[ 462.761610][ T109] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 462.761610][ T109] [ 463.150713][ T7786] loop0: detected capacity change from 0 to 32768 [ 463.170694][ T108] blkno = 400000, nblocks = 0 [ 463.177127][ T108] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 463.177127][ T108] [ 463.189470][ T108] ERROR: (device loop0): remounting filesystem as read-only [ 463.205390][ T108] blkno = 400000, nblocks = 0 [ 463.212432][ T108] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 463.212432][ T108] [ 463.578628][ T7788] loop0: detected capacity change from 0 to 32768 [ 463.612683][ T108] blkno = 400000, nblocks = 0 [ 463.617571][ T108] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 463.617571][ T108] [ 463.628617][ T108] ERROR: (device loop0): remounting filesystem as read-only [ 463.636377][ T108] blkno = 400000, nblocks = 0 [ 463.641121][ T108] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 463.641121][ T108] [ 464.187552][ T7130] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.231812][ T7130] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.321588][ T7130] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.406527][ T7130] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.273338][ T7130] hsr_slave_0: left promiscuous mode [ 465.283202][ T7130] hsr_slave_1: left promiscuous mode [ 465.289964][ T7130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 465.298232][ T7130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 465.310743][ T7130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 465.318986][ T7130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.328582][ T7130] bridge_slave_1: left allmulticast mode [ 465.334961][ T7130] bridge_slave_1: left promiscuous mode [ 465.340848][ T7130] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.352805][ T7130] bridge_slave_0: left allmulticast mode [ 465.358799][ T7130] bridge_slave_0: left promiscuous mode [ 465.366204][ T7130] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.379170][ T7130] veth1_macvtap: left promiscuous mode [ 465.385117][ T7130] veth0_macvtap: left promiscuous mode [ 465.391577][ T7130] veth1_vlan: left promiscuous mode [ 465.398032][ T7130] veth0_vlan: left promiscuous mode [ 465.605431][ T7130] team0 (unregistering): Port device team_slave_1 removed [ 465.620890][ T7130] team0 (unregistering): Port device team_slave_0 removed [ 465.636700][ T7130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 465.656272][ T7130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 465.743456][ T7130] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.0.66' (ED25519) to the list of known hosts. [ 469.029866][ T7919] loop0: detected capacity change from 0 to 32768 [ 469.056558][ T108] blkno = 400000, nblocks = 0 [ 469.061409][ T108] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 469.061409][ T108] [ 469.073279][ T108] ERROR: (device loop0): remounting filesystem as read-only [ 469.083397][ T108] blkno = 400000, nblocks = 0 [ 469.088525][ T108] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 469.088525][ T108] [ 469.440407][ T7920] loop0: detected capacity change from 0 to 32768 [ 469.458847][ T109] blkno = 400000, nblocks = 0 [ 469.463797][ T109] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 469.463797][ T109] [ 469.474563][ T109] ERROR: (device loop0): remounting filesystem as read-only [ 469.482495][ T109] blkno = 400000, nblocks = 0 [ 469.487374][ T109] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 469.487374][ T109] [ 469.829224][ T7922] loop0: detected capacity change from 0 to 32768 [ 469.863379][ T108] blkno = 400000, nblocks = 0 [ 469.868423][ T108] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 469.868423][ T108] [ 469.879279][ T108] ERROR: (device loop0): remounting filesystem as read-only [ 469.887565][ T108] blkno = 