Warning: Permanently added '10.128.1.171' (ED25519) to the list of known hosts. executing program [ 70.154940][ T3547] loop0: detected capacity change from 0 to 32768 [ 70.163673][ T3547] ======================================================= [ 70.163673][ T3547] WARNING: The mand mount option has been deprecated and [ 70.163673][ T3547] and is ignored by this kernel. Remove the mand [ 70.163673][ T3547] option from the mount to silence this warning. [ 70.163673][ T3547] ======================================================= executing program [ 70.206058][ T3547] ERROR: Out of memory at tomoyo_memory_ok. [ 70.450508][ T3549] loop0: detected capacity change from 0 to 32768 [ 70.462101][ T3549] FAULT_INJECTION: forcing a failure. [ 70.462101][ T3549] name failslab, interval 1, probability 0, space 0, times 0 [ 70.474843][ T3549] CPU: 1 PID: 3549 Comm: syz-executor425 Not tainted 6.1.53-syzkaller #0 [ 70.483299][ T3549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 70.493380][ T3549] Call Trace: [ 70.496664][ T3549] [ 70.499606][ T3549] dump_stack_lvl+0x1e3/0x2cb [ 70.504313][ T3549] ? nf_tcp_handle_invalid+0x642/0x642 [ 70.509779][ T3549] ? panic+0x75d/0x75d [ 70.513860][ T3549] ? tomoyo_init_log+0x1cc3/0x2010 [ 70.519091][ T3549] should_fail_ex+0x3a6/0x4d0 [ 70.523828][ T3549] should_failslab+0x5/0x20 [ 70.528366][ T3549] slab_pre_alloc_hook+0x59/0x2a0 [ 70.533446][ T3549] ? tomoyo_supervisor+0xeda/0x12d0 [ 70.538672][ T3549] __kmem_cache_alloc_node+0x47/0x260 [ 70.544067][ T3549] ? rcu_lock_release+0x20/0x20 [ 70.548935][ T3549] ? tomoyo_supervisor+0xeda/0x12d0 [ 70.554230][ T3549] __kmalloc+0xa1/0x230 [ 70.558403][ T3549] tomoyo_supervisor+0xeda/0x12d0 [ 70.563557][ T3549] ? tomoyo_profile+0x50/0x50 [ 70.568264][ T3549] ? rcu_is_watching+0x11/0xb0 [ 70.573039][ T3549] ? tomoyo_compare_number_union+0xb7/0xd0 [ 70.578956][ T3549] ? tomoyo_check_mount_acl+0x10a/0x150 [ 70.584612][ T3549] ? tomoyo_check_acl+0x374/0x3e0 [ 70.589656][ T3549] ? rcu_lock_acquire+0x30/0x30 [ 70.594527][ T3549] tomoyo_mount_permission+0x73e/0xb20 [ 70.600013][ T3549] ? tomoyo_get_name+0x530/0x530 [ 70.604971][ T3549] ? kasan_set_track+0x60/0x70 [ 70.609793][ T3549] security_sb_mount+0x88/0xc0 [ 70.614572][ T3549] path_mount+0xbd/0x1090 [ 70.618930][ T3549] ? user_path_at_empty+0x12b/0x180 [ 70.624147][ T3549] ? user_path_at_empty+0x12b/0x180 [ 70.629361][ T3549] __se_sys_mount+0x2d5/0x3c0 [ 70.634183][ T3549] ? __x64_sys_mount+0xc0/0xc0 [ 70.638978][ T3549] ? syscall_enter_from_user_mode+0x2e/0x220 [ 70.644976][ T3549] ? lockdep_hardirqs_on+0x94/0x130 [ 70.650214][ T3549] ? __x64_sys_mount+0x1c/0xc0 [ 70.655009][ T3549] do_syscall_64+0x3d/0xb0 [ 70.659457][ T3549] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 70.665367][ T3549] RIP: 0033:0x7fbd87b842a9 [ 70.669790][ T3549] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 21 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 70.689406][ T3549] RSP: 002b:00007ffc7a3b7178 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 70.697841][ T3549] RAX: ffffffffffffffda RBX: 00007ffc7a3b71a0 RCX: 00007fbd87b842a9 [ 70.705913][ T3549] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 70.714169][ T3549] RBP: 0000000000000002 R08: 0000000020000000 R09: 00007ffc7a3b71c0 [ 70.722184][ T3549] R10: 0000000000402020 R11: 