently added '10.128.1.214' (ECDSA) to the list of known hosts. [ 54.028479][ T5006] cgroup: Unknown subsys name 'net' [ 54.167436][ T5006] cgroup: Unknown subsys name 'rlimit' executing program executing program executing program [ 54.548292][ T5027] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5027 'syz-executor171' executing program executing program executing program [ 55.454896][ T5027] loop5: detected capacity change from 0 to 32768 [ 55.568940][ T5032] loop4: detected capacity change from 0 to 32768 [ 55.648868][ T5035] loop0: detected capacity change from 0 to 32768 [ 55.663121][ T5037] loop3: detected capacity change from 0 to 32768 [ 55.668933][ T5029] loop2: detected capacity change from 0 to 32768 [ 55.761010][ T5036] loop1: detected capacity change from 0 to 32768 executing program executing program executing program executing program executing program executing program [ 56.954543][ T5047] loop2: detected capacity change from 0 to 32768 [ 56.983928][ T5049] loop5: detected capacity change from 0 to 32768 [ 57.185425][ T5052] loop4: detected capacity change from 0 to 32768 [ 57.186768][ T5054] loop0: detected capacity change from 0 to 32768 [ 57.255571][ T5055] loop1: detected capacity change from 0 to 32768 executing program executing program [ 57.473763][ T5057] loop3: detected capacity change from 0 to 32768 executing program executing program executing program executing program [ 58.400619][ T5064] loop2: detected capacity change from 0 to 32768 [ 58.414777][ T5066] loop5: detected capacity change from 0 to 32768 [ 58.677563][ T5069] loop4: detected capacity change from 0 to 32768 executing program [ 58.803620][ T5071] loop0: detected capacity change from 0 to 32768 [ 58.814740][ T5073] loop1: detected capacity change from 0 to 32768 executing program executing program [ 59.136478][ T5075] loop3: detected capacity change from 0 to 32768 executing program executing program executing program [ 59.938765][ T5080] loop5: detected capacity change from 0 to 32768 [ 60.003800][ T5085] loop0: detected capacity change from 0 to 32768 [ 60.105143][ T5086] loop2: detected capacity change from 0 to 32768 [ 60.365606][ T5089] loop1: detected capacity change from 0 to 32768 executing program [ 60.411630][ T5091] loop4: detected capacity change from 0 to 32768 executing program executing program [ 60.676589][ T5097] read_mapping_page failed! [ 60.693484][ T5097] diWriteSpecial: failed to read aggregate inode extent! [ 60.721723][ T5097] read_mapping_page failed! [ 60.741825][ T5097] diWriteSpecial: failed to read aggregate inode extent! [ 60.748896][ T5093] loop3: detected capacity change from 0 to 32768 executing program executing program executing program [ 61.458874][ T5099] loop0: detected capacity change from 0 to 32768 [ 61.531249][ T5102] loop5: detected capacity change from 0 to 32768 [ 61.637219][ T5104] loop2: detected capacity change from 0 to 32768 executing program executing program [ 62.040755][ T5107] loop4: detected capacity change from 0 to 32768 executing program [ 62.164373][ T5109] loop1: detected capacity change from 0 to 32768 [ 62.402768][ T5111] loop3: detected capacity change from 0 to 32768 executing program