Warning: Permanently added '[localhost]:40081' (ED25519) to the list of known hosts.
executing program
[ 63.961618][ T5312] loop0: detected capacity change from 0 to 32768
[ 64.005490][ T5312] ==================================================================
[ 64.008275][ T5312] BUG: KASAN: slab-out-of-bounds in dtSearch+0x1664/0x2520
[ 64.011135][ T5312] Read of size 1 at addr ffff888046974030 by task syz-executor350/5312
[ 64.014990][ T5312]
[ 64.015888][ T5312] CPU: 0 UID: 0 PID: 5312 Comm: syz-executor350 Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0
[ 64.019844][ T5312] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 64.023467][ T5312] Call Trace:
[ 64.024720][ T5312]
[ 64.025806][ T5312] dump_stack_lvl+0x241/0x360
[ 64.027648][ T5312] ? __pfx_dump_stack_lvl+0x10/0x10
[ 64.029591][ T5312] ? __pfx__printk+0x10/0x10
[ 64.031401][ T5312] ? _printk+0xd5/0x120
[ 64.032982][ T5312] ? __virt_addr_valid+0x183/0x530
[ 64.034930][ T5312] ? __virt_addr_valid+0x183/0x530
[ 64.036869][ T5312] print_report+0x169/0x550
[ 64.038575][ T5312] ? __virt_addr_valid+0x183/0x530
[ 64.040489][ T5312] ? __virt_addr_valid+0x183/0x530
[ 64.042455][ T5312] ? __virt_addr_valid+0x45f/0x530
[ 64.044441][ T5312] ? __phys_addr+0xba/0x170
[ 64.046268][ T5312] ? dtSearch+0x1664/0x2520
[ 64.048056][ T5312] kasan_report+0x143/0x180
[ 64.049800][ T5312] ? dtSearch+0x1664/0x2520
[ 64.051516][ T5312] dtSearch+0x1664/0x2520
[ 64.053134][ T5312] ? get_UCSname+0xe3/0x610
[ 64.054864][ T5312] jfs_lookup+0x17f/0x410
[ 64.056534][ T5312] ? __pfx_jfs_lookup+0x10/0x10
[ 64.058376][ T5312] ? __pfx_apparmor_path_mknod+0x10/0x10
[ 64.060430][ T5312] ? make_vfsuid+0x52/0xa0
[ 64.062075][ T5312] ? inode_permission+0xff/0x460
[ 64.063913][ T5312] ? bpf_lsm_path_mknod+0x9/0x10
[ 64.065724][ T5312] ? bpf_lsm_inode_create+0x9/0x10
[ 64.067694][ T5312] ? security_inode_create+0xbe/0x340
[ 64.069739][ T5312] ? __pfx_jfs_lookup+0x10/0x10
[ 64.071575][ T5312] path_openat+0x11a7/0x3590
[ 64.073355][ T5312] ? __pfx_path_openat+0x10/0x10
[ 64.075329][ T5312] do_filp_open+0x235/0x490
[ 64.076987][ T5312] ? __pfx_do_filp_open+0x10/0x10
[ 64.078801][ T5312] ? _raw_spin_unlock+0x28/0x50
[ 64.080626][ T5312] ? alloc_fd+0x5a1/0x640
[ 64.082425][ T5312] do_sys_openat2+0x13e/0x1d0
[ 64.084447][ T5312] ? __might_fault+0xaa/0x120
[ 64.086448][ T5312] ? __pfx_do_sys_openat2+0x10/0x10
[ 64.088479][ T5312] ? rcu_is_watching+0x15/0xb0
[ 64.090307][ T5312] ? __rseq_handle_notify_resume+0x34d/0x14d0
[ 64.092555][ T5312] __x64_sys_openat+0x247/0x2a0
[ 64.094382][ T5312] ? __pfx___x64_sys_openat+0x10/0x10
[ 64.096297][ T5312] ? do_syscall_64+0x100/0x230
[ 64.097980][ T5312] ? do_syscall_64+0xb6/0x230
[ 64.099700][ T5312] do_syscall_64+0xf3/0x230
[ 64.101401][ T5312] ? clear_bhb_loop+0x35/0x90
[ 64.103100][ T5312] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 64.105264][ T5312] RIP: 0033:0x7f145f450a99
[ 64.107003][ T5312] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 64.114104][ T5312] RSP: 002b:00007ffe4637fa48 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 64.117325][ T5312] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f145f450a99
[ 64.120213][ T5312] RDX: 000000000000275a RSI: 0000000020000140 RDI: 00000000ffffff9c
[ 64.123218][ T5312] RBP: 00007f145f4c95f0 R08: 000055558c1894c0 R09: 000055558c1894c0
[ 64.126231][ T5312] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe4637fa70
[ 64.129296][ T5312] R13: 00007ffe4637fc98 R14: 431bde82d7b634db R15: 00007f145f49903b
[ 64.132338][ T5312]
[ 64.133560][ T5312]
[ 64.134517][ T5312] Allocated by task 5312:
[ 64.136201][ T5312] kasan_save_track+0x3f/0x80
[ 64.137953][ T5312] __kasan_slab_alloc+0x66/0x80
[ 64.139769][ T5312] kmem_cache_alloc_lru_noprof+0x139/0x2b0
[ 64.141806][ T5312] jfs_alloc_inode+0x28/0x70
[ 64.143391][ T5312] alloc_inode+0x65/0x1a0
[ 64.144865][ T5312] new_inode+0x22/0x1d0
[ 64.146288][ T5312] ialloc+0x4c/0x900
[ 64.147667][ T5312] jfs_create+0x1be/0xbb0
[ 64.149115][ T5312] path_openat+0x1c03/0x3590
