Warning: Permanently added '10.128.0.178' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program [ 611.546148][ T4017] loop5: detected capacity change from 0 to 32768 [ 611.567660][ T4015] loop1: detected capacity change from 0 to 32768 [ 611.638910][ T4011] loop0: detected capacity change from 0 to 32768 [ 611.723486][ T4016] loop4: detected capacity change from 0 to 32768 [ 611.746397][ T4014] loop3: detected capacity change from 0 to 32768 [ 611.817488][ T4012] loop2: detected capacity change from 0 to 32768 [ 612.220588][ T240] ================================================================== [ 612.222361][ T240] BUG: KASAN: use-after-free in jfs_lazycommit+0x658/0xa40 [ 612.223915][ T240] Read of size 4 at addr ffff0000c085e294 by task jfsCommit/240 [ 612.225567][ T240] [ 612.226109][ T240] CPU: 0 PID: 240 Comm: jfsCommit Not tainted 5.15.110-syzkaller #0 [ 612.227934][ T240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 612.230036][ T240] Call trace: [ 612.230739][ T240] dump_backtrace+0x0/0x530 [ 612.231696][ T240] show_stack+0x2c/0x3c [ 612.232529][ T240] dump_stack_lvl+0x108/0x170 [ 612.233584][ T240] print_address_description+0x7c/0x3f0 [ 612.234756][ T240] kasan_report+0x174/0x1e4 [ 612.235787][ T240] __asan_report_load4_noabort+0x44/0x50 [ 612.237051][ T240] jfs_lazycommit+0x658/0xa40 [ 612.238107][ T240] kthread+0x37c/0x45c [ 612.239008][ T240] ret_from_fork+0x10/0x20 [ 612.239950][ T240] [ 612.240419][ T240] Allocated by task 4016: [ 612.241317][ T240] ____kasan_kmalloc+0xbc/0xfc [ 612.242292][ T240] __kasan_kmalloc+0x10/0x1c [ 612.243291][ T240] kmem_cache_alloc_trace+0x27c/0x47c [ 612.244455][ T240] jfs_fill_super+0x108/0xa08 [ 612.245438][ T240] mount_bdev+0x26c/0x368 [ 612.246378][ T240] jfs_do_mount+0x44/0x58 [ 612.247296][ T240] legacy_get_tree+0xd4/0x16c [ 612.248332][ T240] vfs_get_tree+0x90/0x274 [ 612.249260][ T240] do_new_mount+0x25c/0x8c8 [ 612.250375][ T240] path_mount+0x590/0x104c [ 612.251374][ T240] __arm64_sys_mount+0x510/0x5e0 [ 612.252496][ T240] invoke_syscall+0x98/0x2b8 [ 612.253511][ T240] el0_svc_common+0x138/0x258 [ 612.254519][ T240] do_el0_svc+0x58/0x14c [ 612.255437][ T240] el0_svc+0x7c/0x1f0 [ 612.256345][ T240] el0t_64_sync_handler+0x84/0xe4 [ 612.257419][ T240] el0t_64_sync+0x1a0/0x1a4 [ 612.258481][ T240] [ 612.258958][ T240] Freed by task 4009: [ 612.259775][ T240] kasan_set_track+0x4c/0x84 [ 612.260772][ T240] kasan_set_free_info+0x28/0x4c [ 612.261878][ T240] ____kasan_slab_free+0x118/0x164 [ 612.262973][ T240] __kasan_slab_free+0x18/0x28 [ 612.264023][ T240] slab_free_freelist_hook+0x128/0x1ec [ 612.265152][ T240] kfree+0x178/0x410 [ 612.266049][ T240] jfs_put_super+0x144/0x188 [ 612.267023][ T240] generic_shutdown_super+0x130/0x29c [ 612.268191][ T240] kill_block_super+0x70/0xdc [ 612.269193][ T240] deactivate_locked_super+0xb8/0x13c [ 612.270326][ T240] deactivate_super+0x108/0x128 [ 612.271363][ T240] cleanup_mnt+0x3c0/0x474 [ 612.272345][ T240] __cleanup_mnt+0x20/0x30 [ 612.273366][ T240] task_work_run+0x130/0x1e4 [ 612.274314][ T240] do_notify_resume+0x262c/0x32b8 [ 612.275362][ T240] el0_svc+0xfc/0x1f0 [ 612.276292][ T240] el0t_64_sync_handler+0x84/0xe4 [ 612.277315][ T240] el0t_64_sync+0x1a0/0x1a4 [ 612.278253][ T240] [ 612.278755][ T240] The buggy address belongs to the object at ffff0000c085e200 [ 612.278755][ T240] which belongs to the cache kmalloc-256 of size 256 [ 612.281786][ T240] The buggy address is located 148 bytes inside of [ 612.281786][ T240] 256-byte region [ffff0000c085e200, ffff0000c085e300) [ 612.284708][ T240] The buggy address belongs to the page: [ 612.285872][ T240] page:0000000055e36d24 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10085e [ 612.287992][ T240] head:0000000055e36d24 order:1 compound_mapcount:0 [ 612.289457][ T240] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 612.291247][ T240] raw: 05ffc00000010200 dead000000000100 dead000000000122 ffff0000c0002480 [ 612.293093][ T240] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 612.295013][ T240] page dumped because: kasan: bad access detected [ 612.296437][ T240] [ 612.296948][ T240] Memory state around the buggy address: [ 612.298169][ T240] ffff0000c085e180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 612.299964][ T240] ffff0000c085e200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 612.301748][ T240] >ffff0000c085e280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 612.303479][ T240] ^ [ 612.304465][ T240] ffff0000c085e300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 612.306208][ T240] ffff0000c085e380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 612.307956][ T240] ================================================================== [ 