executing program executing program [ 63.107956][ T5116] loop0: detected capacity change from 0 to 32768 [ 63.247927][ T5118] loop5: detected capacity change from 0 to 32768 [ 63.447763][ T5121] loop2: detected capacity change from 0 to 32768 [ 63.492305][ T5131] read_mapping_page failed! [ 63.501947][ T5131] diWriteSpecial: failed to read aggregate inode extent! executing program [ 63.541888][ T5131] read_mapping_page failed! [ 63.546438][ T5131] diWriteSpecial: failed to read aggregate inode extent! [ 63.693925][ T5125] loop4: detected capacity change from 0 to 32768 executing program executing program [ 63.960703][ T5127] loop1: detected capacity change from 0 to 32768 [ 64.023633][ T5129] loop3: detected capacity change from 0 to 32768 executing program executing program executing program [ 64.661306][ T5134] loop0: detected capacity change from 0 to 32768 [ 64.942427][ T5137] loop5: detected capacity change from 0 to 32768 [ 65.005922][ T5139] loop2: detected capacity change from 0 to 32768 executing program [ 65.267327][ T5143] loop4: detected capacity change from 0 to 32768 executing program executing program [ 65.515383][ T5145] loop3: detected capacity change from 0 to 32768 [ 65.608820][ T5147] loop1: detected capacity change from 0 to 32768 executing program executing program executing program [ 66.208403][ T5152] loop0: detected capacity change from 0 to 32768 executing program [ 66.596861][ T5155] loop2: detected capacity change from 0 to 32768 [ 66.646249][ T5157] loop5: detected capacity change from 0 to 32768 [ 66.872300][ T5161] loop4: detected capacity change from 0 to 32768 [ 66.893052][ T5157] read_mapping_page failed! [ 66.905643][ T5157] jfs_mount_rw: diMount failed! [ 67.084741][ T5016] ================================================================== [ 67.092833][ T5016] BUG: KASAN: double-free in diUnmount+0xf3/0x100 [ 67.099260][ T5016] Free of addr ffff88807c2f0000 by task syz-executor171/5016 [ 67.106610][ T5016] [ 67.108920][ T5016] CPU: 1 PID: 5016 Comm: syz-executor171 Not tainted 6.5.0-rc1-syzkaller #0 [ 67.117575][ T5016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 67.127619][ T5016] Call Trace: [ 67.130883][ T5016] [ 67.133800][ T5016] dump_stack_lvl+0x1e7/0x2d0 [ 67.138471][ T5016] ? irq_work_queue+0xca/0x150 [ 67.143225][ T5016] ? nf_tcp_handle_invalid+0x650/0x650 [ 67.148676][ T5016] ? panic+0x770/0x770 [ 67.152731][ T5016] ? _printk+0xd5/0x120 [ 67.156890][ T5016] ? diUnmount+0xf3/0x100 [ 67.161206][ T5016] print_report+0x163/0x540 [ 67.165701][ T5016] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 67.171586][ T5016] ? _raw_spin_unlock+0x40/0x40 [ 67.176422][ T5016] ? __virt_addr_valid+0x22f/0x2e0 [ 67.181524][ T5016] ? __phys_addr+0xba/0x170 [ 67.186013][ T5016] ? diUnmount+0xf3/0x100 [ 67.190323][ T5016] ? diUnmount+0xf3/0x100 [ 67.194635][ T5016] kasan_report_invalid_free+0xeb/0x110 [ 67.200172][ T5016] ? diUnmount+0xf3/0x100 [ 67.204486][ T5016] ____kasan_slab_free+0xfb/0x120 [ 67.209498][ T5016] __kmem_cache_free+0x25f/0x3b0 [ 67.214434][ T5016] ? diUnmount+0xf3/0x100 [ 67.218748][ T5016] diUnmount+0xf3/0x100 [ 67.222889][ T5016] jfs_umount+0x1fc/0x3a0 [ 67.227204][ T5016] jfs_put_super+0x8a/0x190 [ 67.231695][ T5016] ? jfs_free_inode+0x30/0x30 [ 67.236363][ T5016] generic_shutdown_super+0x134/0x340 [ 67.241721][ T5016] kill_block_super+0x68/0xa0 [ 67.246385][ T5016] deactivate_locked_super+0xa4/0x110 [ 67.251744][ T5016] cleanup_mnt+0x426/0x4c0 [ 67.256147][ T5016] ? _raw_spin_unlock_irq+0x23/0x50 [ 67.261333][ T5016] task_work_run+0x24a/0x300 [ 67.265917][ T5016] ? task_work_cancel+0x2b0/0x2b0 [ 67.270930][ T5016] ? exit_to_user_mode_loop+0x39/0x100 [ 67.276376][ T5016] exit_to_user_mode_loop+0xd9/0x100 [ 67.281649][ T5016] exit_to_user_mode_prepare+0xb1/0x140 [ 67.287182][ T5016] syscall_exit_to_user_mode+0x64/0x280 [ 67.292716][ T5016] do_syscall_64+0x4d/0xc0 [ 67.297129][ T5016] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 67.303013][ T5016] RIP: 0033:0x7f541bcde647 [ 67.307411][ T5016] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 67.327094][ T5016] RSP: 002b:00007ffdc5179928 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 67.335493][ T5016] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f541bcde647 [ 67.343449][ T5016] RDX: 00007ffdc51799e9 RSI: 000000000000000a RDI: 00007ffdc51799e0 [ 67.351405][ T5016] RBP: 00007ffdc51799e0 R08: 00000000ffffffff R09: 00007ffdc51797c0 [ 67.359362][ T5016] R10: 0000555556a16773 R11: 0000000000000206 R12: 00007ffdc517aaa0 [ 67.367318][ T5016] R13: 0000555556a166f0 R14: 00007ffdc5179950 R15: 00007ffdc517aae0 [ 67.375280][ T5016] [ 67.378283][ T5016] [ 67.380589][ T5016] Allocated by task 5038: [ 67.384898][ T5016] kasan_set_track+0x4f/0x70 [ 67.389478][ T5016] __kasan_kmalloc+0x98/0xb0 [ 67.394055][ T5016] uevent_show+0x15d/0x310 [ 67.398456][ T5016] dev_attr_show+0x54/0xc0 [ 67.402855][ T5016] sysfs_kf_seq_show+0x331/0x4b0 [ 67.407779][ T5016] seq_read_iter+0x43e/0xd10 [ 67.412354][ T5016] vfs_read+0x795/0xb00 [ 67.416496][ T5016] ksys_read+0x1a0/0x2c0 [ 67.420724][ T5016] do_syscall_64+0x41/0xc0 [ 67.425124][ T5016] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 67.431001][ T5016] [ 67.433307][ T5016] Freed by task 5038: [ 67.437266][ T5016] kasan_set_track+0x4f/0x70 [ 67.441846][ T5016] kasan_save_free_info+0x28/0x40 [ 67.446857][ T5016] ____kasan_slab_free+0xd6/0x120 [ 67.451867][ T5016] __kmem_cache_free+0x25f/0x3b0 [ 67.456792][ T5016] uevent_show+0x1cf/0x310 [ 67.461192][ T5016] dev_attr_show+0x54/0xc0 [ 67.465591][ T5016] sysfs_kf_seq_show+0x331/0x4b0 [ 67.470511][ T5016] seq_read_iter+0x43e/0xd10 [ 67.475085][ T5016] vfs_read+0x795/0xb00 [ 67.479227][ T5016] ksys_read+0x1a0/0x2c0 [ 67.483456][ T5016] do_syscall_64+0x41/0xc0 [ 67.487856][ T5016] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 67.493735][ T5016] [ 67.496045][ T5016] The buggy address belongs to the object at ffff88807c2f0000 [ 67.496045][ T5016] which belongs to the cache kmalloc-4k of size 4096 [ 67.510082][ T5016] The buggy address is located 0 bytes inside of [ 67.510082][ T5016] 4096-byte region [ffff88807c2f0000, ffff88807c2f1000) [ 67.523253][ T5016] [ 67.525568][ T5016] The buggy address belongs to the physical page: [ 67.531960][ T5016] page:ffffea0001f0bc00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c2f0 [ 67.542093][ T5016] head:ffffea0001f0bc00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 67.551010][ T5016] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 67.558971][ T5016] page_type: 0xffffffff() [ 67.563285][ T5016] raw: 00fff00000010200 ffff888012842140 dead000000000122 0000000000000000 [ 67.571853][ T5016] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 67.580417][ T5016] page dumped because: kasan: bad access detected [ 67.586807][ T5016] page_owner tracks the page as allocated [ 67.592506][ T5016] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5038, tgid 5038 (udevd), ts 66945990487, free_ts 66934500390 [ 67.614717][ T5016] post_alloc_hook+0x1e6/0x210 [ 67.619468][ T5016] get_page_from_freelist+0x31e8/0x3370 [ 67.625001][ T5016] __alloc_pages+0x255/0x670 [ 67.629573][ T5016] alloc_slab_page+0x6a/0x160 [ 67.634235][ T5016] new_slab+0x84/0x2f0 [ 67.638291][ T5016] ___slab_alloc+0xade/0x1100 [ 67.642960][ T5016] __kmem_cache_alloc_node+0x1af/0x270 [ 67.648408][ T5016] kmalloc_trace+0x2a/0xe0 [ 67.652811][ T5016] uevent_show+0x15d/0x310 [ 67.657210][ T5016] dev_attr_show+0x54/0xc0 [ 67.661608][ T5016] sysfs_kf_seq_show+0x331/0x4b0 [ 67.666533][ T5016] seq_read_iter+0x43e/0xd10 [ 67.671115][ T5016] vfs_read+0x795/0xb00 [ 67.675257][ T5016] ksys_read+0x1a0/0x2c0 [ 67.679487][ T5016] do_syscall_64+0x41/0xc0 [ 67.683886][ T5016] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 67.689768][ T5016] page last free stack trace: [ 67.694420][ T5016] free_unref_page_prepare+0x903/0xa30 [ 67.699867][ T5016] free_unref_page+0x37/0x3f0 [ 67.704526][ T5016] free_large_kmalloc+0xff/0x190 [ 67.709452][ T5016] diUnmount+0xf3/0x100 [ 67.713592][ T5016] jfs_umount+0x186/0x3a0 [ 67.717914][ T5016] jfs_put_super+0x8a/0x190 [ 67.722404][ T5016] generic_shutdown_super+0x134/0x340 [ 67.727759][ T5016] kill_block_super+0x68/0xa0 [ 67.732421][ T5016] deactivate_locked_super+0xa4/0x110 [ 67.737778][ T5016] cleanup_mnt+0x426/0x4c0 [ 67.742196][ T5016] task_work_run+0x24a/0x300 [ 67.746775][ T5016] exit_to_user_mode_loop+0xd9/0x100 [ 67.752044][ T5016] exit_to_user_mode_prepare+0xb1/0x140 [ 67.757579][ T5016] syscall_exit_to_user_mode+0x64/0x280 [ 67.763109][ T5016] do_syscall_64+0x4d/0xc0 [ 67.767509][ T5016] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 67.773394][ T5016] [ 67.775700][ T5016] Memory state around the buggy address: executing program [ 67.781311][ T5016] ffff88807c2eff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 67.789355][ T5016] ffff88807c2eff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 67.797397][ T5016] >ffff88807c2f0000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 67.805441][ T5016] ^ [ 67.809488][ T5016] ffff88807c2f0080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 67.817532][ T5016] ffff88807c2f0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 67.825579][ T5016] ================================================================== [ 67.870121][ T5165] loop1: detected capacity change from 0 to 32768 [ 67.900331][ T5163] loop3: detected capacity change from 0 to 32768 executing program executing program executing program [ 68.342704][ T5168] loop0: detected capacity change from 0 to 32768 [ 68.717880][ T5173] loop2: detected