./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor260585450 <...> DUID 00:04:02:40:b4:1b:63:80:2c:d1:41:b7:a3:cb:95:3e:6a:64 forked to background, child pid 4667 [ 20.177280][ T4668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 20.191560][ T4668] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.38' (ECDSA) to the list of known hosts. execve("./syz-executor260585450", ["./syz-executor260585450"], 0x7ffe995f87b0 /* 10 vars */) = 0 brk(NULL) = 0x55555618c000 brk(0x55555618cc40) = 0x55555618cc40 arch_prctl(ARCH_SET_FS, 0x55555618c300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor260585450", 4096) = 27 brk(0x5555561adc40) = 0x5555561adc40 brk(0x5555561ae000) = 0x5555561ae000 mprotect(0x7f1be3aba000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1bdb5fb000 syzkaller login: [ 40.195906][ T4998] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=4998 'syz-executor260' write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 munmap(0x7f1bdb5fb000, 16777216) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./file0", 0777) = 0 mount("/dev/loop0", "./file0", "jfs", 0, "") = 0 openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 chdir("./file0") = 0 ioctl(4, LOOP_CLR_FD) = 0 close(4) = 0 [ 40.290820][ T4998] loop0: detected capacity change from 0 to 32768 [ 40.315771][ T4998] ea_get: invalid extended attribute [ 40.321344][ T4998] ffff8880755d8330: 30 00 00 00 00 0b 06 00 75 73 65 72 2e 78 61 74 0.......user.xat [ 40.331353][ T4998] ffff8880755d8340: 74 72 31 00 78 61 74 74 72 31 00 0b 06 00 75 73 tr1.xattr1....us [ 40.341206][ T4998] ffff8880755d8350: 65 72 2e 78 61 74 74 72 32 00 78 61 74 74 72 32 er.xattr2.xattr2 [ 40.350868][ T4998] ffff8880755d8360: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.360682][ T4998] ffff8880755d8370: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.370294][ T4998] ffff8880755d8380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.379859][ T4998] ffff8880755d8390: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.389463][ T4998] ffff8880755d83a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.399079][ T4998] ffff8880755d83b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.408781][ T4998] ffff8880755d83c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.418389][ T4998] ffff8880755d83d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.428010][ T4998] ffff8880755d83e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.438300][ T4998] ffff8880755d83f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.448000][ T4998] ffff8880755d8400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.457571][ T4998] ffff8880755d8410: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.467184][ T4998] ffff8880755d8420: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.476800][ T4998] ffff8880755d8430: ed 81 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.486510][ T4998] ffff8880755d8440: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 40.496450][ T4998] ffff8880755d8450: 80 51 89 8a ff ff ff ff 00 60 be 7d 80 88 ff ff .Q.......`.}.... [ 40.506093][ T4998] ffff8880755d8460: 58 86 5d 75 80 88 ff ff 90 16 32 7a 80 88 ff ff X.]u......2z.... [ 40.515772][ T4998] ffff8880755d8470: 04 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 ................ [ 40.525376][ T4998] ffff8880755d8480: 0a 00 00 00 00 00 00 00 f2 f1 7c 63 00 00 00 00 ..........|c.... [ 40.535178][ T4998] ffff8880755d8490: a6 74 ec 19 00 00 00 00 f2 f1 7c 63 00 00 00 00 .t........|c.... [ 40.544853][ T4998] ffff8880755d84a0: a6 74 ec 19 00 00 00 00 f2 f1 7c 63 00 00 00 00 .t........|c.... [ 40.554591][ T4998] ffff8880755d84b0: a6 74 ec 19 00 00 00 00 00 00 00 00 ad 4e ad de .t...........N.. [ 40.564172][ T4998] ffff8880755d84c0: ff ff ff ff 00 00 00 00 ff ff ff ff ff ff ff ff ................ [ 40.573823][ T4998] ffff8880755d84d0: a8 60 cf 8c ff ff ff ff e0 9d 58 91 ff ff ff ff .`........X..... [ 40.583390][ T4998] ffff8880755d84e0: 00 00 00 00 00 00 00 00 80 14 5c 8a ff ff ff ff ..........\..... [ 40.593104][ T4998] ffff8880755d84f0: 00 02 00 00 00 00 00 00 00 00 0c 00 00 00 00 00 ................ [ 40.602688][ T4998] ffff8880755d8500: 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.612290][ T4998] ffff8880755d8510: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.621857][ T4998] ffff8880755d8520: 00 00 00 00 00 00 00 00 00 00 00 00 ad 4e ad de .............N.. [ 40.631448][ T4998] ffff8880755d8530: ff ff ff ff 00 00 00 00 ff ff ff ff ff ff ff ff ................ [ 40.641001][ T4998] ffff8880755d8540: a0 57 17 90 ff ff ff ff 00 00 00 00 00 00 00 00 .W.............. [ 40.650647][ T4998] ffff8880755d8550: 00 00 00 00 00 00 00 00 80 5f 4c 8a ff ff ff ff ........._L..... [ 40.660220][ T4998] ffff8880755d8560: 00 02 00 00 00 00 00 00 68 85 5d 75 80 88 ff ff ........h.]u.... [ 40.669781][ T4998] ffff8880755d8570: 68 85 5d 75 80 88 ff ff 10 85 5d 75 80 88 ff ff h.]u......]u.... [ 40.679339][ T4998] ffff8880755d8580: b8 60 cf 8c ff ff ff ff 00 00 00 00 00 00 00 00 .`.............. [ 40.688913][ T4998] ffff8880755d8590: 00 00 00 00 00 00 00 00 00 15 5c 8a ff ff ff ff ..........\..... [ 40.698474][ T4998] ffff8880755d85a0: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.708133][ T4998] ffff8880755d85b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.717799][ T4998] ffff8880755d85c0: 30 dc c4 00 00 c9 ff ff c8 85 5d 75 80 88 ff ff 0.........]u.... [ 40.727659][ T4998] ffff8880755d85d0: c8 85 5d 75 80 88 ff ff 00 00 00 00 00 00 00 00 ..]u............ [ 40.737237][ T4998] ffff8880755d85e0: 00 00 00 00 00 00 00 00 e8 85 5d 75 80 88 ff ff ..........]u.... [ 40.746846][ T4998] ffff8880755d85f0: e8 85 5d 75 80 88 ff ff 38 34 6f 75 80 88 ff ff ..]u....84ou.... [ 40.756440][ T4998] ffff8880755d8600: 00 6a be 7d 80 88 ff ff 08 86 5d 75 80 88 ff ff .j.}......]u.... [ 40.766065][ T4998] ffff8880755d8610: 08 86 5d 75 80 88 ff ff 88 fe e5 77 80 88 ff ff ..]u.......w.... [ 40.775655][ T4998] ffff8880755d8620: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.785225][ T4998] ffff8880755d8630: 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 ................ [ 40.795095][ T4998] ffff8880755d8640: 00 00 00 00 00 00 00 00 40 50 89 8a ff ff ff ff ........@P...... [ 40.804648][ T4998] ffff8880755d8650: 00 00 00 00 00 00 00 00 30 84 5d 75 80 88 ff ff ........0.]u.... [ 40.814222][ T4998] ffff8880755d8660: 00 00 00 00 ad 4e ad de ff ff ff ff 00 00 00 00 .....N.......... [ 40.823771][ T4998] ffff8880755d8670: ff ff ff ff ff ff ff ff c0 41 e8 91 ff ff ff ff .........A...... [ 40.833346][ T4998] ffff8880755d8680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.842897][ T4998] ffff8880755d8690: 40 13 5c 8a ff ff ff ff 00 02 00 00 00 00 00 00 @.