400000, nblocks = 0 [ 469.892877][ T108] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 469.892877][ T108] [ 469.964525][ T7923] loop0: detected capacity change from 0 to 32768 [ 469.986815][ T109] blkno = 400000, nblocks = 0 [ 469.992180][ T109] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 469.992180][ T109] [ 470.004507][ T109] ERROR: (device loop0): remounting filesystem as read-only [ 470.011905][ T109] blkno = 400000, nblocks = 0 [ 470.017158][ T109] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 470.017158][ T109] [ 470.351705][ T7927] loop0: detected capacity change from 0 to 32768 [ 470.376909][ T109] blkno = 400000, nblocks = 0 [ 470.381753][ T109] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 470.381753][ T109] [ 470.395988][ T109] ERROR: (device loop0): remounting filesystem as read-only [ 470.403889][ T109] blkno = 400000, nblocks = 0 [ 470.409212][ T109] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 470.409212][ T109] [ 470.755456][ T7928] loop0: detected capacity change from 0 to 32768 [ 470.776567][ T108] blkno = 400000, nblocks = 0 [ 470.781499][ T108] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 470.781499][ T108] [ 470.792478][ T108] ERROR: (device loop0): remounting filesystem as read-only [ 470.799825][ T108] blkno = 400000, nblocks = 0 [ 470.804681][ T108] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 470.804681][ T108] [ 471.139966][ T7929] loop0: detected capacity change from 0 to 32768 [ 471.173536][ T109] blkno = 400000, nblocks = 0 [ 471.179301][ T109] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 471.179301][ T109] [ 471.190555][ T109] ERROR: (device loop0): remounting filesystem as read-only [ 471.198573][ T109] blkno = 400000, nblocks = 0 [ 471.204104][ T109] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 471.204104][ T109] [ 471.529825][ T7930] loop0: detected capacity change from 0 to 32768 [ 471.555926][ T108] blkno = 400000, nblocks = 0 [ 471.561326][ T108] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 471.561326][ T108] [ 471.572243][ T108] ERROR: (device loop0): remounting filesystem as read-only [ 471.579934][ T108] blkno = 400000, nblocks = 0 [ 471.584955][ T108] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 471.584955][ T108] [ 471.918281][ T7931] loop0: detected capacity change from 0 to 32768 [ 471.937435][ T109] blkno = 400000, nblocks = 0 [ 471.942771][ T109] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 471.942771][ T109] [ 471.954026][ T109] ERROR: (device loop0): remounting filesystem as read-only [ 471.961629][ T109] blkno = 400000, nblocks = 0 [ 471.967063][ T109] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 471.967063][ T109] [ 472.317351][ T7932] loop0: detected capacity change from 0 to 32768 [ 472.341354][ T108] blkno = 400000, nblocks = 0 [ 472.346385][ T108] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 472.346385][ T108] [ 472.357068][ T108] ERROR: (device loop0): remounting filesystem as read-only [ 472.365257][ T108] blkno = 400000, nblocks = 0 [ 472.369990][ T108] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 472.369990][ T108] [ 472.438705][ T7934] loop0: detected capacity change from 0 to 32768 [ 472.462853][ T109] blkno = 400000, nblocks = 0 [ 472.467714][ T109] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 472.467714][ T109] [ 472.478685][ T109] ERROR: (device loop0): remounting filesystem as read-only [ 472.486178][ T109] blkno = 400000, nblocks = 0 [ 472.491278][ T109] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 472.491278][ T109] [ 472.828474][ T7935] loop0: detected capacity change from 0 to 32768 [ 472.845825][ T109] blkno = 400000, nblocks = 0 [ 472.850851][ T109] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 472.850851][ T109] [ 472.861727][ T109] ERROR: (device loop0): remounting filesystem