capacity change from 0 to 32768 executing program [ 68.952060][ T5177] loop5: detected capacity change from 0 to 32768 [ 69.141718][ T5016] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 69.148962][ T5016] CPU: 0 PID: 5016 Comm: syz-executor171 Not tainted 6.5.0-rc1-syzkaller #0 [ 69.157649][ T5016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 69.167713][ T5016] Call Trace: [ 69.171003][ T5016] [ 69.174000][ T5016] dump_stack_lvl+0x1e7/0x2d0 [ 69.178705][ T5016] ? nf_tcp_handle_invalid+0x650/0x650 [ 69.184193][ T5016] ? panic+0x770/0x770 [ 69.188275][ T5016] ? preempt_schedule_common+0x83/0xc0 [ 69.193757][ T5016] ? vscnprintf+0x5d/0x80 [ 69.198101][ T5016] ? diUnmount+0x10/0x100 [ 69.202444][ T5016] panic+0x30f/0x770 [ 69.206352][ T5016] ? check_panic_on_warn+0x21/0xa0 [ 69.211472][ T5016] ? __memcpy_flushcache+0x2b0/0x2b0 [ 69.216768][ T5016] ? _raw_spin_unlock_irqrestore+0x12c/0x140 [ 69.222763][ T5016] ? _raw_spin_unlock+0x40/0x40 [ 69.227623][ T5016] ? print_report+0x4fb/0x540 [ 69.232314][ T5016] ? diUnmount+0xf3/0x100 [ 69.236658][ T5016] check_panic_on_warn+0x82/0xa0 [ 69.241605][ T5016] ? diUnmount+0xf3/0x100 [ 69.245947][ T5016] end_report+0x6e/0x130 [ 69.250198][ T5016] kasan_report_invalid_free+0xfb/0x110 [ 69.255756][ T5016] ? diUnmount+0xf3/0x100 [ 69.260098][ T5016] ____kasan_slab_free+0xfb/0x120 [ 69.265135][ T5016] __kmem_cache_free+0x25f/0x3b0 [ 69.270087][ T5016] ? diUnmount+0xf3/0x100 [ 69.274432][ T5016] diUnmount+0xf3/0x100 [ 69.278597][ T5016] jfs_umount+0x1fc/0x3a0 [ 69.282939][ T5016] jfs_put_super+0x8a/0x190 [ 69.287459][ T5016] ? jfs_free_inode+0x30/0x30 [ 69.292158][ T5016] generic_shutdown_super+0x134/0x340 [ 69.297549][ T5016] kill_block_super+0x68/0xa0 [ 69.302246][ T5016] deactivate_locked_super+0xa4/0x110 [ 69.307635][ T5016] cleanup_mnt+0x426/0x4c0 [ 69.312067][ T5016] ? _raw_spin_unlock_irq+0x23/0x50 [ 69.317286][ T5016] task_work_run+0x24a/0x300 [ 69.321908][ T5016] ? task_work_cancel+0x2b0/0x2b0 [ 69.326963][ T5016] ? exit_to_user_mode_loop+0x39/0x100 [ 69.332441][ T5016] exit_to_user_mode_loop+0xd9/0x100 executing program [ 69.337743][ T5016] exit_to_user_mode_prepare+0xb1/0x140 [ 69.343019][ T5185] loop0: detected capacity change from 0 to 32768 [ 69.349703][ T5016] syscall_exit_to_user_mode+0x64/0x280 [ 69.355281][ T5016] do_syscall_64+0x4d/0xc0 [ 69.359716][ T5016] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 69.365628][ T5016] RIP: 0033:0x7f541bcde647 [ 69.370055][ T5016] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 executing program [ 69.389676][ T5016] RSP: 002b:00007ffdc5179928 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 69.398113][ T5016] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f541bcde647 [ 69.406099][ T5016] RDX: 00007ffdc51799e9 RSI: 000000000000000a RDI: 00007ffdc51799e0 [ 69.414089][ T5016] RBP: 00007ffdc51799e0 R08: 00000000ffffffff R09: 00007ffdc51797c0 [ 69.422075][ T5016] R10: 0000555556a16773 R11: 0000000000000206 R12: 00007ffdc517aaa0 [ 69.430061][ T5016] R13: 0000555556a166f0 R14: 00007ffdc5179950 R15: 00007ffdc517aae0 [ 69.438056][ T5016] [ 69.441279][ T5016] Kernel Offset: disabled [ 69.445594][ T5016] Rebooting in 86400 seconds..