\............. [ 40.852473][ T4998] ffff8880755d86a0: 21 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 !............... [ 40.862027][ T4998] ffff8880755d86b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.871704][ T4998] ffff8880755d86c0: 00 00 00 00 00 00 00 00 00 00 00 00 ad 4e ad de .............N.. [ 40.881352][ T4998] ffff8880755d86d0: ff ff ff ff 00 00 00 00 ff ff ff ff ff ff ff ff ................ [ 40.890976][ T4998] ffff8880755d86e0: a0 57 17 90 ff ff ff ff 00 00 00 00 00 00 00 00 .W.............. [ 40.900554][ T4998] ffff8880755d86f0: 00 00 00 00 00 00 00 00 80 5f 4c 8a ff ff ff ff ........._L..... [ 40.910130][ T4998] ffff8880755d8700: 00 02 00 00 00 00 00 00 08 87 5d 75 80 88 ff ff ..........]u.... [ 40.919678][ T4998] ffff8880755d8710: 08 87 5d 75 80 88 ff ff b0 86 5d 75 80 88 ff ff ..]u......]u.... [ 40.929248][ T4998] ffff8880755d8720: c8 60 cf 8c ff ff ff ff 00 00 00 00 00 00 00 00 .`.............. [ 40.938833][ T4998] ffff8880755d8730: 00 00 00 00 00 00 00 00 80 15 5c 8a ff ff ff ff ..........\..... [ 40.948411][ T4998] ffff8880755d8740: 00 03 00 00 00 00 00 00 ca 0c 10 00 00 00 00 00 ................ [ 40.958002][ T4998] ffff8880755d8750: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.967593][ T4998] ffff8880755d8760: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.977176][ T4998] ffff8880755d8770: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.986758][ T4998] ffff8880755d8780: 00 00 00 00 ad 4e ad de ff ff ff ff 00 00 00 00 .....N.......... [ 40.996325][ T4998] ffff8880755d8790: ff ff ff ff ff ff ff ff a0 57 17 90 ff ff ff ff .........W...... [ 41.005951][ T4998] ffff8880755d87a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 41.015542][ T4998] ffff8880755d87b0: 80 5f 4c 8a ff ff ff ff 00 02 00 00 00 00 00 00 ._L............. [ 41.025121][ T4998] ffff8880755d87c0: c0 87 5d 75 80 88 ff ff c0 87 5d 75 80 88 ff ff ..]u......]u.... [ 41.034728][ T4998] ffff8880755d87d0: 68 87 5d 75 80 88 ff ff 40 42 e8 91 ff ff ff ff h.]u....@B...... [ 41.044356][ T4998] ffff8880755d87e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 41.053943][ T4998] ffff8880755d87f0: 80 13 5c 8a ff ff ff ff 00 03 00 00 00 00 00 00 ..\............. [ 41.063600][ T4998] ffff8880755d8800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 41.073163][ T4998] ffff8880755d8810: 80 55 89 8a ff ff ff ff 00 00 00 00 00 00 00 00 .U.............. [ 41.082719][ T4998] ffff8880755d8820: 00 00 00 00 00 00 00 00 00 00 00 00 ad 4e ad de .............N.. [ 41.092289][ T4998] ffff8880755d8830: ff ff ff ff 00 00 00 00 ff ff ff ff ff ff ff ff ................ [ 41.101952][ T4998] ffff8880755d8840: 00 42 e8 91 ff ff ff ff 00 00 00 00 00 00 00 00 .B.............. [ 41.111520][ T4998] ffff8880755d8850: 00 00 00 00 00 00 00 00 c0 13 5c 8a ff ff ff ff ..........\..... [ 41.121071][ T4998] ffff8880755d8860: 00 02 00 00 00 00 00 00 68 88 5d 75 80 88 ff ff ........h.]u.... [ 41.130813][ T4998] ffff8880755d8870: 68 88 5d 75 80 88 ff ff 00 00 00 00 00 00 00 00 h.]u............ [ 41.140388][ T4998] ffff8880755d8880: 80 88 5d 75 80 88 ff ff 80 88 5d 75 80 88 ff ff ..]u......]u.... [ 41.150114][ T4998] ffff8880755d8890: 00 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 ................ [ 41.159727][ T4998] ffff8880755d88a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 41.169345][ T4998] ffff8880755d88b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 41.178929][ T4998] ================================================================== [ 41.186975][ T4998] BUG: KASAN: slab-out-of-bounds in hex_dump_to_buffer+0xdc5/0xdf0 [ 41.194859][ T4998] Read of size 1 at addr ffff8880755d88c0 by task syz-executor260/4998 [ 41.203116][ T4998] [ 41.205439][ T4998] CPU: 1 PID: 4998 Comm: syz-executor260 Not tainted 6.4.0-syzkaller-01406-ge8f75c0270d9 #0 [ 41.215483][ T4998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 41.225514][ T4998] Call Trace: [ 41.228768][ T4998] [ 41.231692][ T4998] dump_stack_lvl+0xd9/0x150 [ 41.236274][ T4998] print_address_description.constprop.0+0x2c/0x3c0 [ 41.242842][ T4998] ? hex_dump_to_buffer+0xdc5/0xdf0 [ 41.248014][ T4998] kasan_report+0x11c/0x130 [ 41.252493][ T4998] ? hex_dump_to_buffer+0xdc5/0xdf0 [ 41.257664][ T4998] hex_dump_to_buffer+0xdc5/0xdf0 [ 41.262666][ T4998] print_hex_dump+0x171/0x240 [ 41.267498][ T4998] ? hex_dump_to_buffer+0xdf0/0xdf0 [ 41.272684][ T4998] ? vprintk_emit+0x125/0x600 [ 41.277353][ T4998] ? snapshot_ioctl+0xade/0xdb0 [ 41.282192][ T4998] ? _printk+0xbf/0xf0 [ 41.286249][ T4998] ? syslog_print_all+0x3a0/0x3a0 [ 41.291267][ T4998] ea_get+0x743/0x12e0 [ 41.295323][ T4998] ? down_read+0x13e/0x480 [ 41.299728][ T4998] ? ea_release+0x220/0x220 [ 41.304220][ T4998] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 41.310010][ T4998] ? jfs_xattr_get_os2+0x70/0x70 [ 41.315025][ T4998] jfs_listxattr+0xd3/0x6a0 [ 41.319519][ T4998] ? jfs_xattr_get_os2+0x70/0x70 [ 41.324452][ T4998] ? putname+0x102/0x140 [ 41.328677][ T4998] ? kmem_cache_free+0xe9/0x480 [ 41.333517][ T4998] ? jfs_xattr_get_os2+0x70/0x70 [ 41.338442][ T4998] vfs_listxattr+0xb7/0x130 [ 41.342935][ T4998] listxattr+0xf6/0x180 [ 41.347083][ T4998] path_listxattr+0xae/0x140 [ 41.351660][ T4998] ? listxattr+0x180/0x180 [ 41.356058][ T4998] ? lockdep_hardirqs_on+0x7d/0x100 [ 41.361250][ T4998] ? _raw_spin_unlock_irq+0x2e/0x50 [ 41.366433][ T4998] ? ptrace_notify+0xfe/0x140 [ 41.371123][ T4998] do_syscall_64+0x39/0xb0 [ 41.375526][ T4998] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 41.381407][ T4998] RIP: 0033:0x7f1be3a47a39 [ 41.385821][ T4998] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 41.405510][ T4998] RSP: 002b:00007fff99055328 EFLAGS: 00000246 ORIG_RAX: 00000000000000c2 [ 41.413905][ T4998] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1be3a47a39 [ 41.421887][ T4998] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 41.429844][ T4998] RBP: 00007f1be3a07040 R08: 0000000000005ed8 R09: 0000000000000000 [ 41.437801][ T4998] R10: 00007fff990551f0 R11: 0000000000000246 R12: 00007f1be3a070d0 [ 41.445755][ T4998] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 41.453713][ T4998] [ 41.456713][ T4998] [ 41.459016][ T4998] Allocated by task 4998: [ 41.463319][ T4998] kasan_save_stack+0x22/0x40 [ 41.468268][ T4998] kasan_set_track+0x25/0x30 [ 41.472848][ T4998] __kasan_slab_alloc+0x7f/0x90 [ 41.477686][ T4998] kmem_cache_alloc_lru+0x20a/0x600 [ 