as read-only [ 472.869597][ T109] blkno = 400000, nblocks = 0 [ 472.876350][ T109] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 472.876350][ T109] [ 473.218414][ T7936] loop0: detected capacity change from 0 to 32768 [ 473.237784][ T108] blkno = 400000, nblocks = 0 [ 473.242969][ T108] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 473.242969][ T108] [ 473.253729][ T108] ERROR: (device loop0): remounting filesystem as read-only [ 473.261437][ T108] blkno = 400000, nblocks = 0 [ 473.267467][ T108] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 473.267467][ T108] [ 473.600701][ T7938] loop0: detected capacity change from 0 to 32768 [ 473.626116][ T109] blkno = 400000, nblocks = 0 [ 473.631051][ T109] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 473.631051][ T109] [ 473.652636][ T109] ERROR: (device loop0): remounting filesystem as read-only [ 473.660470][ T109] blkno = 400000, nblocks = 0 [ 473.666032][ T109] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 473.666032][ T109] [ 474.010091][ T7941] loop0: detected capacity change from 0 to 32768 [ 474.042628][ T109] blkno = 400000, nblocks = 0 [ 474.047799][ T109] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 474.047799][ T109] [ 474.059013][ T109] ERROR: (device loop0): remounting filesystem as read-only [ 474.068483][ T109] blkno = 400000, nblocks = 0 [ 474.073804][ T109] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 474.073804][ T109] [ 474.416443][ T7942] loop0: detected capacity change from 0 to 32768 [ 474.435542][ T108] blkno = 400000, nblocks = 0 [ 474.440324][ T108] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 474.440324][ T108] [ 474.451531][ T108] ERROR: (device loop0): remounting filesystem as read-only [ 474.459223][ T108] blkno = 400000, nblocks = 0 [ 474.464445][ T108] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 474.464445][ T108] [ 474.789038][ T7944] loop0: detected capacity change from 0 to 32768 [ 474.813134][ T109] blkno = 400000, nblocks = 0 [ 474.817900][ T109] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 474.817900][ T109] [ 474.828794][ T109] ERROR: (device loop0): remounting filesystem as read-only [ 474.837107][ T109] blkno = 400000, nblocks = 0 [ 474.842907][ T109] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 474.842907][ T109] [ 475.181665][ T7947] loop0: detected capacity change from 0 to 32768 [ 475.202102][ T109] blkno = 400000, nblocks = 0 [ 475.207076][ T109] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 475.207076][ T109] [ 475.218874][ T109] ERROR: (device loop0): remounting filesystem as read-only [ 475.226470][ T109] blkno = 400000, nblocks = 0 [ 475.231293][ T109] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 475.231293][ T109] [ 475.324215][ T7949] loop0: detected capacity change from 0 to 32768 [ 475.345750][ T108] blkno = 400000, nblocks = 0 [ 475.350687][ T108] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 475.350687][ T108] [ 475.361196][ T108] ERROR: (device loop0): remounting filesystem as read-only [ 475.368683][ T108] blkno = 400000, nblocks = 0 [ 475.373692][ T108] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 475.373692][ T108] [ 475.438333][ T7950] loop0: detected capacity change from 0 to 32768 [ 475.468725][ T108] blkno = 400000, nblocks = 0 [ 475.474046][ T108] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 475.474046][ T108] [ 475.485738][ T108] ERROR: (device loop0): remounting filesystem as read-only [ 475.493201][ T108] blkno = 400000, nblocks = 0 [ 475.498490][ T108] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 475.498490][ T108] [ 475.564937][ T7951] loop0: detected capacity change from 0 to 32768 [ 475.583107][ T108] blkno = 400000, nblocks = 0 [ 475.588154][ T108] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 475.588154][ T108] [ 475.599203][ T108] ERROR: (device loop0): remounting filesystem as read-only [ 475.606802][ T108] blkno = 400000, nblocks = 0 [ 475.611580][ T108] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 475.611580][ T108] [ 475.680898][ T7952] loop0: detected capacity change from 0 to 32768 [ 475.702678][ T109] blkno = 400000, nblocks = 0 [ 475.707693][ T109] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 475.707693][ T109] [ 475.718918][ T109] ERROR: (device loop0): remounting filesystem as read-only [ 475.726548][ T109] blkno = 400000, nblocks = 0 [ 475.731305][ T109] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 475.731305][ T109] [ 475.801480][ T7953] loop0: detected capacity change from 0 to 32768 [ 475.825909][ T108] blkno = 400000, nblocks = 0 [ 475.830809][ T108] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 475.830809][ T108] [ 475.841987][ T108] ERROR: (device loop0): remounting filesystem as read-only [ 475.849561][ T108] blkno = 400000, nblocks = 0 [ 475.854605][ T108] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 475.854605][ T108] [ 475.925893][ T7954] loop0: detected capacity change from 0 to 32768 [ 475.942875][ T109] blkno = 400000, nblocks = 0 [ 475.947762][ T109] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 475.947762][ T109] [ 475.959401][ T109] ERROR: (device loop0): remounting filesystem as read-only [ 475.967380][ T109] blkno = 400000, nblocks = 0 [ 475.973351][ T109] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 475.973351][ T109] [ 476.298213][ T7955] loop0: detected capacity change from 0 to 32768 [ 476.320336][ T108] blkno = 400000, nblocks = 0 [ 476.325315][ T108] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 476.325315][ T108] [ 476.336762][ T108] ERROR: (device loop0): remounting filesystem as read-only [ 476.344260][ T108] blkno = 400000, nblocks = 0 [ 476.349518][ T108] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 476.349518][ T108] [ 476.736029][ T7962] loop0: detected capacity change from 0 to 32768 [ 476.764782][ T109] blkno = 400000, nblocks = 0 [ 476.769628][ T109] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 476.769628][ T109] [ 476.781037][ T109] ERROR: (device loop0): remounting filesystem as read-only [ 476.793890][ T109] blkno = 400000, nblocks = 0 [ 476.807507][ T109] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 476.807507][ T109] [ 477.144031][ T7971] loop0: detected capacity change from 0 to 32768 [ 477.166329][ T108] blkno = 400000, nblocks = 0 [ 477.171221][ T108] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 477.171221][ T108] [ 477.182397][ T108] ERROR: (device loop0): remounting filesystem as read-only [ 477.189993][ T108] blkno = 400000, nblocks = 0 [ 477.195041][ T108] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 477.195041][ T108] [ 477.527419][ T7972] loop0: detected capacity change from 0 to 32768 [ 477.546368][ T109] blkno = 400000, nblocks = 0 [ 477.551213][ T109] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 477.551213][ T109] [ 477.564800][ T109] ERROR: (device loop0): remounting filesystem as read-only [ 477.572532][ T109] blkno = 400000, nblocks = 0 [ 477.577621][ T109] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 477.577621][ T109] [ 477.657186][ T7973] loop0: detected capacity change from 0 to 32768 [ 477.677105][ T109] blkno = 400000, nblocks = 0 [ 477.681880][ T109] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 477.681880][ T109] [ 477.702595][ T109] ERROR: (device loop0): remounting filesystem as read-only [ 477.711039][ T109] blkno = 400000, nblocks = 0 [ 477.716483][ T109] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 477.716483][ T109] [ 477.781276][ T7974] loop0: detected capacity change from 0 to 32768 [ 477.800763][ T108] blkno = 400000, nblocks = 0 [ 477.807005][ T108] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 