[ 64.150708][ T5312] do_filp_open+0x235/0x490
[ 64.152245][ T5312] do_sys_openat2+0x13e/0x1d0
[ 64.154057][ T5312] __x64_sys_openat+0x247/0x2a0
[ 64.155780][ T5312] do_syscall_64+0xf3/0x230
[ 64.157740][ T5312] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 64.160282][ T5312]
[ 64.161183][ T5312] The buggy address belongs to the object at ffff888046973750
[ 64.161183][ T5312] which belongs to the cache jfs_ip of size 2232
[ 64.166155][ T5312] The buggy address is located 40 bytes to the right of
[ 64.166155][ T5312] allocated 2232-byte region [ffff888046973750, ffff888046974008)
[ 64.171974][ T5312]
[ 64.172865][ T5312] The buggy address belongs to the physical page:
[ 64.175175][ T5312] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x46970
[ 64.178263][ T5312] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 64.181224][ T5312] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff)
[ 64.183969][ T5312] page_type: f5(slab)
[ 64.185398][ T5312] raw: 04fff00000000040 ffff88801f1c5140 dead000000000122 0000000000000000
[ 64.188474][ T5312] raw: 0000000000000000 00000000800d000d 00000001f5000000 0000000000000000
[ 64.191522][ T5312] head: 04fff00000000040 ffff88801f1c5140 dead000000000122 0000000000000000
[ 64.194615][ T5312] head: 0000000000000000 00000000800d000d 00000001f5000000 0000000000000000
[ 64.197721][ T5312] head: 04fff00000000003 ffffea00011a5c01 ffffffffffffffff 0000000000000000
[ 64.200920][ T5312] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[ 64.204162][ T5312] page dumped because: kasan: bad access detected
[ 64.206530][ T5312] page_owner tracks the page as allocated
[ 64.208659][ T5312] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_RECLAIMABLE), pid 5312, tgid 5312 (syz-executor350), ts 63976687660, free_ts 0
[ 64.216403][ T5312] post_alloc_hook+0x1f3/0x230
[ 64.218193][ T5312] get_page_from_freelist+0x303f/0x3190
[ 64.220279][ T5312] __alloc_pages_noprof+0x292/0x710
[ 64.222247][ T5312] alloc_pages_mpol_noprof+0x3e8/0x680
[ 64.224273][ T5312] alloc_slab_page+0x6a/0x120
[ 64.226045][ T5312] allocate_slab+0x5a/0x2f0
[ 64.227758][ T5312] ___slab_alloc+0xcd1/0x14b0
[ 64.229522][ T5312] __slab_alloc+0x58/0xa0
[ 64.231207][ T5312] kmem_cache_alloc_lru_noprof+0x1c5/0x2b0
[ 64.233420][ T5312] jfs_alloc_inode+0x28/0x70
[ 64.235168][ T5312] alloc_inode+0x65/0x1a0
[ 64.236748][ T5312] new_inode+0x22/0x1d0
[ 64.238257][ T5312] jfs_fill_super+0x408/0xc50
[ 64.239973][ T5312] mount_bdev+0x20a/0x2d0
[ 64.241580][ T5312] legacy_get_tree+0xee/0x190
[ 64.243342][ T5312] vfs_get_tree+0x90/0x2b0
[ 64.244960][ T5312] page_owner free stack trace missing
[ 64.247080][ T5312]
[ 64.247967][ T5312] Memory state around the buggy address:
[ 64.249987][ T5312] ffff888046973f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 64.252814][ T5312] ffff888046973f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 64.255764][ T5312] >ffff888046974000: 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 64.258768][ T5312] ^
[ 64.260870][ T5312] ffff888046974080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 64.263772][ T5312] ffff888046974100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 64.266636][ T5312] ==================================================================
[ 64.277787][ T5312] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 64.280540][ T5312] CPU: 0 UID: 0 PID: 5312 Comm: syz-executor350 Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0
[ 64.284620][ T5312] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 64.288786][ T5312] Call Trace:
[ 64.290213][ T5312]
[ 64.291626][ T5312] dump_stack_lvl+0x241/0x360
[ 64.293771][ T5312] ? __pfx_dump_stack_lvl+0x10/0x10
[ 64.295994][ T5312] ? __pfx__printk+0x10/0x10
[ 64.297771][ T5312] ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 64.300098][ T5312] ? vscnprintf+0x5d/0x90
[ 64.301781][ T5312] panic+0x349/0x880
[ 64.303272][ T5312] ? check_panic_on_warn+0x21/0xb0
[ 64.305123][ T5312] ? __pfx_panic+0x10/0x10