0000000000000246 R12: 00007ffc7a3b719c [ 70.730176][ T3549] R13: 0000000000000001 R14: 431bde82d7b634db R15: 00007ffc7a3b71e0 [ 70.738257][ T3549] executing program [ 70.999626][ T3550] loop0: detected capacity change from 0 to 32768 [ 71.012221][ T3550] FAULT_INJECTION: forcing a failure. [ 71.012221][ T3550] name failslab, interval 1, probability 0, space 0, times 0 [ 71.025601][ T3550] CPU: 0 PID: 3550 Comm: syz-executor425 Not tainted 6.1.53-syzkaller #0 [ 71.034074][ T3550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 71.044168][ T3550] Call Trace: [ 71.047466][ T3550] [ 71.050402][ T3550] dump_stack_lvl+0x1e3/0x2cb [ 71.055128][ T3550] ? nf_tcp_handle_invalid+0x642/0x642 [ 71.060599][ T3550] ? panic+0x75d/0x75d [ 71.064865][ T3550] ? tomoyo_init_log+0x1cc3/0x2010 [ 71.070023][ T3550] should_fail_ex+0x3a6/0x4d0 [ 71.074739][ T3550] should_failslab+0x5/0x20 [ 71.079262][ T3550] slab_pre_alloc_hook+0x59/0x2a0 [ 71.084310][ T3550] ? tomoyo_supervisor+0xeda/0x12d0 [ 71.089547][ T3550] __kmem_cache_alloc_node+0x47/0x260 [ 71.094944][ T3550] ? rcu_lock_release+0x20/0x20 [ 71.099807][ T3550] ? tomoyo_supervisor+0xeda/0x12d0 [ 71.105018][ T3550] __kmalloc+0xa1/0x230 [ 71.109210][ T3550] tomoyo_supervisor+0xeda/0x12d0 [ 71.114259][ T3550] ? tomoyo_profile+0x50/0x50 [ 71.118956][ T3550] ? rcu_is_watching+0x11/0xb0 [ 71.123814][ T3550] ? tomoyo_compare_number_union+0xb7/0xd0 [ 71.129640][ T3550] ? tomoyo_check_mount_acl+0x10a/0x150 [ 71.135227][ T3550] ? tomoyo_check_acl+0x374/0x3e0 [ 71.140307][ T3550] ? rcu_lock_acquire+0x30/0x30 [ 71.145291][ T3550] tomoyo_mount_permission+0x73e/0xb20 [ 71.150874][ T3550] ? tomoyo_get_name+0x530/0x530 [ 71.155828][ T3550] ? kasan_set_track+0x60/0x70 [ 71.160647][ T3550] security_sb_mount+0x88/0xc0 [ 71.165461][ T3550] path_mount+0xbd/0x1090 [ 71.169838][ T3550] ? user_path_at_empty+0x12b/0x180 [ 71.175189][ T3550] ? user_path_at_empty+0x12b/0x180 [ 71.180708][ T3550] __se_sys_mount+0x2d5/0x3c0 [ 71.185429][ T3550] ? __x64_sys_mount+0xc0/0xc0 [ 71.190238][ T3550] ? syscall_enter_from_user_mode+0x2e/0x220 [ 71.196242][ T3550] ? lockdep_hardirqs_on+0x94/0x130 [ 71.201461][ T3550] ? __x64_sys_mount+0x1c/0xc0 [ 71.206256][ T3550] do_syscall_64+0x3d/0xb0 [ 71.210687][ T3550] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 71.216696][ T3550] RIP: 0033:0x7fbd87b842a9 [ 71.221285][ T3550] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 21 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 71.240921][ T3550] RSP: 002b:00007ffc7a3b7178 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 71.249349][ T3550] RAX: ffffffffffffffda RBX: 00007ffc7a3b71a0 RCX: 00007fbd87b842a9 [ 71.257349][ T3550] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 71.265347][ T3550] RBP: 0000000000000002 R08: 0000000020000000 R09: 00007ffc7a3b71c0 [ 71.273345][ T3550] R10: 0000000000402020 R11: 0000000000000246 R12: 00007ffc7a3b719c [ 71.281327][ T3550] R13: 0000000000000002 R14: 431bde82d7b634db R15: 00007ffc7a3b71e0 [ 71.289324][ T3550] executing program [ 71.544489][ T3551] loop0: detected capacity change from 0 to 32768 [ 71.555872][ T3551] FAULT_INJECTION: forcing a failure. [ 71.555872][ T3551] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 71.569378][ T3551] CPU: 1 PID: 3551 Comm: syz-executor425 Not tainted 6.1.53-syzkaller #0 [ 71.577832][ T3551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 71.587918][ T3551] Call Trace: [ 71.591211][ T3551] [ 71.594161][ T3551] dump_stack_lvl+0x1e3/0x2cb [ 71.598858][ T3551] ? nf_tcp_handle_invalid+0x642/0x642 [ 71.604360][ T3551] ? panic+0x75d/0x75d [ 71.608471][ T3551] ? __lock_acquire+0x125b/0x1f80 [ 71.613636][ T3551] should_fail_ex+0x3a6/0x4d0 [ 71.618342][ T3551] prepare_alloc_pages+0x1d9/0x5b0 [ 71.623486][ T3551] __alloc_pages+0x16a/0x770 [ 71.628119][ T3551] ? zone_statistics+0x160/0x160 [ 71.633099][ T3551] ? xas_start+0x3ff/0x7b0 [ 71.637559][ T3551] folio_alloc+0x1a/0x50 [ 71.641820][ T3551] filemap_alloc_folio+0xda/0x4f0 [ 71.646871][ T3551] ? filemap_add_folio+0x570/0x570 [ 71.652004][ T3551] ? mark_lock+0x9a/0x340 [ 71.656383][ T3551] do_read_cache_folio+0x2a7/0x810 [ 71.661536][ T3551] ? metapage_writepage+0x13d0/0x13d0 [ 71.666934][ T3551] do_read_cache_page+0x32/0x220 [ 71.672572][ T3551] __get_metapage+0x32c/0x10e0 [ 71.677450][ T3551] diMount+0xd2/0x870 [ 71.681453][ T3551] ? diUnmount+0xef/0x100 [ 71.685815][ T3551] jfs_mount_rw+0x307/0x640 [ 71.690349][ T3551] ? chkSuper+0x1010/0x1010 [ 71.694873][ T3551] ? shrink_dentry_list+0x68c/0x6a0 [ 71.700086][ T3551] ? sync_filesystem+0x103/0x220 [ 71.705041][ T3551] jfs_remount+0x3cd/0x6a0 [ 71.709568][ T3551] ? jfs_statfs+0x500/0x500 [ 71.714087][ T3551] ? hook_sb_remount+0x19/0xc0 [ 71.718873][ T3551] reconfigure_super+0x43a/0x870 [ 71.723836][ T3551] path_mount+0xe69/0x1090 [ 71.728276][ T3551] ? user_path_at_empty+0x12b/0x180 [ 71.733507][ T3551] __se_sys_mount+0x2d5/0x3c0 [ 71.738414][ T3551] ? __x64_sys_mount+0xc0/0xc0 [ 71.743292][ T3551] ? syscall_enter_from_user_mode+0x2e/0x220 [ 71.749287][ T3551] ? lockdep_hardirqs_on+0x94/0x130 [ 71.754595][ T3551] ? __x64_sys_mount+0x1c/0xc0 [ 71.759387][ T3551] do_syscall_64+0x3d/0xb0 [ 71.763824][ T3551] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 71.769730][ T3551] RIP: 0033:0x7fbd87b842a9 [ 71.774156][ T3551] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 21 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 71.793773][ T3551] RSP: 002b:00007ffc7a3b7178 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 71.802377][ T3551] RAX: ffffffffffffffda RBX: 00007ffc7a3b71a0 RCX: 00007fbd87b842a9 [ 71.810374][ T3551] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 71.818354][ T3551] RBP: 0000000000000002 R08: 0000000020000000 R09: 00007ffc7a3b71c0 [ 71.826334][ T3551] R10: 0000000000402020 R11: 0000000000000246 R12: 00007ffc7a3b719c [ 71.834319][ T3551] R13: 0000000000000003 R14: 431bde82d7b634db R15: 00007ffc7a3b71e0 [ 71.842336][ T3551] [ 71.845699][ T3551] read_mapping_page failed! [ 71.850452][ T3551] jfs_mount_rw: diMount failed! [ 71.859935][ T3546] ================================================================== [ 71.868045][ T3546] BUG: KASAN: double-free in diUnmount+0xef/0x100 [ 71.874565][ T3546] Free of addr ffff888022030000 by task syz-executor425/3546 [ 71.881953][ T3546] [ 71.884275][ T3546] CPU: 1 PID: 3546 Comm: syz-executor425 Not tainted 6.1.53-syzkaller #0 [ 71.892774][ T3546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 71.902829][ T3546] Call Trace: [ 71.906117][ T3546] [ 71.909153][ T3546] dump_stack_lvl+0x1e3/0x2cb [ 71.913867][ T3546] ? nf_tcp_handle_invalid+0x642/0x642 [ 71.919344][ T3546] ? panic+0x75d/0x75d [ 71.923423][ T3546] ? _printk+0xd1/0x111 [ 71.927597][ T3546] ? _raw_spin_lock_irqsave+0xac/0x120 [ 71.933086][ T3546] ? diUnmount+0xef/0x100 [ 71.937434][ T3546] print_report+0x15f/0x4f0 [ 71.941944][ T3546] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 71.947876][ T3546] ? __virt_addr_valid+0x22b/0x2e0 [ 71.952999][ T3546] ? __phys_addr+0xb6/0x170 [ 71.957595][ T3546] ? diUnmount+0xef/0x100 [ 71.961938][ T3546] ? diUnmount+0xef/0x100 [ 71.966277][ T3546] kasan_report_invalid_free+0x10c/0x130 [ 71.971920][ T3546] ? diUnmount+0xef/0x100 [ 71.976350][ T3546] ____kasan_slab_free+0xfb/0x120 [ 71.981387][ T3546] __kmem_cache_free+0x25c/0x3c0 [ 71.986339][ T3546] ? diUnmount+0xef/0x100 [ 71.990681][ T3546] diUnmount+0xef/0x100 [ 71.994853][ T3546] jfs_umount+0x109/0x370 [ 71.999207][ T3546] ? clear_inode+0x150/0x150 [ 72.003827][ T3546] jfs_put_super+0x86/0x180 [ 72.008340][ T3546] ? jfs_free_inode+0x20/0x20 [ 72.013021][ T3546] generic_shutdown_super+0x130/0x340 [ 72.018405][ T3546] kill_block_super+0x7a/0xe0 [ 72.023095][ T3546] deactivate_locked_super+0xa0/0x110 [ 72.028482][ T3546] cleanup_mnt+0x490/0x520 [ 72.032999][ T3546] ? lockdep_hardirqs_on+0x94/0x130 [ 72.038211][ T3546] task_work_run+0x246/0x300 [ 72.042905][ T3546] ? task_work_cancel+0x2b0/0x2b0 [ 72.047942][ T3546] ? exit_to_user_mode_loop+0x39/0x100 [ 72.053412][ T3546] exit_to_user_mode_loop+0xd9/0x100 [ 72.058725][ T3546] exit_to_user_mode_prepare+0xb1/0x140 [ 72.064286][ T3546] syscall_exit_to_user_mode+0x60/0x270 [ 72.069862][ T3546] do_syscall_64+0x49/0xb0 [ 72.074286][ T3546] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 72.080272][ T3546] RIP: 0033:0x7fbd87b85507 [ 72.084691][ T3546] Code: 07 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 72.104302][ T3546] RSP: 002b:00007ffc7a3b6088 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 72.112722][ T3546] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fbd87b85507 [ 72.120701][ T3546] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffc7a3b6140 [ 72.128773][ T3546] RBP: 00007ffc7a3b6140 R08: 0000000000000000 R09: 0000000000000000 [ 72.136751][ T3546] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffc7a3b71c0 [ 72.144734][ T3546] R13: 0000555556de96c0 R14: 431bde82d7b634db R15: 00007ffc7a3b71e0 [ 72.152741][ T3546] [ 72.155770][ T3546] [ 72.158178][ T3546] Allocated by task 3546: [ 72.162503][ T3546] kasan_set_track+0x4b/0x70 [ 72.167099][ T3546] __kasan_kmalloc+0x97/0xb0 [ 72.171695][ T3546] __kmalloc+0xb2/0x230 [ 72.175856][ T3546] tomoyo_realpath_from_path+0xcb/0x5d0 [ 72.181423][ T3546] tomoyo_check_open_permission+0x22c/0x490 [ 72.187326][ T3546] security_file_open+0x5f/0xa0 [ 72.192273][ T3546] do_dentry_open+0x308/0x10f0 [ 72.197300][ T3546] path_openat+0x2644/0x2e60 [ 72.201900][ T3546] do_filp_open+0x230/0x480 [ 72.206412][ T3546] do_sys_openat2+0x13b/0x500 [ 72.211089][ T3546] __x64_sys_openat+0x243/0x290 [ 72.215940][ T3546] do_syscall_64+0x3d/0xb0 [ 72.220448][ T3546] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 72.226349][ T3546] [ 72.228670][ T3546] Freed by task 3546: [ 72.232644][ T3546] kasan_set_track+0x4b/0x70 [ 72.237263][ T3546] kasan_save_free_info+0x27/0x40 [ 72.242292][ T3546] ____kasan_slab_free+0xd6/0x120 [ 72.247405][ T3546] __kmem_cache_free+0x25c/0x3c0 [ 