Warning: Permanently added '[localhost]:5088' (ED25519) to the list of known hosts. executing program [ 94.500456][ T5098] loop0: detected capacity change from 0 to 32768 executing program executing program executing program executing program executing program [ 97.060647][ T8] cfg80211: failed to load regulatory.db executing program executing program executing program executing program executing program executing program [ 99.609193][ T102] BUG: spinlock bad magic on CPU#0, jfsCommit/102 [ 99.611851][ T102] ================================================================== [ 99.616382][ T102] BUG: KASAN: slab-out-of-bounds in string+0x218/0x2b0 [ 99.619404][ T102] Read of size 1 at addr ffff888040f65328 by task jfsCommit/102 [ 99.622327][ T102] [ 99.623285][ T102] CPU: 0 UID: 0 PID: 102 Comm: jfsCommit Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 99.627384][ T102] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 99.632321][ T102] Call Trace: [ 99.633668][ T102] [ 99.634872][ T102] dump_stack_lvl+0x241/0x360 [ 99.636674][ T102] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.638653][ T102] ? __pfx__printk+0x10/0x10 [ 99.640407][ T102] ? _printk+0xd5/0x120 [ 99.642048][ T102] ? __virt_addr_valid+0x183/0x530 [ 99.644154][ T102] ? __virt_addr_valid+0x183/0x530 [ 99.646330][ T102] print_report+0x169/0x550 [ 99.648169][ T102] ? __virt_addr_valid+0x183/0x530 [ 99.650270][ T102] ? __virt_addr_valid+0x183/0x530 [ 99.652242][ T102] ? __virt_addr_valid+0x45f/0x530 [ 99.654124][ T102] ? __phys_addr+0xba/0x170 [ 99.655797][ T102] ? string+0x218/0x2b0 [ 99.657431][ T102] kasan_report+0x143/0x180 [ 99.659568][ T102] ? string+0x218/0x2b0 [ 99.661841][ T102] string+0x218/0x2b0 [ 99.663452][ T102] vsnprintf+0x1101/0x1da0 [ 99.665511][ T102] ? __pfx_vsnprintf+0x10/0x10 [ 99.667387][ T102] vprintk_store+0x480/0x1160 [ 99.669120][ T102] ? __pfx_vprintk_store+0x10/0x10 [ 99.671035][ T102] ? prb_read_valid+0xa9/0xf0 [ 99.673114][ T102] ? __pfx___console_unlock+0x10/0x10 [ 99.676004][ T102] ? console_unlock+0x2fc/0x3b0 [ 99.678420][ T102] ? this_cpu_in_panic+0x4f/0x80 [ 99.680324][ T102] ? is_printk_legacy_deferred+0x43/0x50 [ 99.682367][ T102] ? printk_get_console_flush_type+0x1fe/0x4f0 [ 99.684803][ T102] vprintk_emit+0x271/0xa10 [ 99.686629][ T102] ? __pfx_vprintk_emit+0x10/0x10 [ 99.688726][ T102] ? __pfx_register_lock_class+0x10/0x10 [ 99.691267][ T102] _printk+0xd5/0x120 [ 99.693172][ T102] ? __pfx__printk+0x10/0x10 [ 99.695219][ T102] spin_bug+0x13b/0x1d0 [ 99.696842][ T102] do_raw_spin_lock+0x209/0x370 [ 99.698715][ T102] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 99.700859][ T102] _raw_spin_lock_irqsave+0xe1/0x120 [ 99.703187][ T102] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 99.705967][ T102] __wake_up_common_lock+0x25/0x1e0 [ 99.708378][ T102] release_metapage+0xb2/0x960 [ 99.710500][ T102] ? txFreeMap+0xa9c/0xd50 [ 99.712327][ T102] ? _raw_spin_unlock+0x28/0x50 [ 99.714144][ T102] ? __mark_inode_dirty+0x5b2/0xe90 [ 99.716009][ T102] xtTruncate+0x1006/0x3270 [ 99.717768][ T102] ? __pfx_xtTruncate+0x10/0x10 [ 99.720056][ T102] jfs_free_zero_link+0x46e/0x6e0 [ 99.722577][ T102] ? inode_wait_for_writeback+0x111/0x2a0 [ 99.725235][ T102] ? __pfx_jfs_free_zero_link+0x10/0x10 [ 99.727597][ T102] jfs_evict_inode+0x35f/0x440 [ 99.729612][ T102] ? __pfx_jfs_evict_inode+0x10/0x10 [ 99.731672][ T102] evict+0x4e8/0x9b0 [ 99.733166][ T102] ? __pfx_evict+0x10/0x10 [ 99.734820][ T102] ? iput+0x713/0xa50 [ 99.736424][ T102] txUpdateMap+0x931/0xb10 [ 99.738213][ T102] ? __pfx_txUpdateMap+0x10/0x10 [ 99.740167][ T102] jfs_lazycommit+0x49a/0xb80 [ 99.742498][ T102] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 99.745542][ T102] ? lockdep_hardirqs_on+0x99/0x150 [ 99.747943][ T102] ? __pfx_jfs_lazycommit+0x10/0x10 [ 99.750187][ T102] ? __pfx_default_wake_function+0x10/0x10 [ 99.752509][ T102] ? __kthread_parkme+0x169/0x1d0 [ 99.754518][ T102] ? __pfx_jfs_lazycommit+0x10/0x10 [ 99.756506][ T102] kthread+0x2f0/0x390 [ 99.758181][ T102] ? __pfx_jfs_lazycommit+0x10/0x10 [ 99.760173][ T102] ? __pfx_kthread+0x10/0x10 [ 99.762004][ T102] ret_from_fork+0x4b/0x80 [ 99.763998][ T102] ? __pfx_kthread+0x10/0x10 [ 99.766213][ T102] ret_from_fork_asm+0x1a/0x30 [ 99.768482][ T102] [ 99.769641][ T102] [ 99.770541][ T102] The buggy address belongs to the object at ffff888040f652f8 [ 99.770541][ T102] which belongs to the cache jfs_ip of size 2232 [ 99.775627][ T102] The buggy address is located 48 bytes inside of [ 99.775627][ T102] allocated 2232-byte region [ffff888040f652f8, ffff888040f65bb0) [ 99.782311][ T102] [ 99.783421][ T102] The buggy address belongs to the physical page: [ 99.785838][ T102] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x40f60 [ 99.789104][ T102] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 99.792388][ T102] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 99.795577][ T102] page_type: f5(slab) [ 99.797491][ T102] raw: 04fff00000000040 ffff88801f09f280 dead000000000122 0000000000000000 [ 99.801883][ T102] raw: 0000000000000000 00000000800d000d 00000001f5000000 0000000000000000 [ 99.805353][ T102] head: 04fff00000000040 ffff88801f09f280 dead000000000122 0000000000000000 [ 99.809199][ T102] head: 0000000000000000 00000000800d000d 00000001f5000000 0000000000000000 [ 99.812489][ T102] head: 04fff00000000003 ffffea000103d801 ffffffffffffffff 0000000000000000 [ 99.815883][ T102] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 99.819254][ T102] page dumped because: kasan: bad access detected [ 99.822118][ T102] page_owner tracks the page as allocated [ 99.824879][ T102] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_RECLAIMABLE), pid 5098, tgid 5098 (syz-executor333), ts 94547506003, free_ts 0 [ 99.833245][ T102] post_alloc_hook+0x1f3/0x230 [ 99.835167][ T102] get_page_from_freelist+0x3045/0x3190 [ 99.837603][ T102] __alloc_pages_noprof+0x256/0x6c0 [ 99.840145][ T102] alloc_pages_mpol_noprof+0x3e8/0x680 [ 99.842758][ T102] alloc_slab_page+0x6a/0x120 [ 99.844591][ T102] allocate_slab+0x5a/0x2f0 [ 99.846336][ T102] ___slab_alloc+0xcd1/0x14b0 [ 99.848131][ T102] __slab_alloc+0x58/0xa0 [ 99.849762][ T102] kmem_cache_alloc_lru_noprof+0x1c5/0x2b0 [ 99.851891][ T102] jfs_alloc_inode+0x28/0x70 [ 99.854005][ T102] new_inode+0x6e/0x310 [ 99.855973][ T102] jfs_fill_super+0x408/0xc50 [ 99.858751][ T102] mount_bdev+0x20a/0x2d0 [ 99.860756][ T102] legacy_get_tree+0xee/0x190 [ 99.862476][ T102] vfs_get_tree+0x90/0x2b0 [ 99.864215][ T102] do_new_mount+0x2be/0xb40 [ 99.865989][ T102] page_owner free stack trace missing [ 99.868028][ T102] [ 99.868913][ T102] Memory state around the buggy address: [ 99.871186][ T102] ffff888040f65200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 99.875323][ T102] ffff888040f65280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 99.878918][ T102] >ffff888040f65300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 99.882240][ T102] ^ [ 99.884347][ T102] ffff888040f65380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 99.887358][ T102] ffff888040f65400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 99.890661][ T102] ================================================================== [ 99.894385][ T102] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 99.897294][ T102] CPU: 0 UID: 0 PID: 102 Comm: jfsCommit Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 99.901905][ T102] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 99.906181][ T102] Call Trace: [ 99.908264][ T102] [ 99.910485][ T102] dump_stack_lvl+0x241/0x360 [ 99.913233][ T102] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.915338][ T102] ? __pfx__printk+0x10/0x10 [ 99.917001][ T102] ? rcu_is_watching+0x15/0xb0 [ 99.918764][ T102] ? lock_release+0xbf/0xa30 [ 99.920445][ T102] ? vscnprintf+0x5d/0x90 [ 99.922004][ T102] panic+0x349/0x880 [ 99.923360][ T102] ? check_panic_on_warn+0x21/0xb0 [ 99.925224][ T102] ? __pfx_panic+0x10/0x10 [ 99.926880][ T102] ? do_raw_spin_unlock+0x58/0x8b0 [ 99.928773][ T102] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 99.931054][ T102] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 99.934005][ T102] ? print_report+0x502/0x550 [ 99.936162][ T102] check_panic_on_warn+0x86/0xb0 [ 99.938358][ T102] ? string+0x218/0x2b0 [ 99.939927][ T102] end_report+0x77/0x160 [ 99.941446][ T102] kasan_report+0x154/0x180 [ 99.943169][ T102] ? string+0x218/0x2b0 [ 99.944669][ T102] string+0x218/0x2b0 [ 99.946199][ T102] vsnprintf+0x1101/0x1da0 [ 99.948250][ T102] ? __pfx_vsnprintf+0x10/0x10 [ 99.950970][ T102] vprintk_store+0x480/0x1160 [ 99.953623][ T102] ? __pfx_vprintk_store+0x10/0x10 [ 99.956031][ T102] ? prb_read_valid+0xa9/0xf0 [ 99.957945][ T102] ? __pfx___console_unlock+0x10/0x10 [ 99.960139][ T102] ? console_unlock+0x2fc/0x3b0 [ 99.962095][ T102] ? this_cpu_in_panic+0x4f/0x80 [ 99.964058][ T102] ? is_printk_legacy_deferred+0x43/0x50 [ 99.966270][ T102] ? printk_get_console_flush_type+0x1fe/0x4f0 [ 99.968596][ T102] vprintk_emit+0x271/0xa10 [ 99.970576][ T102] ? __pfx_vprintk_emit+0x10/0x10 [ 99.972850][ T102] ? __pfx_register_lock_class+0x10/0x10 [ 99.975276][ T102] _printk+0xd5/0x120 [ 99.976906][ T102] ? __pfx__printk+0x10/0x10 [ 99.978783][ T102] spin_bug+0x13b/0x1d0 [ 99.980363][ T102] do_raw_spin_lock+0x209/0x370 [ 99.982215][ T102] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 99.984213][ T102] _raw_spin_lock_irqsave+0xe1/0x120 [ 99.986404][ T102] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 99.989368][ T102] __wake_up_common_lock+0x25/0x1e0 [ 99.992272][ T102] release_metapage+0xb2/0x960 [ 99.994261][ T102] ? txFreeMap+0xa9c/0xd50 [ 99.996001][ T102] ? _raw_spin_unlock+0x28/0x50 [ 99.997905][ T102] ? __mark_inode_dirty+0x5b2/0xe90 [ 99.999901][ T102] xtTruncate+0x1006/0x3270 [ 100.001671][ T102] ? __pfx_xtTruncate+0x10/0x10 [ 100.003475][ T102] jfs_free_zero_link+0x46e/0x6e0 [ 100.005382][ T102] ? inode_wait_for_writeback+0x111/0x2a0 [ 100.007703][ T102] ? __pfx_jfs_free_zero_link+0x10/0x10 [ 100.009926][ T102] jfs_evict_inode+0x35f/0x440 [ 100.012060][ T102] ? __pfx_jfs_evict_inode+0x10/0x10 [ 100.014422][ T102] evict+0x4e8/0x9b0 [ 100.016079][ T102] ? __pfx_evict+0x10/0x10 [ 100.017884][ T102] ? iput+0x713/0xa50 [ 100.019521][ T102] txUpdateMap+0x931/0xb10 [ 100.021176][ T102] ? __pfx_txUpdateMap+0x10/0x10 [ 100.022985][ T102] jfs_lazycommit+0x49a/0xb80 [ 100.024702][ T102] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 100.026927][ T102] ? lockdep_hardirqs_on+0x99/0x150 [ 100.028951][ T102] ? __pfx_jfs_lazycommit+0x10/0x10 [ 100.031276][ T102] ? __pfx_default_wake_function+0x10/0x10 [ 100.033690][ T102] ? __kthread_parkme+0x169/0x1d0 [ 100.035652][ T102] ? __pfx_jfs_lazycommit+0x10/0x10 [ 100.037626][ T102] kthread+0x2f0/0x390 [ 100.039043][ T102] ? __pfx_jfs_lazycommit+0x10/0x10 [ 100.040791][ T102] ? __pfx_kthread+0x10/0x10 [ 100.042388][ T102] ret_from_fork+0x4b/0x80 [ 100.043934][ T102] ? __pfx_kthread+0x10/0x10 [ 100.045693][ T102] ret_from_fork_asm+0x1a/0x30 [ 100.047946][ T102] [ 100.049759][ T102] Kernel Offset: disabled [ 100.051846][ T102] Rebooting in 86400 seconds.. VM DIAGNOSIS: 04:45:34 Registers: info registers vcpu 0 CPU#0 RAX=000000000000003d RBX=ffffffff9a711e40 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=0000000000000000 RSP=ffffc900016ce730 R8 =ffffffff85496a1b R9 =1ffff11003d85046 R10=dffffc0000000000 R11=ffffffff854969d0 R12=dffffc0000000000 R13=ffffffff9a40cf1b R14=000000000000003d R15=00000000000003f8 RIP=ffffffff85496a4e RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88801fc00000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffaa03ff000 CR3=0000000012492000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000440401 Opmask01=0000000000000001 Opmask02=00000000fff7ffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff48a2c490 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffaa7a8d560 00007ffaa7a815d8 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffaa7a73084 00007ffaa7a86240 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65723d73726f7272 6500747865003036 36396f7369007265 6c6c616b7a797300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40571856574a5757 4000515d40001513 131c4a564c005740 4949444e5f5c5600 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000