Warning: Permanently added '[localhost]:27636' (ED25519) to the list of known hosts. executing program [ 74.277281][ T5088] loop0: detected capacity change from 0 to 32768 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 79.376289][ T103] BUG: spinlock bad magic on CPU#0, jfsCommit/103 [ 79.378644][ T103] ================================================================== [ 79.381502][ T103] BUG: KASAN: slab-out-of-bounds in string+0x218/0x2b0 [ 79.384037][ T103] Read of size 1 at addr ffff888012dac9f0 by task jfsCommit/103 [ 79.386769][ T103] [ 79.387886][ T103] CPU: 0 UID: 0 PID: 103 Comm: jfsCommit Not tainted 6.11.0-syzkaller-05442-g932d2d1fcb2b #0 [ 79.392254][ T103] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 79.396420][ T103] Call Trace: [ 79.397718][ T103] [ 79.398895][ T103] dump_stack_lvl+0x241/0x360 [ 79.400806][ T103] ? __pfx_dump_stack_lvl+0x10/0x10 [ 79.402804][ T103] ? __pfx__printk+0x10/0x10 [ 79.404637][ T103] ? _printk+0xd5/0x120 [ 79.406223][ T103] ? __virt_addr_valid+0x183/0x530 [ 79.408176][ T103] ? __virt_addr_valid+0x183/0x530 [ 79.410076][ T103] print_report+0x169/0x550 [ 79.411829][ T103] ? __virt_addr_valid+0x183/0x530 [ 79.413814][ T103] ? __virt_addr_valid+0x183/0x530 [ 79.415788][ T103] ? __virt_addr_valid+0x45f/0x530 [ 79.417793][ T103] ? __phys_addr+0xba/0x170 [ 79.419622][ T103] ? string+0x218/0x2b0 [ 79.421295][ T103] kasan_report+0x143/0x180 [ 79.423096][ T103] ? string+0x218/0x2b0 [ 79.424712][ T103] string+0x218/0x2b0 [ 79.426236][ T103] vsnprintf+0x1101/0x1da0 [ 79.428007][ T103] ? __pfx_vsnprintf+0x10/0x10 [ 79.429909][ T103] vprintk_store+0x480/0x1160 [ 79.431759][ T103] ? __pfx_vprintk_store+0x10/0x10 [ 79.433726][ T103] ? prb_read_valid+0xa9/0xf0 [ 79.435569][ T103] ? __pfx___console_unlock+0x10/0x10 [ 79.437718][ T103] ? console_unlock+0x2fc/0x3b0 [ 79.439713][ T103] ? this_cpu_in_panic+0x4f/0x80 [ 79.441637][ T103] ? is_printk_legacy_deferred+0x43/0x50 [ 79.443870][ T103] ? printk_get_console_flush_type+0x1fe/0x4f0 [ 79.446277][ T103] vprintk_emit+0x271/0xa10 [ 79.448042][ T103] ? __pfx_vprintk_emit+0x10/0x10 [ 79.449924][ T103] ? __pfx_register_lock_class+0x10/0x10 [ 79.452133][ T103] _printk+0xd5/0x120 [ 79.453713][ T103] ? __pfx__printk+0x10/0x10 [ 79.455486][ T103] spin_bug+0x13b/0x1d0 [ 79.457136][ T103] do_raw_spin_lock+0x209/0x370 [ 79.459052][ T103] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 79.461160][ T103] _raw_spin_lock_irqsave+0xe1/0x120 [ 79.463293][ T103] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 79.465624][ T103] __wake_up_common_lock+0x25/0x1e0 [ 79.467709][ T103] release_metapage+0xb2/0x960 [ 79.469641][ T103] ? txFreeMap+0xa9c/0xd50 [ 79.471390][ T103] ? _raw_spin_unlock+0x28/0x50 [ 79.473289][ T103] ? __mark_inode_dirty+0x5b2/0xe90 [ 79.475210][ T103] xtTruncate+0x1006/0x3270 [ 79.476910][ T103] ? __pfx_xtTruncate+0x10/0x10 [ 79.478719][ T103] jfs_free_zero_link+0x46e/0x6e0 [ 79.480688][ T103] ? inode_wait_for_writeback+0x111/0x2a0 [ 79.482908][ T103] ? __pfx_jfs_free_zero_link+0x10/0x10 [ 79.484995][ T103] jfs_evict_inode+0x35f/0x440 [ 79.486749][ T103] ? __pfx_jfs_evict_inode+0x10/0x10 [ 79.488741][ T103] evict+0x4e8/0x9b0 [ 79.490280][ T103] ? __pfx_evict+0x10/0x10 [ 79.491993][ T103] ? iput+0x713/0xa50 [ 79.493520][ T103] txUpdateMap+0x931/0xb10 [ 79.495200][ T103] ? __pfx_txUpdateMap+0x10/0x10 [ 79.497165][ T103] jfs_lazycommit+0x49a/0xb80 [ 79.498988][ T103] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 79.501314][ T103] ? lockdep_hardirqs_on+0x99/0x150 [ 79.503282][ T103] ? __pfx_jfs_lazycommit+0x10/0x10 [ 79.505297][ T103] ? __pfx_default_wake_function+0x10/0x10 [ 79.507650][ T103] ? __kthread_parkme+0x169/0x1d0 [ 79.509672][ T103] ? __pfx_jfs_lazycommit+0x10/0x10 [ 79.511697][ T103] kthread+0x2f0/0x390 [ 79.513300][ T103] ? __pfx_jfs_lazycommit+0x10/0x10 [ 79.515364][ T103] ? __pfx_kthread+0x10/0x10 [ 79.517167][ T103] ret_from_fork+0x4b/0x80 [ 79.518991][ T103] ? __pfx_kthread+0x10/0x10 [ 79.520874][ T103] ret_from_fork_asm+0x1a/0x30 [ 79.522788][ T103] [ 79.524067][ T103] [ 79.525004][ T103] The buggy address belongs to the object at ffff888012dac9c0 [ 79.525004][ T103] which belongs to the cache jfs_ip of size 2232 [ 79.530155][ T103] The buggy address is located 48 bytes inside of [ 79.530155][ T103] allocated 2232-byte region [ffff888012dac9c0, ffff888012dad278) [ 79.535462][ T103] [ 79.536440][ T103] The buggy address belongs to the physical page: [ 79.538964][ T103] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12da8 [ 79.542427][ T103] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 79.545688][ T103] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 79.548517][ T103] page_type: 0xfdffffff(slab) [ 79.550254][ T103] raw: 00fff00000000040 ffff8880330dd000 dead000000000122 0000000000000000 [ 79.553612][ T103] raw: 0000000000000000 00000000800d000d 00000001fdffffff 0000000000000000 [ 79.556892][ T103] head: 00fff00000000040 ffff8880330dd000 dead000000000122 0000000000000000 [ 79.560415][ T103] head: 0000000000000000 00000000800d000d 00000001fdffffff 0000000000000000 [ 79.563771][ T103] head: 00fff00000000003 ffffea00004b6a01 ffffffffffffffff 0000000000000000 [ 79.567030][ T103] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 79.570556][ T103] page dumped because: kasan: bad access detected [ 79.572995][ T103] page_owner tracks the page as allocated [ 79.574992][ T103] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_RECLAIMABLE), pid 5088, tgid 5088 (syz-executor333), ts 74309347302, free_ts 73265918165 [ 79.582806][ T103] post_alloc_hook+0x1f3/0x230 [ 79.584526][ T103] get_page_from_freelist+0x2e4c/0x2f10 [ 79.586449][ T103] __alloc_pages_noprof+0x256/0x6c0 [ 79.588425][ T103] alloc_pages_mpol_noprof+0x3e8/0x680 [ 79.590573][ T103] alloc_slab_page+0x6a/0x130 [ 79.592389][ T103] allocate_slab+0x5a/0x2f0 [ 79.594004][ T103] ___slab_alloc+0xcd1/0x14b0 [ 79.595702][ T103] __slab_alloc+0x58/0xa0 [ 79.597275][ T103] kmem_cache_alloc_lru_noprof+0x1c5/0x2b0 [ 79.599363][ T103] jfs_alloc_inode+0x28/0x70 [ 79.601055][ T103] new_inode+0x6e/0x310 [ 79.602545][ T103] jfs_fill_super+0x408/0xc50 [ 79.604383][ T103] mount_bdev+0x20a/0x2d0 [ 79.606011][ T103] legacy_get_tree+0xee/0x190 [ 79.607825][ T103] vfs_get_tree+0x90/0x2b0 [ 79.609496][ T103] do_new_mount+0x2be/0xb40 [ 79.611203][ T103] page last free pid 