612.309695][ T240] Disabling lock debugging due to kernel taint executing program executing program executing program executing program executing program executing program [ 612.787888][ T4029] loop5: detected capacity change from 0 to 32768 [ 612.960562][ T4027] loop4: detected capacity change from 0 to 32768 [ 612.987135][ T4025] loop2: detected capacity change from 0 to 32768 [ 613.137933][ T4028] loop0: detected capacity change from 0 to 32768 [ 613.318003][ T4031] loop3: detected capacity change from 0 to 32768 executing program [ 613.339210][ T4030] loop1: detected capacity change from 0 to 32768 executing program executing program executing program executing program executing program [ 613.857401][ T4034] loop2: detected capacity change from 0 to 32768 [ 614.010840][ T4032] loop5: detected capacity change from 0 to 32768 [ 614.178822][ T4035] loop0: detected capacity change from 0 to 32768 executing program executing program [ 614.433158][ T4036] loop4: detected capacity change from 0 to 32768 [ 614.571437][ T4038] loop1: detected capacity change from 0 to 32768 [ 614.604589][ T4037] loop3: detected capacity change from 0 to 32768 executing program executing program executing program executing program [ 615.058087][ T4039] loop2: detected capacity change from 0 to 32768 [ 615.070610][ T4040] loop5: detected capacity change from 0 to 32768 [ 615.235358][ T4041] loop0: detected capacity change from 0 to 32768 [ 615.366092][ T4044] loop4: detected capacity change from 0 to 32768 [ 615.457875][ T4043] loop3: detected capacity change from 0 to 32768 [ 615.548517][ T4042] loop1: detected capacity change from 0 to 32768 executing program executing program executing program executing program executing program executing program [ 616.189707][ T4048] loop2: detected capacity change from 0 to 32768 [ 616.236384][ T4047] loop5: detected capacity change from 0 to 32768 [ 616.369390][ T4049] loop0: detected capacity change from 0 to 32768 [ 616.378914][ T4050] loop4: detected capacity change from 0 to 32768 executing program executing program [ 616.671742][ T4051] loop3: detected capacity change from 0 to 32768 [ 616.677617][ T4052] loop1: detected capacity change from 0 to 32768 executing program executing program [ 617.130072][ T4053] loop4: detected capacity change from 0 to 32768 executing program [ 617.257211][ T4054] loop0: detected capacity change from 0 to 32768 executing program executing program [ 617.517760][ T4056] loop5: detected capacity change from 0 to 32768 [ 617.644777][ T4055] loop2: detected capacity change from 0 to 32768 executing program [ 617.844762][ T4057] loop1: detected capacity change from 0 to 32768 executing program [ 618.007918][ T4059] loop4: detected capacity change from 0 to 32768 [ 618.106671][ T4058] loop3: detected capacity change from 0 to 32768 executing program [ 618.319138][ T4060] loop0: detected capacity change from 0 to 32768 executing program executing program executing program [ 618.610372][ T4062] loop5: detected capacity change from 0 to 32768 [ 618.723535][ T4063] loop1: detected capacity change from 0 to 32768 executing program [ 618.971703][ T4061] loop2: detected capacity change from 0 to 32768 [ 619.061588][ T4064] loop3: detected capacity change from 0 to 32768 executing program executing program [ 619.310162][ T4066] loop0: detected capacity change from 0 to 32768 [ 619.502696][ T4065] loop4: detected capacity change from 0 to 32768 executing program executing program executing program [ 619.733766][ T4067] loop1: detected capacity change from 0 to 32768 executing program [ 620.009188][ T4068] loop5: detected capacity change from 0 to 32768 [ 620.038763][ T4070] loop2: detected capacity change from 0 to 32768 [ 620.072637][ T4071] loop0: detected capacity change from 0 to 32768 executing program executing program [ 620.363618][ T4072] loop4: detected capacity change from 0 to 32768 executing program [ 620.626468][ T4069] loop3: detected capacity change from 0 to 32768 executing program executing program [ 620.830945][ T4073] loop1: detected capacity change from 0 to 32768 executing program [ 621.071154][ T4075] loop2: detected capacity change from 0 to 32768 [ 621.181608][ T4074] loop0: detected capacity change from 0 to 32768 executing program [ 621.401589][ T4079] loop1: detected capacity change from 0 to 32768 [ 621.421830][ T4076] loop5: detected capacity change from 0 to 32768 executing program executing program [ 621.687719][ T4077] loop4: detected capacity change from 0 to 32768 [ 621.853003][ T4078] loop3: detected capacity change from 0 to 32768 executing program executing program executing program [ 622.133794][ T4080] loop2: detected capacity change from 0 to 32768