./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2806732731 <...> Warning: Permanently added '10.128.0.108' (ED25519) to the list of known hosts. execve("./syz-executor2806732731", ["./syz-executor2806732731"], 0x7ffeff888b20 /* 10 vars */) = 0 brk(NULL) = 0x555559904000 brk(0x555559904d00) = 0x555559904d00 arch_prctl(ARCH_SET_FS, 0x555559904380) = 0 set_tid_address(0x555559904650) = 5832 set_robust_list(0x555559904660, 24) = 0 rseq(0x555559904ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2806732731", 4096) = 28 getrandom("\x20\xb0\xca\x5e\xca\x60\xf7\x1c", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555559904d00 brk(0x555559925d00) = 0x555559925d00 brk(0x555559926000) = 0x555559926000 mprotect(0x7fd96fed4000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5833 attached , child_tidptr=0x555559904650) = 5833 [pid 5833] set_robust_list(0x555559904660, 24) = 0 [pid 5833] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5833] setpgid(0, 0) = 0 [pid 5833] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5833] write(3, "1000", 4) = 4 [pid 5833] close(3) = 0 [pid 5833] write(1, "executing program\n", 18executing program ) = 18 [pid 5833] memfd_create("syzkaller", 0) = 3 [pid 5833] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd967a00000 [pid 5833] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5833] munmap(0x7fd967a00000, 138412032) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5833] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5833] close(3) = 0 [pid 5833] close(4) = 0 [pid 5833] mkdir("./file7", 0777) = 0 [pid 5833] mount("/dev/loop0", "./file7", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME, "") = 0 [pid 5833] openat(AT_FDCWD, "./file7", O_RDONLY|O_DIRECTORY) = 3 [pid 5833] chdir("./file7") = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5833] openat(AT_FDCWD, "./file0", O_RDONLY) = 4 [pid 5833] unlinkat(4, "./file0", 0) = 0 [pid 5833] exit_group(0) = ? [pid 5833] +++ exited with 0 +++ [ 78.500136][ T5833] loop0: detected capacity change from 0 to 32768 --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5833, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=18 /* 0.18 s */} --- openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5835 attached , child_tidptr=0x555559904650) = 5835 [pid 5835] set_robust_list(0x555559904660, 24) = 0 [pid 5835] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5835] setpgid(0, 0) = 0 [pid 5835] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5835] write(3, "1000", 4) = 4 [pid 5835] close(3) = 0 executing program [pid 5835] write(1, "executing program\n", 18) = 18 [pid 5835] memfd_create("syzkaller", 0) = 3 [pid 5835] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd967a00000 [pid 5835] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5835] munmap(0x7fd967a00000, 138412032) = 0 [pid 5835] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5835] close(3) = 0 [pid 5835] openat(AT_FDCWD, "./file0", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5835] unlinkat(-1, "./file0", 0) = -1 EBADF (Bad file descriptor) [pid 5835] exit_group(0) = ? [pid 5835] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5835, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=18 /* 0.18 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5836 attached , child_tidptr=0x555559904650) = 5836 [pid 5836] set_robust_list(0x555559904660, 24) = 0 [pid 5836] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5836] setpgid(0, 0) = 0 [pid 5836] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5836] write(3, "1000", 4) = 4 [pid 5836] close(3) = 0 [pid 5836] write(1, "executing program\n", 18executing program ) = 18 [pid 5836] memfd_create("syzkaller", 0) = 3 [pid 5836] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd967a00000 [pid 5836] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5836] munmap(0x7fd967a00000, 138412032) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5836] close(3) = 0 [pid 