5082 tgid 5082 stack trace: [ 79.613697][ T103] free_unref_page+0xd22/0xea0 [ 79.615577][ T103] __slab_free+0x31b/0x3d0 [ 79.617307][ T103] qlist_free_all+0x9e/0x140 [ 79.619053][ T103] kasan_quarantine_reduce+0x14f/0x170 [ 79.621142][ T103] __kasan_slab_alloc+0x23/0x80 [ 79.623012][ T103] kmem_cache_alloc_noprof+0x135/0x2a0 [ 79.625083][ T103] ptlock_alloc+0x20/0x70 [ 79.626761][ T103] pte_alloc_one+0xcd/0x5d0 [ 79.628533][ T103] __pte_alloc+0x79/0x3a0 [ 79.630210][ T103] handle_pte_fault+0x55cd/0x6fc0 [ 79.632171][ T103] handle_mm_fault+0x1106/0x1bb0 [ 79.634118][ T103] exc_page_fault+0x459/0x8c0 [ 79.635991][ T103] asm_exc_page_fault+0x26/0x30 [ 79.637891][ T103] [ 79.638851][ T103] Memory state around the buggy address: [ 79.641078][ T103] ffff888012dac880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 79.644107][ T103] ffff888012dac900: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 79.647146][ T103] >ffff888012dac980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 79.650166][ T103] ^ [ 79.653138][ T103] ffff888012daca00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 79.656220][ T103] ffff888012daca80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 79.659279][ T103] ================================================================== [ 79.662435][ T103] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 79.665251][ T103] CPU: 0 UID: 0 PID: 103 Comm: jfsCommit Not tainted 6.11.0-syzkaller-05442-g932d2d1fcb2b #0 [ 79.669217][ T103] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 79.673359][ T103] Call Trace: [ 79.674649][ T103] [ 79.675799][ T103] dump_stack_lvl+0x241/0x360 [ 79.677631][ T103] ? __pfx_dump_stack_lvl+0x10/0x10 [ 79.679652][ T103] ? __pfx__printk+0x10/0x10 [ 79.681507][ T103] ? rcu_is_watching+0x15/0xb0 [ 79.683363][ T103] ? lock_release+0xbf/0xa30 [ 79.685142][ T103] ? vscnprintf+0x5d/0x90 [ 79.686842][ T103] panic+0x349/0x870 [ 79.688372][ T103] ? check_panic_on_warn+0x21/0xb0 [ 79.690327][ T103] ? __pfx_panic+0x10/0x10 [ 79.692040][ T103] ? do_raw_spin_unlock+0x58/0x8b0 [ 79.694058][ T103] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 79.696445][ T103] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 79.698986][ T103] ? print_report+0x502/0x550 [ 79.700815][ T103] check_panic_on_warn+0x86/0xb0 [ 79.702744][ T103] ? string+0x218/0x2b0 [ 79.704322][ T103] end_report+0x77/0x160 [ 79.705951][ T103] kasan_report+0x154/0x180 [ 79.707709][ T103] ? string+0x218/0x2b0 [ 79.709309][ T103] string+0x218/0x2b0 [ 79.710891][ T103] vsnprintf+0x1101/0x1da0 [ 79.712685][ T103] ? __pfx_vsnprintf+0x10/0x10 [ 79.714569][ T103] vprintk_store+0x480/0x1160 [ 79.716437][ T103] ? __pfx_vprintk_store+0x10/0x10 [ 79.718460][ T103] ? prb_read_valid+0xa9/0xf0 [ 79.720409][ T103] ? __pfx___console_unlock+0x10/0x10 [ 79.722535][ T103] ? console_unlock+0x2fc/0x3b0 [ 79.724448][ T103] ? this_cpu_in_panic+0x4f/0x80 [ 79.726374][ T103] ? is_printk_legacy_deferred+0x43/0x50 [ 79.728541][ T103] ? printk_get_console_flush_type+0x1fe/0x4f0 [ 79.730933][ T103] vprintk_emit+0x271/0xa10 [ 79.732728][ T103] ? __pfx_vprintk_emit+0x10/0x10 [ 79.734772][ T103] ? __pfx_register_lock_class+0x10/0x10 [ 79.736994][ T103] _printk+0xd5/0x120 [ 79.738637][ T103] ? __pfx__printk+0x10/0x10 [ 79.740509][ T103] spin_bug+0x13b/0x1d0 [ 79.742130][ T103] do_raw_spin_lock+0x209/0x370 [ 79.744024][ T103] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 79.746102][ T103] _raw_spin_lock_irqsave+0xe1/0x120 [ 79.748208][ T103] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 79.750560][ T103] __wake_up_common_lock+0x25/0x1e0 [ 79.752630][ T103] release_metapage+0xb2/0x960 [ 79.754531][ T103] ? txFreeMap+0xa9c/0xd50 [ 79.756300][ T103] ? _raw_spin_unlock+0x28/0x50 [ 79.758220][ T103] ? __mark_inode_dirty+0x5b2/0xe90 [ 79.760356][ T103] xtTruncate+0x1006/0x3270 [ 79.762145][ T103] ? __pfx_xtTruncate+0x10/0x10 [ 79.764071][ T103] jfs_free_zero_link+0x46e/0x6e0 [ 79.766012][ T103] ? inode_wait_for_writeback+0x111/0x2a0 [ 79.768263][ T103] ? __pfx_jfs_free_zero_link+0x10/0x10 [ 79.770401][ T103] jfs_evict_inode+0x35f/0x440 [ 79.772298][ T103] ? __pfx_jfs_evict_inode+0x10/0x10 [ 79.774327][ T103] evict+0x4e8/0x9b0 [ 79.775815][ T103] ? __pfx_evict+0x10/0x10 [ 79.777560][ T103] ? iput+0x713/0xa50 [ 79.779145][ T103] txUpdateMap+0x931/0xb10 [ 79.780926][ T103] ? __pfx_txUpdateMap+0x10/0x10 [ 79.782886][ T103] jfs_lazycommit+0x49a/0xb80 [ 79.784775][ T103] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 79.787041][ T103] ? lockdep_hardirqs_on+0x99/0x150 [ 79.789121][ T103] ? __pfx_jfs_lazycommit+0x10/0x10 [ 79.791221][ T103] ? __pfx_default_wake_function+0x10/0x10 [ 79.793521][ T103] ? __kthread_parkme+0x169/0x1d0 [ 79.795426][ T103] ? __pfx_jfs_lazycommit+0x10/0x10 [ 79.797446][ T103] kthread+0x2f0/0x390 [ 79.799130][ T103] ? __pfx_jfs_lazycommit+0x10/0x10 [ 79.801211][ T103] ? __pfx_kthread+0x10/0x10 [ 79.803033][ T103] ret_from_fork+0x4b/0x80 [ 79.804799][ T103] ? __pfx_kthread+0x10/0x10 [ 79.806559][ T103] ret_from_fork_asm+0x1a/0x30 [ 79.808501][ T103] [ 79.810003][ T103] Kernel Offset: disabled [ 79.811660][ T103] Rebooting in 86400 seconds.. VM DIAGNOSIS: 12:31:08 Registers: info registers vcpu 0 CPU#0 RAX=1ffffffff34dc305 RBX=ffffffff9a6e1f00 RCX=0000000000000000 RDX=00000000000003f9 RSI=0000000000000000 RDI=0000000000000020 RBP=0000000000000000 RSP=ffffc900016de538 R8 =ffffffff85441fd6 R9 =fffff520002dbc88 R10=dffffc0000000000 R11=ffffffff85441f90 R12=dffffc0000000000 R13=1ffff920002dbcc4 R14=00000000000003f9 R15=dffffc0000000000 RIP=ffffffff85442006 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88801fe00000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f56f51ff000 CR3=000000003de7e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000440401 Opmask01=0000000000000001 Opmask02=00000000fff7ffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffba01b5a0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f56fc7d3560 00007f56fc7c75d8 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f56fc7b9084 00007f56fc7cc240 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65723d73726f7272 6500747865003036 36396f7369007265 6c6c616b7a797300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40571856574a5757 4000515d40001513 131c4a564c005740 4949444e5f5c5600 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000