[ 64.306756][ T5312] ? _raw_spin_unlock_irqrestore+0x130/0x140
[ 64.308971][ T5312] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 64.311340][ T5312] check_panic_on_warn+0x86/0xb0
[ 64.313096][ T5312] ? dtSearch+0x1664/0x2520
[ 64.314745][ T5312] end_report+0x77/0x160
[ 64.316278][ T5312] kasan_report+0x154/0x180
[ 64.317960][ T5312] ? dtSearch+0x1664/0x2520
[ 64.319640][ T5312] dtSearch+0x1664/0x2520
[ 64.321252][ T5312] ? get_UCSname+0xe3/0x610
[ 64.322902][ T5312] jfs_lookup+0x17f/0x410
[ 64.324472][ T5312] ? __pfx_jfs_lookup+0x10/0x10
[ 64.326174][ T5312] ? __pfx_apparmor_path_mknod+0x10/0x10
[ 64.328159][ T5312] ? make_vfsuid+0x52/0xa0
[ 64.329713][ T5312] ? inode_permission+0xff/0x460
[ 64.331443][ T5312] ? bpf_lsm_path_mknod+0x9/0x10
[ 64.333223][ T5312] ? bpf_lsm_inode_create+0x9/0x10
[ 64.335143][ T5312] ? security_inode_create+0xbe/0x340
[ 64.337055][ T5312] ? __pfx_jfs_lookup+0x10/0x10
[ 64.338741][ T5312] path_openat+0x11a7/0x3590
[ 64.340429][ T5312] ? __pfx_path_openat+0x10/0x10
[ 64.342195][ T5312] do_filp_open+0x235/0x490
[ 64.343783][ T5312] ? __pfx_do_filp_open+0x10/0x10
[ 64.345553][ T5312] ? _raw_spin_unlock+0x28/0x50
[ 64.347344][ T5312] ? alloc_fd+0x5a1/0x640
[ 64.348931][ T5312] do_sys_openat2+0x13e/0x1d0
[ 64.350671][ T5312] ? __might_fault+0xaa/0x120
[ 64.352404][ T5312] ? __pfx_do_sys_openat2+0x10/0x10
[ 64.354348][ T5312] ? rcu_is_watching+0x15/0xb0
[ 64.356096][ T5312] ? __rseq_handle_notify_resume+0x34d/0x14d0
[ 64.358281][ T5312] __x64_sys_openat+0x247/0x2a0
[ 64.359996][ T5312] ? __pfx___x64_sys_openat+0x10/0x10
[ 64.361939][ T5312] ? do_syscall_64+0x100/0x230
[ 64.363690][ T5312] ? do_syscall_64+0xb6/0x230
[ 64.365396][ T5312] do_syscall_64+0xf3/0x230
[ 64.367033][ T5312] ? clear_bhb_loop+0x35/0x90
[ 64.368695][ T5312] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 64.370863][ T5312] RIP: 0033:0x7f145f450a99
[ 64.372493][ T5312] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 64.379152][ T5312] RSP: 002b:00007ffe4637fa48 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 64.382078][ T5312] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f145f450a99
[ 64.384894][ T5312] RDX: 000000000000275a RSI: 0000000020000140 RDI: 00000000ffffff9c
[ 64.387718][ T5312] RBP: 00007f145f4c95f0 R08: 000055558c1894c0 R09: 000055558c1894c0
[ 64.390526][ T5312] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe4637fa70
[ 64.393383][ T5312] R13: 00007ffe4637fc98 R14: 431bde82d7b634db R15: 00007f145f49903b
[ 64.396270][ T5312]
[ 64.397680][ T5312] Kernel Offset: disabled
[ 64.399331][ T5312] Rebooting in 86400 seconds..
VM DIAGNOSIS:
06:51:02 Registers:
info registers vcpu 0
CPU#0
RAX=0000000000000061 RBX=ffffffff9a718ec0 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=0000000000000000 RSP=ffffc9000ceded90
R8 =ffffffff854ab6eb R9 =1ffff110067a6046 R10=dffffc0000000000 R11=ffffffff854ab6a0
R12=dffffc0000000000 R13=ffffffff9a413f07 R14=0000000000000061 R15=00000000000003f8
RIP=ffffffff854ab71e RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055558c188380 ffffffff 00c00000
GS =0000 ffff88801fc00000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc010b95ed8 CR3=0000000042e32000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000ffffffff Opmask01=0000000000000006 Opmask02=0000000000000007 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 65705f6567617375 2e74636361757063
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe4637f040 00007ffe4637f020
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe4637f180 00007ffe4637f000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f145f4bb424 00007f145f4ce240
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe4637f040
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe4637f180
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe4637f180 00007ffe4637f000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe4637f040 00007ffe4637f020
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000073666a
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000