5836] openat(AT_FDCWD, "./file0", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5836] unlinkat(-1, "./file0", 0) = -1 EBADF (Bad file descriptor) [pid 5836] exit_group(0) = ? [pid 5836] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5836, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=21 /* 0.21 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5837 attached , child_tidptr=0x555559904650) = 5837 [pid 5837] set_robust_list(0x555559904660, 24) = 0 [pid 5837] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5837] setpgid(0, 0) = 0 [pid 5837] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5837] write(3, "1000", 4) = 4 [pid 5837] close(3) = 0 [pid 5837] write(1, "executing program\n", 18executing program ) = 18 [pid 5837] memfd_create("syzkaller", 0) = 3 [pid 5837] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd967a00000 [pid 5837] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5837] munmap(0x7fd967a00000, 138412032) = 0 [pid 5837] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5837] close(3) = 0 [pid 5837] openat(AT_FDCWD, "./file0", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5837] unlinkat(-1, "./file0", 0) = -1 EBADF (Bad file descriptor) [pid 5837] exit_group(0) = ? [pid 5837] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5837, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5838 attached , child_tidptr=0x555559904650) = 5838 [pid 5838] set_robust_list(0x555559904660, 24) = 0 [pid 5838] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5838] setpgid(0, 0) = 0 [pid 5838] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5838] write(3, "1000", 4) = 4 [pid 5838] close(3) = 0 [pid 5838] write(1, "executing program\n", 18executing program ) = 18 [pid 5838] memfd_create("syzkaller", 0) = 3 [pid 5838] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd967a00000 [pid 5838] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5838] munmap(0x7fd967a00000, 138412032) = 0 [pid 5838] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5838] close(3) = 0 [pid 5838] openat(AT_FDCWD, "./file0", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5838] unlinkat(-1, "./file0", 0) = -1 EBADF (Bad file descriptor) [pid 5838] exit_group(0) = ? [pid 5838] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5838, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=19 /* 0.19 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5839 attached , child_tidptr=0x555559904650) = 5839 [pid 5839] set_robust_list(0x555559904660, 24) = 0 [pid 5839] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5839] setpgid(0, 0) = 0 [pid 5839] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5839] write(3, "1000", 4) = 4 [pid 5839] close(3) = 0 [pid 5839] write(1, "executing program\n", 18executing program ) = 18 [pid 5839] memfd_create("syzkaller", 0) = 3 [pid 5839] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd967a00000 [pid 5839] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5839] munmap(0x7fd967a00000, 138412032) = 0 [pid 5839] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5839] close(3) = 0 [pid 5839] openat(AT_FDCWD, "./file0", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5839] unlinkat(-1, "./file0", 0) = -1 EBADF (Bad file descriptor) [pid 5839] exit_group(0) = ? [pid 5839] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5839, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=17 /* 0.17 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5840 attached , child_tidptr=0x555559904650) = 5840 [pid 5840] set_robust_list(0x555559904660, 24) = 0 [pid 5840] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5840] setpgid(0, 0) = 0 [pid 5840] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5840] write(3, "1000", 4) = 4 [pid 5840] close(3) = 0 [pid 5840] write(1, "executing program\n", 18executing program ) = 18 [pid 5840] memfd_create("syzkaller", 0) = 3 [pid 5840] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd967a00000 [pid 5840] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5840] munmap(0x7fd967a00000, 