41.482869][ T4998] jfs_alloc_inode+0x27/0x60 [ 41.487445][ T4998] alloc_inode+0x61/0x230 [ 41.491757][ T4998] iget_locked+0x1bb/0x700 [ 41.496159][ T4998] jfs_iget+0x1e/0x4d0 [ 41.500213][ T4998] jfs_lookup+0x278/0x340 [ 41.504524][ T4998] __lookup_slow+0x24c/0x460 [ 41.509097][ T4998] walk_component+0x33f/0x5a0 [ 41.513755][ T4998] path_lookupat+0x1ba/0x840 [ 41.518344][ T4998] filename_lookup+0x1d2/0x590 [ 41.523090][ T4998] user_path_at_empty+0x46/0x60 [ 41.527954][ T4998] path_listxattr+0x87/0x140 [ 41.532533][ T4998] do_syscall_64+0x39/0xb0 [ 41.536936][ T4998] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 41.542814][ T4998] [ 41.545118][ T4998] The buggy address belongs to the object at ffff8880755d8000 [ 41.545118][ T4998] which belongs to the cache jfs_ip of size 2240 [ 41.558801][ T4998] The buggy address is located 0 bytes to the right of [ 41.558801][ T4998] allocated 2240-byte region [ffff8880755d8000, ffff8880755d88c0) [ 41.573447][ T4998] [ 41.575749][ T4998] The buggy address belongs to the physical page: [ 41.582141][ T4998] page:ffffea0001d57600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x755d8 [ 41.592279][ T4998] head:ffffea0001d57600 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 41.601191][ T4998] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 41.609149][ T4998] page_type: 0xffffffff() [ 41.613458][ T4998] raw: 00fff00000010200 ffff88814229d780 dead000000000122 0000000000000000 [ 41.622022][ T4998] raw: 0000000000000000 00000000800d000d 00000001ffffffff 0000000000000000 [ 41.630667][ T4998] page dumped because: kasan: bad access detected [ 41.637143][ T4998] page_owner tracks the page as allocated [ 41.642837][ T4998] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_RECLAIMABLE), pid 4998, tgid 4998 (syz-executor260), ts 40315425790, free_ts 9500963618 [ 41.665390][ T4998] post_alloc_hook+0x2db/0x350 [ 41.670234][ T4998] get_page_from_freelist+0xf41/0x2c00 [ 41.675699][ T4998] __alloc_pages+0x1cb/0x4a0 [ 41.680277][ T4998] alloc_pages+0x1aa/0x270 [ 41.684688][ T4998] allocate_slab+0x25f/0x390 [ 41.689287][ T4998] ___slab_alloc+0xa91/0x1400 [ 41.693951][ T4998] __slab_alloc.constprop.0+0x56/0xa0 [ 41.699315][ T4998] kmem_cache_alloc_lru+0x4a8/0x600 [ 41.704592][ T4998] jfs_alloc_inode+0x27/0x60 [ 41.709170][ T4998] alloc_inode+0x61/0x230 [ 41.713483][ T4998] iget_locked+0x1bb/0x700 [ 41.717889][ T4998] jfs_iget+0x1e/0x4d0 [ 41.721940][ T4998] jfs_lookup+0x278/0x340 [ 41.726340][ T4998] __lookup_slow+0x24c/0x460 [ 41.730943][ T4998] walk_component+0x33f/0x5a0 [ 41.735608][ T4998] path_lookupat+0x1ba/0x840 [ 41.740186][ T4998] page last free stack trace: [ 41.744857][ T4998] free_unref_page_prepare+0x62e/0xcb0 [ 41.750309][ T4998] free_unref_page+0x33/0x370 [ 41.754974][ T4998] free_contig_range+0xb5/0x180 [ 41.759812][ T4998] destroy_args+0x6c4/0x920 [ 41.764303][ T4998] debug_vm_pgtable+0x2412/0x4210 [ 41.769348][ T4998] do_one_initcall+0x102/0x540 [ 41.774102][ T4998] kernel_init_freeable+0x64e/0xba0 [ 41.779283][ T4998] kernel_init+0x1e/0x2c0 [ 41.783599][ T4998] ret_from_fork+0x1f/0x30 [ 41.788005][ T4998] [ 41.790310][ T4998] Memory state around the buggy address: [ 41.795945][ T4998] ffff8880755d8780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 41.803988][ T4998] ffff8880755d8800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 41.812039][ T4998] >ffff8880755d8880: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 41.820077][ T4998] ^ [ 41.826205][ T4998] ffff8880755d8900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 41.834247][ T4998] ffff8880755d8980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 41.842285][ T4998] ================================================================== [ 41.850620][ T4998] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 41.857813][ T4998] CPU: 0 PID: 4998 Comm: syz-executor260 Not tainted 6.4.0-syzkaller-01406-ge8f75c0270d9 #0 [ 41.867847][ T4998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 41.877907][ T4998] Call Trace: [ 41.881161][ T4998] [ 41.884069][ T4998] dump_stack_lvl+0xd9/0x150 [ 41.888651][ T4998] panic+0x686/0x730 [ 41.892529][ T4998] ? panic_smp_self_stop+0xa0/0xa0 [ 41.897621][ T4998] ? preempt_schedule_thunk+0x1a/0x20 [ 41.903058][ T4998] ? preempt_schedule_common+0x45/0xb0 [ 41.908507][ T4998] check_panic_on_warn+0xb1/0xc0 [ 41.913438][ T4998] end_report+0xe9/0x120 [ 41.917674][ T4998] ? hex_dump_to_buffer+0xdc5/0xdf0 [ 41.922856][ T4998] kasan_report+0xf9/0x130 [ 41.927257][ T4998] ? hex_dump_to_buffer+0xdc5/0xdf0 [ 41.932459][ T4998] hex_dump_to_buffer+0xdc5/0xdf0 [ 41.937463][ T4998] print_hex_dump+0x171/0x240 [ 41.942115][ T4998] ? hex_dump_to_buffer+0xdf0/0xdf0 [ 41.947288][ T4998] ? vprintk_emit+0x125/0x600 [ 41.951945][ T4998] ? snapshot_ioctl+0xade/0xdb0 [ 41.956863][ T4998] ? _printk+0xbf/0xf0 [ 41.960907][ T4998] ? syslog_print_all+0x3a0/0x3a0 [ 41.965909][ T4998] ea_get+0x743/0x12e0 [ 41.969963][ T4998] ? down_read+0x13e/0x480 [ 41.974351][ T4998] ? ea_release+0x220/0x220 [ 41.978842][ T4998] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 41.984628][ T4998] ? jfs_xattr_get_os2+0x70/0x70 [ 41.989549][ T4998] jfs_listxattr+0xd3/0x6a0 [ 41.994037][ T4998] ? jfs_xattr_get_os2+0x70/0x70 [ 41.998959][ T4998] ? putname+0x102/0x140 [ 42.003196][ T4998] ? kmem_cache_free+0xe9/0x480 [ 42.008026][ T4998] ? jfs_xattr_get_os2+0x70/0x70 [ 42.012938][ T4998] vfs_listxattr+0xb7/0x130 [ 42.017421][ T4998] listxattr+0xf6/0x180 [ 42.021571][ T4998] path_listxattr+0xae/0x140 [ 42.026139][ T4998] ? listxattr+0x180/0x180 [ 42.030536][ T4998] ? lockdep_hardirqs_on+0x7d/0x100 [ 42.035713][ T4998] ? _raw_spin_unlock_irq+0x2e/0x50 [ 42.040888][ T4998] ? ptrace_notify+0xfe/0x140 [ 42.045549][ T4998] do_syscall_64+0x39/0xb0 [ 42.049945][ T4998] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 42.055817][ T4998] RIP: 0033:0x7f1be3a47a39 [ 42.060209][ T4998] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 42.079795][ T4998] RSP: 002b:00007fff99055328 EFLAGS: 00000246 ORIG_RAX: 00000000000000c2 [ 42.088187][ T4998] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1be3a47a39 [ 42.096136][ T4998] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 42.104176][ T4998] RBP: 00007f1be3a07040 R08: 0000000000005ed8 R09: 0000000000000000 [ 42.112127][ T4998] R10: 00007fff990551f0 R11: 0000000000000246 R12: 00007f1be3a070d0 [ 42.120080][ T4998] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 42.128037][ T4998] [ 42.132021][ T4998] Kernel Offset: disabled [ 42.136368][ T4998] Rebooting in 86400 seconds..