477.807005][ T108] [ 477.832405][ T108] ERROR: (device loop0): remounting filesystem as read-only [ 477.839932][ T108] blkno = 400000, nblocks = 0 [ 477.845053][ T108] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 477.845053][ T108] [ 478.170299][ T7975] loop0: detected capacity change from 0 to 32768 [ 478.195307][ T108] blkno = 400000, nblocks = 0 [ 478.200304][ T108] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 478.200304][ T108] [ 478.211639][ T108] ERROR: (device loop0): remounting filesystem as read-only [ 478.222891][ T108] blkno = 400000, nblocks = 0 [ 478.227817][ T108] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 478.227817][ T108] [ 478.300954][ T7976] loop0: detected capacity change from 0 to 32768 [ 478.321766][ T109] blkno = 400000, nblocks = 0 [ 478.326832][ T109] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 478.326832][ T109] [ 478.338574][ T109] ERROR: (device loop0): remounting filesystem as read-only [ 478.347195][ T109] blkno = 400000, nblocks = 0 [ 478.352475][ T109] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 478.352475][ T109] [ 478.687732][ T7977] loop0: detected capacity change from 0 to 32768 [ 478.708148][ T108] blkno = 400000, nblocks = 0 [ 478.713937][ T108] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 478.713937][ T108] [ 478.725193][ T108] ERROR: (device loop0): remounting filesystem as read-only [ 478.732842][ T108] blkno = 400000, nblocks = 0 [ 478.737709][ T108] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 478.737709][ T108] [ 479.099274][ T7984] loop0: detected capacity change from 0 to 32768 [ 479.124933][ T109] blkno = 400000, nblocks = 0 [ 479.129705][ T109] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 479.129705][ T109] [ 479.141000][ T109] ERROR: (device loop0): remounting filesystem as read-only [ 479.148657][ T109] blkno = 400000, nblocks = 0 [ 479.153701][ T109] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 479.153701][ T109] [ 479.521277][ T8002] loop0: detected capacity change from 0 to 32768 [ 479.546230][ T108] blkno = 400000, nblocks = 0 [ 479.558772][ T108] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 479.558772][ T108] [ 479.570115][ T108] ERROR: (device loop0): remounting filesystem as read-only [ 479.580491][ T108] blkno = 400000, nblocks = 0 [ 479.585867][ T108] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 479.585867][ T108] [ 479.623980][ T108] ================================================================== [ 479.632288][ T108] BUG: KASAN: slab-use-after-free in jfs_lazycommit+0x7de/0xb70 [ 479.640054][ T108] Read of size 4 at addr ffff8880281fb694 by task jfsCommit/108 [ 479.647727][ T108] [ 479.650168][ T108] CPU: 0 PID: 108 Comm: jfsCommit Not tainted 6.6.0-rc3-syzkaller-00214-ge402b08634b3 #0 [ 479.660019][ T108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 479.670332][ T108] Call Trace: [ 479.673823][ T108] [ 479.676909][ T108] dump_stack_lvl+0x1e7/0x2d0 [ 479.681639][ T108] ? nf_tcp_handle_invalid+0x650/0x650 [ 479.687253][ T108] ? panic+0x770/0x770 [ 479.691547][ T108] ? _printk+0xd5/0x120 [ 479.696060][ T108] print_report+0x163/0x540 [ 479.700818][ T108] ? preempt_schedule_common+0x83/0xc0 [ 479.706520][ T108] ? __virt_addr_valid+0x22f/0x2e0 [ 479.711705][ T108] ? __phys_addr+0xba/0x170 [ 479.716609][ T108] ? jfs_lazycommit+0x7de/0xb70 [ 479.721608][ T108] kasan_report+0x175/0x1b0 [ 479.726335][ T108] ? jfs_lazycommit+0x7de/0xb70 [ 479.731817][ T108] jfs_lazycommit+0x7de/0xb70 [ 479.736552][ T108] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 479.742549][ T108] ? lockdep_hardirqs_on+0x98/0x140 [ 479.748155][ T108] ? txFreelock+0x580/0x580 [ 479.752793][ T108] ? do_task_dead+0xd0/0xd0 [ 479.757786][ T108] kthread+0x2d3/0x370 [ 479.761998][ T108] ? txFreelock+0x580/0x580 [ 479.766655][ T108] ? kthread_blkcg+0xd0/0xd0 [ 479.771395][ T108] ret_from_fork+0x48/0x80 [ 479.775861][ T108] ? kthread_blkcg+0xd0/0xd0 [ 479.780549][ T108] ret_from_fork_asm+0x11/0x20 [ 479.785558][ T108] [ 479.788703][ T108] [ 479.789834][ T8008] loop0: detected capacity change from 0 to 32768 [ 479.791128][ T108] Allocated by task 8002: [ 479.791142][ T108] kasan_set_track+0x4f/0x70 [ 479.806688][ T108] __kasan_kmalloc+0x98/0xb0 [ 479.811341][ T108] jfs_fill_super+0xff/0xc50 [ 479.816076][ T108] mount_bdev+0x237/0x300 [ 479.820612][ T108] legacy_get_tree+0xef/0x190 [ 479.825920][ T108] vfs_get_tree+0x8c/0x280 [ 479.830613][ T108] do_new_mount+0x28f/0xae0 [ 479.835221][ T108] __se_sys_mount+0x2d9/0x3c0 [ 479.839998][ T108] do_syscall_64+0x41/0xc0 [ 479.844515][ T108] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 479.850709][ T108] [ 479.853025][ T108] Freed by task 7916: [ 479.857339][ T108] kasan_set_track+0x4f/0x70 [ 479.863116][ T108] kasan_save_free_info+0x28/0x40 [ 479.868241][ T108] ____kasan_slab_free+0xd6/0x120 [ 479.873269][ T108] __kmem_cache_free+0x25f/0x3b0 [ 479.878215][ T108] generic_shutdown_super+0x13a/0x2c0 [ 479.883686][ T108] kill_block_super+0x41/0x70 [ 479.888469][ T108] deactivate_locked_super+0xa4/0x110 [ 479.894011][ T108] cleanup_mnt+0x426/0x4c0 [ 479.898443][ T108] task_work_run+0x24a/0x300 [ 479.903121][ T108] exit_to_user_mode_loop+0xde/0x100 [ 479.908415][ T108] exit_to_user_mode_prepare+0xb1/0x140 [ 479.914068][ T108] syscall_exit_to_user_mode+0x64/0x280 [ 479.919714][ T108] do_syscall_64+0x4d/0xc0 [ 479.924127][ T108] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 479.930059][ T108] [ 479.932378][ T108] Last potentially related work creation: [ 479.938202][ T108] kasan_save_stack+0x3f/0x60 [ 479.942967][ T108] __kasan_record_aux_stack+0xad/0xc0 [ 479.948539][ T108] call_rcu+0x167/0xa70 [ 479.953073][ T108] fib_release_info+0x620/0x6e0 [ 479.957943][ T108] fib_table_flush+0xb90/0x11a0 [ 479.962857][ T108] fib_netdev_event+0x447/0x760 [ 479.967809][ T108] notifier_call_chain+0x18c/0x3a0 [ 479.973222][ T108] dev_close_many+0x386/0x530 [ 479.977972][ T108] unregister_netdevice_many_notify+0x4ec/0x1900 [ 479.984325][ T108] xfrmi_exit_batch_net+0x30f/0x350 [ 479.989724][ T108] cleanup_net+0x767/0xb80 [ 479.994248][ T108] process_scheduled_works+0x90f/0x1400 [ 480.000004][ T108] worker_thread+0xa5f/0xff0 [ 480.004638][ T108] kthread+0x2d3/0x370 [ 480.008799][ T108] ret_from_fork+0x48/0x80 [ 480.013237][ T108] ret_from_fork_asm+0x11/0x20 [ 480.018000][ T108] [ 480.020335][ T108] The buggy address belongs to the object at ffff8880281fb600 [ 480.020335][ T108] which belongs to the cache kmalloc-256 of size 256 [ 480.034751][ T108] The buggy address is located 148 bytes inside of [ 480.034751][ T108] freed 256-byte region [ffff8880281fb600, ffff8880281fb700) [ 480.048563][ T108] [ 480.050888][ T108] The buggy address belongs to the physical page: [ 480.057667][ T108] page:ffffea0000a07e80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x281fa [ 480.068280][ T108] head:ffffea0000a07e80 order:1 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 480.077244][ T108] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 480.085488][ T108] page_type: 0xffffffff() [ 480.089837][ T108] raw: 00fff00000000840 ffff888012841b40 dead000000000100 dead000000000122 [ 480.098799][ T108] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 480.107552][ T108] page dumped because: kasan: bad access detected [ 480.113968][ T108] page_owner tracks the page as allocated [ 480.120144][ T108] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5390, tgid 5390 (syz-executor.0), ts 105212028432, free_ts 104819748835 [ 480.143792][ T108] post_alloc_hook+0x1e6/0x210 [ 480.148589][ T108] get_page_from_freelist+0x31db/0x3360 [ 480.154596][ T108] __alloc_pages+0x255/0x670 [ 480.159224][ T108] alloc_slab_page+0x6a/0x160 [ 480.164086][ T108] new_slab+0x84/0x2f0 [ 480.168149][ T108] ___slab_alloc+0xc85/0x1310 [ 480.172821][ T108] __kmem_cache_alloc_node+0x1af/0x270 [ 480.178454][ T108] __kmalloc+0xa8/0x230 [ 480.182722][ T108] fib_create_info+0xa3b/0x2510 [ 480.187615][ T108] fib_table_insert+0x1f6/0x1f20 [ 480.192744][ T108] fib_add_ifaddr+0x483/0x1730 [ 480.197683][ T108] fib_inetaddr_event+0x12f/0x2c0 [ 480.202721][ T108] notifier_call_chain+0x18c/0x3a0 [ 480.208284][ T108] blocking_notifier_call_chain+0x69/0x90 [ 480.214205][ T108] __inet_insert_ifa+0x9cf/0xc20 [ 480.219263][ T108] inet_rtm_newaddr+0x1107/0x1ad0 [ 480.224577][ T108] page last free stack trace: [ 480.229356][ T108] free_unref_page_prepare+0x8c3/0x9f0 [ 480.235033][ T108] free_unref_page+0x37/0x3f0 [ 480.239712][ T108] __slab_free+0x2f6/0x390 [ 480.244684][ T108] qlist_free_all+0x75/0xe0 [ 480.249302][ T108] kasan_quarantine_reduce+0x14b/0x160 [ 480.254873][ T108] __kasan_slab_alloc+0x23/0x70 [ 480.259754][ T108] slab_post_alloc_hook+0x67/0x3d0 [ 480.264882][ T108] kmem_cache_alloc_node+0x148/0x330 [ 480.270275][ T108] __alloc_skb+0x181/0x420 [ 480.274901][ T108] netlink_ack+0x396/0x1290 [ 480.279637][ T108] netlink_rcv_skb+0x25c/0x430 [ 480.284639][ T108] netlink_unicast+0x7dc/0x970 [ 480.289549][ T108] netlink_sendmsg+0xa37/0xd70 [ 480.294337][ T108] __sys_sendto+0x484/0x640 [ 480.298863][ T108] __x64_sys_sendto+0xde/0xf0 [ 480.303710][ T108] do_syscall_64+0x41/0xc0 [ 480.308381][ T108] [ 480.310696][ T108] Memory state around the buggy address: [ 480.316320][ T108] ffff8880281fb580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 480.324699][ T108] ffff8880281fb600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 480.332776][ T108] >ffff8880281fb680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 480.340870][ T108] ^ [ 480.345580][ T108] ffff8880281fb700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 480.353751][ T108] ffff8880281fb780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 480.361813][ T108] ================================================================== [ 480.369973][ T108] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 480.377872][ T108] CPU: 0 PID: 108 Comm: jfsCommit Not tainted 6.6.0-rc3-syzkaller-00214-ge402b08634b3 #0 [ 480.388387][ T108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 480.398446][ T108] Call Trace: [ 480.401916][ T108] [ 480.404854][ T108] dump_stack_lvl+0x1e7/0x2d0 [ 480.409654][ T108] ? nf_tcp_handle_invalid+0x650/0x650 [ 480.415138][ T108] ? panic+0x770/0x770 [ 480.419226][ T108] ? lock_release+0xbf/0x9d0 [ 480.423930][ T108] ? vscnprintf+0x5d/0x80 [ 480.428471][ T108] panic+0x30f/0x770 [ 480.432408][ T108] ? check_panic_on_warn+0x21/0xa0 [ 480.437646][ T108] ? __memcpy_flushcache+0x2b0/0x2b0 [ 480.443664][ T108] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 480.449576][ T108] ? _raw_spin_unlock+0x40/0x40 [ 480.454430][ T108] ? print_report+0x4fb/0x540 [ 480.459112][ T108] check_panic_on_warn+0x82/0xa0 [ 480.464156][ T108] ? jfs_lazycommit+0x7de/0xb70 [ 480.469328][ T108] end_report+0x6e/0x130 [ 480.473588][ T108] kasan_report+0x186/0x1b0 [ 480.478363][ T108] ? jfs_lazycommit+0x7de/0xb70 [ 480.483442][ T108] jfs_lazycommit+0x7de/0xb70 [ 480.489190][ T108] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 480.496424][ T108] ? lockdep_hardirqs_on+0x98/0x140 [ 480.501737][ T108] ? txFreelock+0x580/0x580 [ 480.506419][ T108] ? do_task_dead+0xd0/0xd0 [ 480.511052][ T108] kthread+0x2d3/0x370 [ 480.515198][ T108] ? txFreelock+0x580/0x580 [ 480.519808][ T108] ? kthread_blkcg+0xd0/0xd0 [ 480.524454][ T108] ret_from_fork+0x48/0x80 [ 480.528961][ T108] ? kthread_blkcg+0xd0/0xd0 [ 480.533886][ T108] ret_from_fork_asm+0x11/0x20 [ 480.538923][ T108] [ 481.654779][ T108] Kernel Offset: disabled [ 481.659998][ T108] Rebooting in 86400 seconds..