138412032) = 0 [pid 5840] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5840] close(3) = 0 [pid 5840] openat(AT_FDCWD, "./file0", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5840] unlinkat(-1, "./file0", 0) = -1 EBADF (Bad file descriptor) [pid 5840] exit_group(0) = ? [pid 5840] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5840, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=20 /* 0.20 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5841 attached , child_tidptr=0x555559904650) = 5841 [pid 5841] set_robust_list(0x555559904660, 24) = 0 [pid 5841] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5841] setpgid(0, 0) = 0 [pid 5841] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5841] write(3, "1000", 4) = 4 [pid 5841] close(3) = 0 [pid 5841] write(1, "executing program\n", 18executing program ) = 18 [pid 5841] memfd_create("syzkaller", 0) = 3 [pid 5841] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd967a00000 [pid 5841] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5841] munmap(0x7fd967a00000, 138412032) = 0 [pid 5841] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5841] close(3) = 0 [pid 5841] openat(AT_FDCWD, "./file0", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5841] unlinkat(-1, "./file0", 0) = -1 EBADF (Bad file descriptor) [pid 5841] exit_group(0) = ? [pid 5841] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5841, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=21 /* 0.21 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5842 attached , child_tidptr=0x555559904650) = 5842 [pid 5842] set_robust_list(0x555559904660, 24) = 0 [pid 5842] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5842] setpgid(0, 0) = 0 [pid 5842] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5842] write(3, "1000", 4) = 4 [pid 5842] close(3) = 0 executing program [pid 5842] write(1, "executing program\n", 18) = 18 [pid 5842] memfd_create("syzkaller", 0) = 3 [pid 5842] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd967a00000 [pid 5842] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5842] munmap(0x7fd967a00000, 138412032) = 0 [pid 5842] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5842] close(3) = 0 [pid 5842] openat(AT_FDCWD, "./file0", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5842] unlinkat(-1, "./file0", 0) = -1 EBADF (Bad file descriptor) [pid 5842] exit_group(0) = ? [pid 5842] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5842, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=17 /* 0.17 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5843 attached , child_tidptr=0x555559904650) = 5843 [pid 5843] set_robust_list(0x555559904660, 24) = 0 [pid 5843] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5843] setpgid(0, 0) = 0 [pid 5843] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5843] write(3, "1000", 4) = 4 [pid 5843] close(3) = 0 [pid 5843] write(1, "executing program\n", 18executing program ) = 18 [pid 5843] memfd_create("syzkaller", 0) = 3 [pid 5843] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd967a00000 [pid 5843] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5843] munmap(0x7fd967a00000, 138412032) = 0 [pid 5843] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5843] close(3) = 0 [pid 5843] openat(AT_FDCWD, "./file0", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5843] unlinkat(-1, "./file0", 0) = -1 EBADF (Bad file descriptor) [pid 5843] exit_group(0) = ? [pid 5843] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5843, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=16 /* 0.16 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5844 attached , child_tidptr=0x555559904650) = 5844 [pid 5844] set_robust_list(0x555559904660, 24) = 0 [pid 5844] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5844] setpgid(0, 0) = 0 [pid 5844] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5844] write(3, "1000", 4) = 4 [pid 5844] close(3) = 0 executing program [pid 5844] write(1, "executing program\n", 18) = 18 [pid 