72.254175][ T3546] tomoyo_realpath_from_path+0x59f/0x5d0 [ 72.259826][ T3546] tomoyo_check_open_permission+0x22c/0x490 [ 72.265730][ T3546] security_file_open+0x5f/0xa0 [ 72.270600][ T3546] do_dentry_open+0x308/0x10f0 [ 72.275367][ T3546] path_openat+0x2644/0x2e60 [ 72.279964][ T3546] do_filp_open+0x230/0x480 [ 72.284481][ T3546] do_sys_openat2+0x13b/0x500 [ 72.289173][ T3546] __x64_sys_openat+0x243/0x290 [ 72.294033][ T3546] do_syscall_64+0x3d/0xb0 [ 72.298476][ T3546] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 72.304374][ T3546] [ 72.306697][ T3546] The buggy address belongs to the object at ffff888022030000 [ 72.306697][ T3546] which belongs to the cache kmalloc-4k of size 4096 [ 72.320840][ T3546] The buggy address is located 0 bytes inside of [ 72.320840][ T3546] 4096-byte region [ffff888022030000, ffff888022031000) [ 72.334030][ T3546] [ 72.336357][ T3546] The buggy address belongs to the physical page: [ 72.342772][ T3546] page:ffffea0000880c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x22030 [ 72.352923][ T3546] head:ffffea0000880c00 order:3 compound_mapcount:0 compound_pincount:0 [ 72.361249][ T3546] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 72.369234][ T3546] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888012442140 [ 72.377821][ T3546] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 72.386507][ T3546] page dumped because: kasan: bad access detected [ 72.392917][ T3546] page_owner tracks the page as allocated [ 72.398628][ T3546] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3546, tgid 3546 (syz-executor425), ts 71858161136, free_ts 71850423265 [ 72.419578][ T3546] post_alloc_hook+0x18d/0x1b0 [ 72.424347][ T3546] get_page_from_freelist+0x32ed/0x3480 [ 72.429965][ T3546] __alloc_pages+0x28d/0x770 [ 72.434557][ T3546] alloc_slab_page+0x6a/0x150 [ 72.439244][ T3546] new_slab+0x84/0x2d0 [ 72.443323][ T3546] ___slab_alloc+0xa71/0x1080 [ 72.448007][ T3546] __kmem_cache_alloc_node+0x19f/0x260 [ 72.453570][ T3546] __kmalloc+0xa1/0x230 [ 72.457749][ T3546] tomoyo_realpath_from_path+0xcb/0x5d0 [ 72.463323][ T3546] tomoyo_check_open_permission+0x22c/0x490 [ 72.469226][ T3546] security_file_open+0x5f/0xa0 [ 72.474087][ T3546] do_dentry_open+0x308/0x10f0 [ 72.478851][ T3546] path_openat+0x2644/0x2e60 [ 72.483458][ T3546] do_filp_open+0x230/0x480 [ 72.488000][ T3546] do_sys_openat2+0x13b/0x500 [ 72.492680][ T3546] __x64_sys_openat+0x243/0x290 [ 72.497533][ T3546] page last free stack trace: [ 72.502202][ T3546] free_unref_page_prepare+0xf63/0x1120 [ 72.507753][ T3546] free_unref_page+0x98/0x570 [ 72.512434][ T3546] free_large_kmalloc+0xfb/0x190 [ 72.517415][ T3546] diMount+0x653/0x870 [ 72.521492][ T3546] jfs_mount_rw+0x307/0x640 [ 72.526006][ T3546] jfs_remount+0x3cd/0x6a0 [ 72.530429][ T3546] reconfigure_super+0x43a/0x870 [ 72.535373][ T3546] path_mount+0xe69/0x1090 [ 72.539800][ T3546] __se_sys_mount+0x2d5/0x3c0 [ 72.544489][ T3546] do_syscall_64+0x3d/0xb0 [ 72.548908][ T3546] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 72.554805][ T3546] [ 72.557135][ T3546] Memory state around the buggy address: [ 72.562936][ T3546] ffff88802202ff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 72.570999][ T3546] ffff88802202ff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 72.579153][ T3546] >ffff888022030000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 72.587212][ T3546] ^ [ 72.591276][ T3546] ffff888022030080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 72.599341][ T3546] ffff888022030100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 72.607398][ T3546] ================================================================== [ 72.615802][ T3546] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 72.623019][ T3546] CPU: 1 PID: 3546 Comm: syz-executor425 Not tainted 6.1.53-syzkaller #0 [ 72.632066][ T3546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 72.642149][ T3546] Call Trace: [ 72.645437][ T3546] [ 72.648370][ T3546] dump_stack_lvl+0x1e3/0x2cb [ 72.653058][ T3546] ? nf_tcp_handle_invalid+0x642/0x642 [ 72.658526][ T3546] ? panic+0x75d/0x75d [ 72.662610][ T3546] ? preempt_schedule_common+0xa6/0xd0 [ 72.668083][ T3546] ? vscnprintf+0x59/0x80 [ 72.672421][ T3546] ? diUnmount+0x60/0x100 [ 72.676765][ T3546] panic+0x318/0x75d [ 72.680669][ T3546] ? check_panic_on_warn+0x1d/0xa0 [ 72.685819][ T3546] ? memcpy_page_flushcache+0xfc/0xfc [ 72.691221][ T3546] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 72.697317][ T3546] ? _raw_spin_unlock+0x40/0x40 [ 72.702197][ T3546] ? diUnmount+0xef/0x100 [ 72.706539][ T3546] check_panic_on_warn+0x7e/0xa0 [ 72.711493][ T3546] ? diUnmount+0xef/0x100 [ 72.715834][ T3546] end_report+0x66/0x110 [ 72.720082][ T3546] kasan_report_invalid_free+0x117/0x130 [ 72.725727][ T3546] ? diUnmount+0xef/0x100 [ 72.730087][ T3546] ____kasan_slab_free+0xfb/0x120 [ 72.735291][ T3546] __kmem_cache_free+0x25c/0x3c0 [ 72.740246][ T3546] ? diUnmount+0xef/0x100 [ 72.744584][ T3546] diUnmount+0xef/0x100 [ 72.748754][ T3546] jfs_umount+0x109/0x370 [ 72.753096][ T3546] ? clear_inode+0x150/0x150 [ 72.757707][ T3546] jfs_put_super+0x86/0x180 [ 72.762232][ T3546] ? jfs_free_inode+0x20/0x20 [ 72.766930][ T3546] generic_shutdown_super+0x130/0x340 [ 72.772313][ T3546] kill_block_super+0x7a/0xe0 [ 72.777002][ T3546] deactivate_locked_super+0xa0/0x110 [ 72.782388][ T3546] cleanup_mnt+0x490/0x520 [ 72.786902][ T3546] ? lockdep_hardirqs_on+0x94/0x130 [ 72.792108][ T3546] task_work_run+0x246/0x300 [ 72.796716][ T3546] ? task_work_cancel+0x2b0/0x2b0 [ 72.801754][ T3546] ? exit_to_user_mode_loop+0x39/0x100 [ 72.807244][ T3546] exit_to_user_mode_loop+0xd9/0x100 [ 72.812542][ T3546] exit_to_user_mode_prepare+0xb1/0x140 [ 72.818096][ T3546] syscall_exit_to_user_mode+0x60/0x270 [ 72.823661][ T3546] do_syscall_64+0x49/0xb0 [ 72.828083][ T3546] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 72.833980][ T3546] RIP: 0033:0x7fbd87b85507 [ 72.838397][ T3546] Code: 07 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 72.858022][ T3546] RSP: 002b:00007ffc7a3b6088 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 72.866446][ T3546] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fbd87b85507 [ 72.874417][ T3546] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffc7a3b6140 [ 72.882391][ T3546] RBP: 00007ffc7a3b6140 R08: 0000000000000000 R09: 0000000000000000 [ 72.890366][ T3546] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffc7a3b71c0 [ 72.898348][ T3546] R13: 0000555556de96c0 R14: 431bde82d7b634db R15: 00007ffc7a3b71e0 [ 72.906332][ T3546] [ 72.909640][ T3546] Kernel Offset: disabled [ 72.913996][ T3546] Rebooting in 86400 seconds..