Warning: Permanently added '10.128.0.237' (ED25519) to the list of known hosts. executing program executing program executing program executing program executing program [ 69.015913][ T5819] loop1: detected capacity change from 0 to 32768 [ 69.024259][ T5824] loop4: detected capacity change from 0 to 32768 [ 69.054082][ T5819] [ 69.054082][ T5819] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 69.054082][ T5819] [ 69.076727][ T5824] [ 69.076727][ T5824] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 69.076727][ T5824] [ 69.083305][ T5823] loop2: detected capacity change from 0 to 32768 [ 69.098018][ T5825] loop3: detected capacity change from 0 to 32768 [ 69.119598][ T5819] [ 69.119598][ T5819] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 69.119598][ T5819] [ 69.120494][ T5825] [ 69.120494][ T5825] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 69.120494][ T5825] [ 69.140735][ T5824] [ 69.140735][ T5824] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 69.140735][ T5824] [ 69.154985][ T5823] [ 69.154985][ T5823] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 69.154985][ T5823] [ 69.162142][ T5819] [ 69.162142][ T5819] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 69.162142][ T5819] [ 69.190067][ T5824] [ 69.190067][ T5824] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 69.190067][ T5824] [ 69.193785][ T5823] [ 69.193785][ T5823] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 69.193785][ T5823] [ 69.221908][ T5820] loop0: detected capacity change from 0 to 32768 [ 69.231046][ T115] [ 69.231046][ T115] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 69.231046][ T115] [ 69.231586][ T5825] [ 69.231586][ T5825] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 69.231586][ T5825] [ 69.242020][ T114] [ 69.242020][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 69.242020][ T114] [ 69.268036][ T5823] [ 69.268036][ T5823] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 69.268036][ T5823] [ 69.280941][ T5825] [ 69.280941][ T5825] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 69.280941][ T5825] [ 69.295906][ T115] [ 69.295906][ T115] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 69.295906][ T115] [ 69.296221][ T5820] [ 69.296221][ T5820] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 69.296221][ T5820] [ 69.308226][ T114] [ 69.308226][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 69.308226][ T114] [ 69.320184][ T3555] [ 69.320184][ T3555] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 69.320184][ T3555] [ 69.328766][ T13] [ 69.328766][ T13] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 69.328766][ T13] [ 69.351776][ T13] [ 69.351776][ T13] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 69.351776][ T13] [ 69.352874][ T53] [ 69.352874][ T53] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 69.352874][ T53] [ 69.364447][ T12] [ 69.364447][ T12] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 69.364447][ T12] [ 69.374154][ T3555] [ 69.374154][ T3555] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 69.374154][ T3555] [ 69.394493][ T53] [ 69.394493][ T53] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 69.394493][ T53] [ 69.399444][ T5820] [ 69.399444][ T5820] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 69.399444][ T5820] [ 69.406315][ T5818] [ 69.406315][ T5818] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 69.406315][ T5818] [ 69.426738][ T5817] [ 69.426738][ T5817] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 69.426738][ T5817] [ 