5844] memfd_create("syzkaller", 0) = 3 [pid 5844] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd967a00000 [pid 5844] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5844] munmap(0x7fd967a00000, 138412032) = 0 [pid 5844] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5844] close(3) = 0 [pid 5844] openat(AT_FDCWD, "./file0", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5844] unlinkat(-1, "./file0", 0) = -1 EBADF (Bad file descriptor) [pid 5844] exit_group(0) = ? [pid 5844] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5844, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=18 /* 0.18 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5845 attached , child_tidptr=0x555559904650) = 5845 [pid 5845] set_robust_list(0x555559904660, 24) = 0 [pid 5845] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5845] setpgid(0, 0) = 0 [pid 5845] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5845] write(3, "1000", 4) = 4 [pid 5845] close(3) = 0 executing program [pid 5845] write(1, "executing program\n", 18) = 18 [pid 5845] memfd_create("syzkaller", 0) = 3 [pid 5845] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd967a00000 [pid 5845] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5845] munmap(0x7fd967a00000, 138412032) = 0 [pid 5845] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5845] close(3) = 0 [pid 5845] openat(AT_FDCWD, "./file0", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5845] unlinkat(-1, "./file0", 0) = -1 EBADF (Bad file descriptor) [pid 5845] exit_group(0) = ? [pid 5845] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5845, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=19 /* 0.19 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5846 attached , child_tidptr=0x555559904650) = 5846 [pid 5846] set_robust_list(0x555559904660, 24) = 0 [pid 5846] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5846] setpgid(0, 0) = 0 [pid 5846] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5846] write(3, "1000", 4) = 4 [pid 5846] close(3) = 0 executing program [pid 5846] write(1, "executing program\n", 18) = 18 [pid 5846] memfd_create("syzkaller", 0) = 3 [pid 5846] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd967a00000 [pid 5846] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5846] munmap(0x7fd967a00000, 138412032) = 0 [pid 5846] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5846] close(3) = 0 [pid 5846] openat(AT_FDCWD, "./file0", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5846] unlinkat(-1, "./file0", 0) = -1 EBADF (Bad file descriptor) [pid 5846] exit_group(0) = ? [pid 5846] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5846, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=21 /* 0.21 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5847 attached , child_tidptr=0x555559904650) = 5847 [pid 5847] set_robust_list(0x555559904660, 24) = 0 [pid 5847] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5847] setpgid(0, 0) = 0 [pid 5847] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5847] write(3, "1000", 4) = 4 [pid 5847] close(3) = 0 [pid 5847] write(1, "executing program\n", 18executing program ) = 18 [pid 5847] memfd_create("syzkaller", 0) = 3 [pid 5847] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd967a00000 [pid 5847] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5847] munmap(0x7fd967a00000, 138412032) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5847] close(3) = 0 [pid 5847] openat(AT_FDCWD, "./file0", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5847] unlinkat(-1, "./file0", 0) = -1 EBADF (Bad file descriptor) [pid 5847] exit_group(0) = ? [pid 5847] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5847, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=20 /* 0.20 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5848 attached , child_tidptr=0x555559904650) = 5848 [pid 5848] set_robust_list(0x555559904660, 24) = 0 [pid 5848] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5848] setpgid(0, 0) = 0 [pid 