Warning: Permanently added '10.128.10.21' (ED25519) to the list of known hosts. executing program executing program executing program executing program executing program [ 92.640163][ T4254] loop0: detected capacity change from 0 to 32768 [ 92.678290][ T4253] loop4: detected capacity change from 0 to 32768 [ 92.685090][ T4255] loop2: detected capacity change from 0 to 32768 [ 92.707134][ T4253] [ 92.707134][ T4253] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.707134][ T4253] [ 92.710979][ T4254] [ 92.710979][ T4254] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.710979][ T4254] [ 92.722029][ T4256] loop3: detected capacity change from 0 to 32768 [ 92.735489][ T4255] [ 92.735489][ T4255] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.735489][ T4255] [ 92.739113][ T4252] loop1: detected capacity change from 0 to 32768 [ 92.763196][ T4253] [ 92.763196][ T4253] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.763196][ T4253] [ 92.774511][ T4255] [ 92.774511][ T4255] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.774511][ T4255] [ 92.786290][ T4253] [ 92.786290][ T4253] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.786290][ T4253] [ 92.787312][ T4254] [ 92.787312][ T4254] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.787312][ T4254] [ 92.797699][ T4255] [ 92.797699][ T4255] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.797699][ T4255] [ 92.819076][ T4252] [ 92.819076][ T4252] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.819076][ T4252] [ 92.820796][ T4256] [ 92.820796][ T4256] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.820796][ T4256] [ 92.841602][ T4253] [ 92.841602][ T4253] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.841602][ T4253] [ 92.852434][ T4255] [ 92.852434][ T4255] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.852434][ T4255] [ 92.864019][ T4253] [ 92.864019][ T4253] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.864019][ T4253] [ 92.864568][ T4252] [ 92.864568][ T4252] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.864568][ T4252] [ 92.875273][ T4255] [ 92.875273][ T4255] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.875273][ T4255] [ 92.893024][ T4254] [ 92.893024][ T4254] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.893024][ T4254] [ 92.896630][ T4253] [ 92.896630][ T4253] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.896630][ T4253] [ 92.919230][ T4256] [ 92.919230][ T4256] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.919230][ T4256] [ 92.926765][ T4254] [ 92.926765][ T4254] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.926765][ T4254] [ 92.930203][ T4256] [ 92.930203][ T4256] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.930203][ T4256] [ 92.950922][ T4252] [ 92.950922][ T4252] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.950922][ T4252] [ 92.952079][ T4255] [ 92.952079][ T4255] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.952079][ T4255] [ 92.973303][ T4253] [ 92.973303][ T4253] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.973303][ T4253] [ 92.986293][ T4252] [ 92.986293][ T4252] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.986293][ T4252] [ 92.986351][ T107] [ 92.986351][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.986351][ T107] [ 92.997051][ T4254] [ 92.997051][ T4254] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.997051][ T4254] [ 93.011610][ T4255] [ 93.011610][ T4255] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.011610][ T4255] [ 93.032919][ T4253] [ 93.032919][ T4253] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.032919][ T4253] [ 93.043843][ T4253] [ 93.043843][ T4253] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.043843][ T4253] [ 93.049492][ T4256] [ 93.049492][ T4256] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.049492][ T4256] [ 93.066334][ T106] [ 93.066334][ T106] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.066334][ T106] [ 93.085651][ T4252] [ 93.085651][ T4252] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.085651][ T4252] [ 93.089040][ T4256] [ 93.089040][ T4256] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.089040][ T4256] [ 93.096214][ T4255] [ 93.096214][ T4255] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.096214][ T4255] [ 93.106997][ T4254] [ 93.106997][ T4254] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.106997][ T4254] [ 93.117175][ T4255] [ 93.117175][ T4255] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.117175][ T4255] [ 93.118242][ T4252] [ 93.118242][ T4252] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.118242][ T4252] [ 93.129852][ T4256] [ 93.129852][ T4256] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.129852][ T4256] [ 93.140890][ T4252] [ 93.140890][ T4252] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.140890][ T4252] [ 93.151221][ T4254] [ 93.151221][ T4254] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.151221][ T4254] [ 93.165846][ T4256] [ 93.165846][ T4256] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.165846][ T4256] [ 93.200417][ T4256] [ 93.200417][ T4256] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.200417][ T4256] [ 93.213222][ T107] [ 93.213222][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.213222][ T107] [ 93.225027][ T4254] [ 93.225027][ T4254] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.225027][ T4254] [ 93.236106][ T4254] [ 93.236106][ T4254] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.236106][ T4254] executing program [ 93.253451][ T106] [ 93.253451][ T106] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.253451][ T106] [ 93.275481][ T106] [ 93.275481][ T106] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.275481][ T106] [ 93.287072][ T4256] [ 93.287072][ T4256] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.287072][ T4256] [ 93.352059][ T107] ================================================================== [ 93.360213][ T107] BUG: KASAN: use-after-free in txEnd+0x350/0x560 [ 93.366699][ T107] Write of size 8 at addr ffff88807ce5b840 by task jfsCommit/107 [ 93.374439][ T107] [ 93.376781][ T107] CPU: 1 PID: 107 Comm: jfsCommit Not tainted 6.1.119-syzkaller #0 [ 93.384845][ T107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 93.394979][ T107] Call Trace: [ 93.398351][ T107] [ 93.401296][ T107] dump_stack_lvl+0x1e3/0x2cb [ 93.406242][ T107] ? nf_tcp_handle_invalid+0x642/0x642 [ 93.411786][ T107] ? panic+0x764/0x764 [ 93.415850][ T107] ? _printk+0xd1/0x111 [ 93.419996][ T107] ? __virt_addr_valid+0x17f/0x530 [ 93.425122][ T107] ? __virt_addr_valid+0x17f/0x530 [ 93.430323][ T107] print_report+0x15f/0x4f0 [ 93.434899][ T107] ? __virt_addr_valid+0x17f/0x530 [ 93.440259][ T107] ? __virt_addr_valid+0x17f/0x530 [ 93.445366][ T107] ? __virt_addr_valid+0x45b/0x530 [ 93.450470][ T107] ? __phys_addr+0xb6/0x170 [ 93.454963][ T107] ? txEnd+0x350/0x560 [ 93.459021][ T107] kasan_report+0x136/0x160 [ 93.463514][ T107] ? txEnd+0x350/0x560 [ 93.467576][ T107] kasan_check_range+0x27f/0x290 [ 93.472499][ T107] txEnd+0x350/0x560 [ 93.476395][ T107] jfs_lazycommit+0x610/0xb60 [ 93.481069][ T107] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 93.486955][ T107] ? lockdep_hardirqs_on+0x94/0x130 [ 93.492142][ T107] ? txFreelock+0x580/0x580 [ 93.496636][ T107] ? do_task_dead+0xd0/0xd0 [ 93.501130][ T107] ? _raw_spin_unlock+0x40/0x40 [ 93.505972][ T107] ? __kthread_parkme+0x168/0x1c0 [ 93.510988][ T107] kthread+0x28d/0x320 [ 93.515044][ T107] ? txFreelock+0x580/0x580 [ 93.519539][ T107] ? kthread_blkcg+0xd0/0xd0 [ 93.524133][ T107] ret_from_fork+0x1f/0x30 [ 93.529082][ T107] [ 93.532196][ T107] [ 93.534611][ T107] Allocated by task 4256: [ 93.539026][ T107] kasan_set_track+0x4b/0x70 [ 93.543626][ T107] __kasan_kmalloc+0x97/0xb0 [ 93.548209][ T107] lmLogOpen+0x314/0x1030 [ 93.552529][ T107] jfs_mount_rw+0xe3/0x640 [ 93.556937][ T107] jfs_fill_super+0x67d/0xc40 [ 93.561702][ T107] mount_bdev+0x2c9/0x3f0 [ 93.566028][ T107] legacy_get_tree+0xeb/0x180 [ 93.570695][ T107] vfs_get_tree+0x88/0x270 [ 93.575102][ T107] do_new_mount+0x2ba/0xb40 [ 93.579598][ T107] __se_sys_mount+0x2d5/0x3c0 [ 93.584271][ T107] do_syscall_64+0x3b/0xb0 [ 93.588768][ T107] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 93.594670][ T107] [ 93.596980][ T107] Freed by task 4256: [ 93.600950][ T107] kasan_set_track+0x4b/0x70 [ 93.605533][ T107] kasan_save_free_info+0x27/0x40 [ 93.610728][ T107] ____kasan_slab_free+0xd6/0x120 [ 93.615754][ T107] __kmem_cache_free+0x25c/0x3c0 [ 93.620720][ T107] lmLogClose+0x29d/0x530 [ 93.625125][ T107] jfs_umount+0x298/0x370 [ 93.629533][ T107] jfs_put_super+0x86/0x180 [ 93.634026][ T107] generic_shutdown_super+0x130/0x340 [ 93.639386][ T107] kill_block_super+0x7a/0xe0 [ 93.644064][ T107] deactivate_locked_super+0xa0/0x110 [ 93.649480][ T107] cleanup_mnt+0x490/0x520 [ 93.653917][ T107] task_work_run+0x246/0x300 [ 93.658503][ T107] do_exit+0xa73/0x26a0 [ 93.662658][ T107] do_group_exit+0x202/0x2b0 [ 93.667327][ T107] __x64_sys_exit_group+0x3b/0x40 [ 93.672711][ T107] do_syscall_64+0x3b/0xb0 [ 93.677725][ T107] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 93.683616][ T107] [ 93.685926][ T107] The buggy address belongs to the object at ffff88807ce5b800 [ 93.685926][ T107] which belongs to the cache kmalloc-1k of size 1024 [ 93.699967][ T107] The buggy address is located 64 bytes inside of [ 93.699967][ T107] 1024-byte region [ffff88807ce5b800, ffff88807ce5bc00) [ 93.713708][ T107] [ 93.716039][ T107] The buggy address belongs to the physical page: [ 93.722554][ T107] page:ffffea0001f39600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7ce58 [ 93.732872][ T107] head:ffffea0001f39600 order:3 compound_mapcount:0 compound_pincount:0 [ 93.741186][ T107] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 93.749424][ T107] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888017c41dc0 [ 93.757991][ T107] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 93.766611][ T107] page dumped because: kasan: bad access detected [ 93.773365][ T107] page_owner tracks the page as allocated [ 93.779064][ T107] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4253, tgid 4253 (syz-executor319), ts 92756444726, free_ts 86358396431 [ 93.800066][ T107] post_alloc_hook+0x18d/0x1b0 [ 93.804831][ T107] get_page_from_freelist+0x3731/0x38d0 [ 93.810378][ T107] __alloc_pages+0x28d/0x770 [ 93.815190][ T107] alloc_slab_page+0x6a/0x150 [ 93.820126][ T107] new_slab+0x84/0x2d0 [ 93.824280][ T107] ___slab_alloc+0xc20/0x1270 [ 93.829119][ T107] __kmem_cache_alloc_node+0x19f/0x260 [ 93.834688][ T107] __kmalloc+0xa1/0x230 [ 93.839182][ T107] tomoyo_init_log+0x1b37/0x2040 [ 93.844114][ T107] tomoyo_supervisor+0x396/0x12d0 [ 93.849133][ T107] tomoyo_path_number_perm+0x58d/0x7f0 [ 93.854816][ T107] tomoyo_path_mkdir+0xe3/0x120 [ 93.859680][ T107] security_path_mkdir+0xdc/0x130 [ 93.864697][ T107] do_mkdirat+0x185/0x360 [ 93.869114][ T107] __x64_sys_mkdir+0x6a/0x80 [ 93.873702][ T107] do_syscall_64+0x3b/0xb0 [ 93.878113][ T107] page last free stack trace: [ 93.882773][ T107] free_unref_page_prepare+0xf63/0x1120 [ 93.888314][ T107] free_unref_page+0x33/0x3e0 [ 93.892976][ T107] skb_release_data+0x37f/0x7a0 [ 93.897816][ T107] skb_attempt_defer_free+0x29a/0x400 [ 93.903206][ T107] tcp_recvmsg_locked+0x1209/0x2450 [ 93.908660][ T107] tcp_recvmsg+0x258/0x920 [ 93.913061][ T107] inet_recvmsg+0x13b/0x250 [ 93.917556][ T107] sock_read_iter+0x3b2/0x4b0 [ 93.922224][ T107] vfs_read+0x88d/0xbf0 [ 93.926368][ T107] ksys_read+0x19c/0x2c0 [ 93.930597][ T107] do_syscall_64+0x3b/0xb0 [ 93.935003][ T107] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 93.940887][ T107] [ 93.943197][ T107] Memory state around the buggy address: [ 93.948826][ T107] ffff88807ce5b700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 93.956874][ T107] ffff88807ce5b780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 93.964919][ T107] >ffff88807ce5b800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 93.972960][ T107] ^ [ 93.979096][ T107] ffff88807ce5b880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 93.987155][ T107] ffff88807ce5b900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 93.995199][ T107] ================================================================== [ 94.004247][ T4252] [ 94.004247][ T4252] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 94.004247][ T4252] [ 94.015262][ T4252] [ 94.015262][ T4252] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 94.015262][ T4252] [ 94.022905][ T107] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 94.022919][ T107] CPU: 1 PID: 107 Comm: jfsCommit Not tainted 6.1.119-syzkaller #0 [ 94.022936][ T107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 94.022945][ T107] Call Trace: [ 94.022950][ T107] [ 94.022956][ T107] dump_stack_lvl+0x1e3/0x2cb [ 94.022983][ T107] ? nf_tcp_handle_invalid+0x642/0x642 [ 94.023004][ T107] ? panic+0x764/0x764 [ 94.023020][ T107] ? vscnprintf+0x59/0x80 [ 94.023037][ T107] panic+0x318/0x764 [ 94.023051][ T107] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 94.023074][ T107] ? check_panic_on_warn+0x1d/0xa0 [ 94.023092][ T107] ? memcpy_page_flushcache+0xfc/0xfc [ 94.023110][ T107] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 94.023129][ T107] ? _raw_spin_unlock+0x40/0x40 [ 94.023148][ T107] check_panic_on_warn+0x7e/0xa0 [ 94.023165][ T107] ? txEnd+0x350/0x560 [ 94.023185][ T107] end_report+0x66/0x110 [ 94.023200][ T107] kasan_report+0x143/0x160 [ 94.023215][ T107] ? txEnd+0x350/0x560 [ 94.023237][ T107] kasan_check_range+0x27f/0x290 [ 94.023253][ T107] txEnd+0x350/0x560 [ 94.023274][ T107] jfs_lazycommit+0x610/0xb60 [ 94.023294][ T107] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 94.023313][ T107] ? lockdep_hardirqs_on+0x94/0x130 [ 94.023331][ T107] ? txFreelock+0x580/0x580 [ 94.023350][ T107] ? do_task_dead+0xd0/0xd0 [ 94.023370][ T107] ? _raw_spin_unlock+0x40/0x40 [ 94.023389][ T107] ? __kthread_parkme+0x168/0x1c0 [ 94.023411][ T107] kthread+0x28d/0x320 [ 94.023425][ T107] ? txFreelock+0x580/0x580 [ 94.023444][ T107] ? kthread_blkcg+0xd0/0xd0 [ 94.023459][ T107] ret_from_fork+0x1f/0x30 [ 94.023484][ T107] [ 94.026043][ T107] Kernel Offset: disabled [ 94.197972][ T107] Rebooting in 86400 seconds..