69.439447][ T5822] [ 69.439447][ T5822] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 69.439447][ T5822] [ 69.439488][ T12] [ 69.439488][ T12] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 69.439488][ T12] [ 69.451319][ T115] [ 69.451319][ T115] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 69.451319][ T115] [ 69.461409][ T5820] [ 69.461409][ T5820] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 69.461409][ T5820] [ 69.471551][ T5821] [ 69.471551][ T5821] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 69.471551][ T5821] [ 69.493628][ T5817] [ 69.493628][ T5817] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 69.493628][ T5817] [ 69.505537][ T5822] [ 69.505537][ T5822] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 69.505537][ T5822] [ 69.509413][ T114] [ 69.509413][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 69.509413][ T114] [ 69.519592][ T5818] [ 69.519592][ T5818] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 69.519592][ T5818] [ 69.528579][ T114] [ 69.528579][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 69.528579][ T114] [ 69.549818][ T115] [ 69.549818][ T115] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 69.549818][ T115] [ 69.561786][ T5821] [ 69.561786][ T5821] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 69.561786][ T5821] [ 69.575167][ T115] ================================================================== [ 69.576813][ T114] [ 69.576813][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 69.576813][ T114] [ 69.583264][ T115] BUG: KASAN: slab-use-after-free in txEnd+0x35f/0x570 [ 69.583359][ T115] Write of size 8 at addr ffff888031797840 by task jfsCommit/115 [ 69.583379][ T115] [ 69.583406][ T115] CPU: 1 UID: 0 PID: 115 Comm: jfsCommit Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 69.583430][ T115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 69.583447][ T115] Call Trace: [ 69.583455][ T115] [ 69.583463][ T115] dump_stack_lvl+0x241/0x360 [ 69.583492][ T115] ? __pfx_dump_stack_lvl+0x10/0x10 [ 69.583514][ T115] ? __virt_addr_valid+0x183/0x530 [ 69.583540][ T115] ? rcu_is_watching+0x15/0xb0 [ 69.583562][ T115] ? __virt_addr_valid+0x183/0x530 [ 69.583588][ T115] ? lock_release+0x4e/0x3e0 [ 69.583620][ T115] ? __virt_addr_valid+0x183/0x530 [ 69.583644][ T115] ? __virt_addr_valid+0x183/0x530 [ 69.583669][ T115] print_report+0x16e/0x5b0 [ 69.583702][ T115] ? __virt_addr_valid+0x183/0x530 [ 69.583742][ T115] ? __virt_addr_valid+0x183/0x530 [ 69.583766][ T115] ? __virt_addr_valid+0x45f/0x530 [ 69.583790][ T115] ? __phys_addr+0xba/0x170 [ 69.583814][ T115] ? txEnd+0x35f/0x570 [ 69.583864][ T115] kasan_report+0x143/0x180 [ 69.583897][ T115] ? txEnd+0x35f/0x570 [ 69.583931][ T115] kasan_check_range+0x28f/0x2a0 [ 69.583965][ T115] txEnd+0x35f/0x570 [ 69.583999][ T115] jfs_lazycommit+0x636/0xb90 [ 69.584018][ T115] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 69.584051][ T115] ? lockdep_hardirqs_on+0x9d/0x150 [ 69.584082][ T115] ? __pfx_jfs_lazycommit+0x10/0x10 [ 69.584110][ T115] ? __pfx_default_wake_function+0x10/0x10 [ 69.584143][ T115] ? __kthread_parkme+0x169/0x1d0 [ 69.584166][ T115] ? __pfx_jfs_lazycommit+0x10/0x10 [ 69.584187][ T115] kthread+0x7a9/0x920 [ 69.584213][ T115] ? __pfx_jfs_lazycommit+0x10/0x10 [ 69.584232][ T115] ? __pfx_kthread+0x10/0x10 [ 69.584255][ T115] ? __pfx_kthread+0x10/0x10 [ 69.584280][ T115] ? __pfx_kthread+0x10/0x10 [ 69.584303][ T115] ? __pfx_kthread+0x10/0x10 [ 69.584326][ T115] ? _raw_spin_unlock_irq+0x23/0x50 [ 69.584350][ T115] ? lockdep_hardirqs_on+0x9d/0x150 [ 69.584377][ T115] ? __pfx_kthread+0x10/0x10 [ 69.584401][ T115] ret_from_fork+0x4b/0x80 [ 69.584433][ T115] ? __pfx_kthread+0x10/0x10 [ 69.584456][ T115] ret_from_fork_asm+0x1a/0x30 [ 69.584492][ T115] [ 69.584500][ T115] [ 69.822619][ T115] Allocated by task 5824: [ 69.826952][ T115] kasan_save_track+0x3f/0x80 [ 69.831643][ T115] __kasan_kmalloc+0x9d/0xb0 [ 69.836242][ T115] __kmalloc_cache_noprof+0x236/0x370 [ 69.841615][ T115] lmLogOpen+0x320/0x1040 [ 69.845955][ T115] jfs_mount_rw+0xef/0x680 [ 69.850382][ T115] jfs_fill_super+0x775/0xd90 [ 69.855062][ T115] get_tree_bdev_flags+0x490/0x5c0 [ 69.860186][ T115] vfs_get_tree+0x90/0x2b0 [ 69.864611][ T115] do_new_mount+0x2cf/0xb70 [ 69.869121][ T115] __se_sys_mount+0x38c/0x400 [ 69.873801][ T115] do_syscall_64+0xf3/0x230 [ 69.878319][ T115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.884217][ T115] [ 69.886546][ T115] Freed by task 5822: [ 69.890526][ T115] kasan_save_track+0x3f/0x80 [ 69.895213][ T115] kasan_save_free_info+0x40/0x50 [ 69.900244][ T115] __kasan_slab_free+0x59/0x70 [ 69.905023][ T115] kfree+0x198/0x430 [ 69.909020][ T115] lmLogClose+0x2a1/0x530 [ 69.913366][ T115] jfs_umount+0x2ce/0x3a0 [ 69.917707][ T115] jfs_put_super+0x8a/0x190 [ 69.922218][ T115] generic_shutdown_super+0x139/0x2d0 [ 69.927597][ T115] kill_block_super+0x44/0x90 [ 69.932285][ T115] deactivate_locked_super+0xc4/0x130 [ 69.937664][ T115] cleanup_mnt+0x422/0x4c0 [ 69.942089][ T115] task_work_run+0x251/0x310 [ 69.946686][ T115] syscall_exit_to_user_mode+0x13f/0x340 [ 69.952333][ T115] do_syscall_64+0x100/0x230 [ 69.956932][ T115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.962828][ T115] [ 69.965153][ T115] The buggy address belongs to the object at ffff888031797800 [ 69.965153][ T115] which belongs to the cache kmalloc-1k of size 1024 [ 69.979386][ T115] The buggy address is located 64 bytes inside of [ 69.979386][ T115] freed 1024-byte region [ffff888031797800, ffff888031797c00) [ 69.993192][ T115] [ 69.995520][ T115] The buggy address belongs to the physical page: [ 70.001930][ T115] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888031792000 pfn:0x31790 [ 70.012008][ T115] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 70.020512][ T115] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 70.029021][ T115] page_type: f5(slab) [ 70.033015][ T115] raw: 00fff00000000240 ffff88801ac41dc0 ffffea0000d66a10 ffffea0000cd5210 [ 70.041623][ T115] raw: ffff888031792000 000000000010000b 00000000f5000000 0000000000000000 [ 70.050219][ T115] head: 00fff00000000240 ffff88801ac41dc0 ffffea0000d66a10 ffffea0000cd5210 [ 70.058897][ T115] head: ffff888031792000 000000000010000b 00000000f5000000 0000000000000000 [ 70.067571][ T115] head: 00fff00000000003 ffffea0000c5e401 ffffffffffffffff 0000000000000000 [ 70.076248][ T115] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 70.084919][ T115] page dumped because: kasan: bad access detected [ 70.091379][ T115] page_owner tracks the page as allocated [ 70.097094][ T115] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 21160942723, free_ts 0 [ 70.116825][ T115] post_alloc_hook+0x1f4/0x240 [ 70.121607][ T115] get_page_from_freelist+0x368a/0x37d0 [ 70.127160][ T115] __alloc_frozen_pages_noprof+0x2c5/0x7b0 [ 70.132974][ T115] alloc_pages_mpol+0x339/0x690 [ 70.137838][ T115] allocate_slab+0x8f/0x3a0 [ 70.142348][ T115] ___slab_alloc+0xc3b/0x1500 [ 70.147037][ T115] __slab_alloc+0x58/0xa0 [ 70.151371][ T115] __kvmalloc_node_noprof+0x3f4/0x5a0 [ 70.156748][ T115] rhashtable_init_noprof+0x534/0xa60 [ 70.162132][ T115] handshake_init+0x10/0xc0 [ 70.166641][ T115] do_one_initcall+0x24a/0x940 [ 70.171417][ T115] do_initcall_level+0x157/0x210 [ 70.176369][ T115] do_initcalls+0x71/0xd0 [ 70.180705][ T115] kernel_init_freeable+0x432/0x5d0 [ 70.185910][ T115] kernel_init+0x1d/0x2b0 [ 70.190242][ T115] ret_from_fork+0x4b/0x80 [ 70.194673][ T115] page_owner free stack trace missing [ 70.200042][ T115] [ 70.202365][ T115] Memory state around the buggy address: [ 70.207996][ T115] ffff888031797700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 70.216070][ T115] ffff888031797780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 70.224135][ T115] >ffff888031797800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 70.232200][ T115] ^ [ 70.238356][ T115] ffff888031797880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 70.246418][ T115] ffff888031797900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 70.254480][ T115] ================================================================== [ 70.263866][ T53] [ 70.263866][ T53] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 70.263866][ T53] [ 70.278568][ T53] [ 70.278568][ T53] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 70.278568][ T53] [ 70.348575][ T5816] [ 70.348575][ T5816] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 70.348575][ T5816] [ 70.367642][ T115] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 70.374899][ T115] CPU: 0 UID: 0 PID: 115 Comm: jfsCommit Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 70.386476][ T115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 70.396566][ T115] Call Trace: [ 70.399868][ T115] [ 70.402818][ T115] dump_stack_lvl+0x241/0x360 [ 70.407514][ T115] ? __pfx_dump_stack_lvl+0x10/0x10 [ 70.412720][ T115] ? __pfx__printk+0x10/0x10 [ 70.417324][ T115] ? vscnprintf+0x5d/0x90 [ 70.421663][ T115] panic+0x349/0x880 [ 70.425567][ T115] ? check_panic_on_warn+0x21/0xb0 [ 70.430687][ T115] ? __pfx_panic+0x10/0x10 [ 70.435115][ T115] ? _raw_spin_unlock_irqrestore+0x134/0x140 [ 70.441105][ T115] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 70.447441][ T115] ? print_report+0x519/0x5b0 [ 70.452135][ T115] check_panic_on_warn+0x86/0xb0 [ 70.457084][ T115] ? txEnd+0x35f/0x570 [ 70.461167][ T115] end_report+0x77/0x160 [ 70.465429][ T115] kasan_report+0x154/0x180 [ 70.469949][ T115] ? txEnd+0x35f/0x570 [ 70.474049][ T115] kasan_check_range+0x28f/0x2a0 [ 70.479021][ T115] txEnd+0x35f/0x570 [ 70.482978][ T115] jfs_lazycommit+0x636/0xb90 [ 70.487791][ T115] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 70.493713][ T115] ? lockdep_hardirqs_on+0x9d/0x150 [ 70.498935][ T115] ? __pfx_jfs_lazycommit+0x10/0x10 [ 70.504146][ T115] ? __pfx_default_wake_function+0x10/0x10 [ 70.510053][ T115] ? __kthread_parkme+0x169/0x1d0 [ 70.515082][ T115] ? __pfx_jfs_lazycommit+0x10/0x10 [ 70.520286][ T115] kthread+0x7a9/0x920 [ 70.524369][ T115] ? __pfx_jfs_lazycommit+0x10/0x10 [ 70.529578][ T115] ? __pfx_kthread+0x10/0x10 [ 70.534177][ T115] ? __pfx_kthread+0x10/0x10 [ 70.538780][ T115] ? __pfx_kthread+0x10/0x10 [ 70.543378][ T115] ? __pfx_kthread+0x10/0x10 [ 70.547976][ T115] ? _raw_spin_unlock_irq+0x23/0x50 [ 70.553183][ T115] ? lockdep_hardirqs_on+0x9d/0x150 [ 70.558393][ T115] ? __pfx_kthread+0x10/0x10 [ 70.563000][ T115] ret_from_fork+0x4b/0x80 [ 70.567437][ T115] ? __pfx_kthread+0x10/0x10 [ 70.572033][ T115] ret_from_fork_asm+0x1a/0x30 [ 70.576814][ T115] [ 70.580161][ T115] Kernel Offset: disabled [ 70.584498][ T115] Rebooting in 86400 seconds..