5848] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5848] write(3, "1000", 4) = 4 [pid 5848] close(3) = 0 executing program [pid 5848] write(1, "executing program\n", 18) = 18 [pid 5848] memfd_create("syzkaller", 0) = 3 [pid 5848] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd967a00000 [ 83.620048][ T113] BUG: spinlock bad magic on CPU#1, jfsCommit/113 [ 83.626560][ T113] ================================================================== [ 83.634656][ T113] BUG: KASAN: slab-out-of-bounds in string+0x218/0x2b0 [ 83.641669][ T113] Read of size 1 at addr ffff88807658c9f0 by task jfsCommit/113 [ 83.649332][ T113] [ 83.651702][ T113] CPU: 1 UID: 0 PID: 113 Comm: jfsCommit Not tainted 6.12.0-rc6-syzkaller-00110-gff7afaeca1a1 #0 [ 83.662232][ T113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 83.672325][ T113] Call Trace: [ 83.675636][ T113] [ 83.678585][ T113] dump_stack_lvl+0x241/0x360 [ 83.683389][ T113] ? __pfx_dump_stack_lvl+0x10/0x10 [ 83.688606][ T113] ? __pfx__printk+0x10/0x10 [ 83.693205][ T113] ? _printk+0xd5/0x120 [ 83.697369][ T113] ? __virt_addr_valid+0x183/0x530 [ 83.702494][ T113] ? __virt_addr_valid+0x183/0x530 [ 83.707610][ T113] print_report+0x169/0x550 [ 83.712128][ T113] ? __virt_addr_valid+0x183/0x530 [ 83.717244][ T113] ? __virt_addr_valid+0x183/0x530 [ 83.722360][ T113] ? __virt_addr_valid+0x45f/0x530 [ 83.727486][ T113] ? __phys_addr+0xba/0x170 [ 83.731998][ T113] ? string+0x218/0x2b0 [ 83.736165][ T113] kasan_report+0x143/0x180 [ 83.740684][ T113] ? string+0x218/0x2b0 [ 83.744862][ T113] string+0x218/0x2b0 [ 83.748878][ T113] vsnprintf+0x1101/0x1da0 [ 83.753311][ T113] ? __pfx_vsnprintf+0x10/0x10 [ 83.758090][ T113] vprintk_store+0x480/0x1160 [ 83.762780][ T113] ? __pfx_vprintk_store+0x10/0x10 [ 83.767896][ T113] ? prb_read_valid+0xa9/0xf0 [ 83.772581][ T113] ? __pfx___console_unlock+0x10/0x10 [ 83.777966][ T113] ? console_unlock+0x2fc/0x3b0 [ 83.782831][ T113] ? this_cpu_in_panic+0x4f/0x80 [ 83.787777][ T113] ? is_printk_legacy_deferred+0x43/0x50 [ 83.793422][ T113] ? printk_get_console_flush_type+0x1fe/0x4f0 [ 83.799588][ T113] vprintk_emit+0x271/0xa10 [ 83.804102][ T113] ? __pfx_vprintk_emit+0x10/0x10 [ 83.809139][ T113] ? __pfx_register_lock_class+0x10/0x10 [ 83.814793][ T113] _printk+0xd5/0x120 [ 83.818784][ T113] ? __pfx__printk+0x10/0x10 [ 83.823395][ T113] spin_bug+0x13b/0x1d0 [ 83.827575][ T113] do_raw_spin_lock+0x209/0x370 [ 83.832440][ T113] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 83.837826][ T113] _raw_spin_lock_irqsave+0xe1/0x120 [ 83.843118][ T113] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 83.849022][ T113] __wake_up_common_lock+0x25/0x1e0 [ 83.854236][ T113] release_metapage+0xb2/0x960 [ 83.859011][ T113] ? txFreeMap+0xa9c/0xd50 [ 83.863435][ T113] ? _raw_spin_unlock+0x28/0x50 [ 83.868289][ T113] ? __mark_inode_dirty+0x5b2/0xe90 [ 83.873525][ T113] xtTruncate+0x1006/0x3270 [ 83.878048][ T113] ? __pfx_xtTruncate+0x10/0x10 [ 83.882917][ T113] jfs_free_zero_link+0x46e/0x6e0 [ 83.888021][ T113] ? inode_wait_for_writeback+0x111/0x2a0 [ 83.893757][ T113] ? __pfx_jfs_free_zero_link+0x10/0x10 [ 83.899328][ T113] jfs_evict_inode+0x35f/0x440 [ 83.904113][ T113] ? __pfx_jfs_evict_inode+0x10/0x10 [ 83.909414][ T113] evict+0x4e8/0x9b0 [ 83.913320][ T113] ? __pfx_evict+0x10/0x10 [ 83.917749][ T113] ? iput+0x713/0xa50 [ 83.921764][ T113] txUpdateMap+0x931/0xb10 [ 83.926195][ T113] ? __pfx_txUpdateMap+0x10/0x10 [ 83.931145][ T113] jfs_lazycommit+0x49a/0xb80 [ 83.935831][ T113] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 83.941732][ T113] ? lockdep_hardirqs_on+0x99/0x150 [ 83.946947][ T113] ? __pfx_jfs_lazycommit+0x10/0x10 [ 83.952165][ T113] ? __pfx_default_wake_function+0x10/0x10 [ 83.957986][ T113] ? __kthread_parkme+0x169/0x1d0 [ 83.963055][ T113] ? __pfx_jfs_lazycommit+0x10/0x10 [ 83.968266][ T113] kthread+0x2f0/0x390 [ 83.972340][ T113] ? __pfx_jfs_lazycommit+0x10/0x10 [ 83.977641][ T113] ? __pfx_kthread+0x10/0x10 [ 83.982237][ T113] ret_from_fork+0x4b/0x80 [ 83.986666][ T113] ? __pfx_kthread+0x10/0x10 [ 83.991261][ T113] ret_from_fork_asm+0x1a/0x30 [ 83.996043][ T113] [ 83.999065][ T113] [ 84.001394][ T113] The buggy address belongs to the object at ffff88807658c9c0 [ 84.001394][ T113] which belongs to the cache jfs_ip of size 2232 [ 84.015103][ T113] The buggy address is located 48 bytes inside of [ 84.015103][ T113] allocated 2232-byte region [ffff88807658c9c0, ffff88807658d278) [ 84.029354][ T113] [ 84.031687][ T113] The buggy address belongs to the physical page: [ 84.038104][ T113] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x76588 [ 84.046878][ T113] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 84.055379][ T113] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 84.062934][ T113] page_type: f5(slab) [ 84.066919][ T113] raw: 00fff00000000040 ffff88801db27780 dead000000000122 0000000000000000 [ 84.075505][ T113] raw: 0000000000000000 00000000800d000d 00000001f5000000 0000000000000000 [ 84.084092][ T113] head: 00fff00000000040 ffff88801db27780 dead000000000122 0000000000000000 [ 84.092780][ T113] head: 0000000000000000 00000000800d000d 00000001f5000000 0000000000000000 [ 84.101473][ T113] head: 00fff00000000003 ffffea0001d96201 ffffffffffffffff 0000000000000000 [ 84.110171][ T113] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 84.118846][ T113] page dumped because: kasan: bad access detected [ 84.125271][ T113] page_owner tracks the page as allocated [ 84.131007][ T113] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_RECLAIMABLE), pid 5833, tgid 5833 (syz-executor280), ts 78527233732, free_ts 25457634676 [ 84.153622][ T113] post_alloc_hook+0x1f3/0x230 [ 84.158430][ T113] get_page_from_freelist+0x3033/0x3180 [ 84.163994][ T113] __alloc_pages_noprof+0x292/0x710 [ 84.169204][ T113] alloc_pages_mpol_noprof+0x3e8/0x680 [ 84.174679][ T113] alloc_slab_page+0x6a/0x140 [ 84.179382][ T113] allocate_slab+0x5a/0x2f0 [ 84.183903][ T113] ___slab_alloc+0xcd1/0x14b0 [ 84.188590][ T113] __slab_alloc+0x58/0xa0 [ 84.192929][ T113] kmem_cache_alloc_lru_noprof+0x1c5/0x2b0 [ 84.198738][ T113] jfs_alloc_inode+0x28/0x70 [ 84.203341][ T113] alloc_inode+0x65/0x1a0 [ 84.207684][ T113] new_inode+0x22/0x1d0 [ 84.211874][ T113] jfs_fill_super+0x408/0xc50 [ 84.216582][ T113] mount_bdev+0x20a/0x2d0 [ 84.220957][ T113] legacy_get_tree+0xee/0x190 [ 84.225693][ T113] vfs_get_tree+0x90/0x2b0 [ 84.230154][ T113] page last free pid 1 tgid 1 stack trace: [ 84.235988][ T113] free_unref_page+0xcd0/0xf00 [ 84.240774][ T113] free_contig_range+0x152/0x550 [ 84.245728][ T113] destroy_args+0x92/0x910 [ 84.250188][ T113] debug_vm_pgtable+0x4be/0x550 [ 84.255052][ T113] do_one_initcall+0x248/0x880 [ 84.259828][ T113] do_initcall_level+0x157/0x210 [ 84.264777][ T113] do_initcalls+0x3f/0x80 [ 84.269118][ T113] kernel_init_freeable+0x435/0x5d0 [ 84.274416][ T113] kernel_init+0x1d/0x2b0 [ 84.278779][ T113] ret_from_fork+0x4b/0x80 [ 84.283223][ T113] ret_from_fork_asm+0x1a/0x30 [ 84.288008][ T113] [ 84.290336][ T113] Memory state around the buggy address: [ 84.295987][ T113] ffff88807658c880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 84.304070][ T113] ffff88807658c900: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 84.312139][ T113] >ffff88807658c980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 84.320228][ T113] ^ [ 84.327946][ T113] ffff88807658ca00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 84.336037][ T113] ffff88807658ca80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 84.344147][ T113] ================================================================== [ 84.352210][ T113] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 84.359409][ T113] CPU: 1 UID: 0 PID: 113 Comm: jfsCommit Not tainted 6.12.0-rc6-syzkaller-00110-gff7afaeca1a1 #0 [ 84.369913][ T113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 84.379979][ T113] Call Trace: [ 84.383269][ T113] [ 84.386240][ T113] dump_stack_lvl+0x241/0x360 [ 84.390950][ T113] ? __pfx_dump_stack_lvl+0x10/0x10 [ 84.396160][ T113] ? __pfx__printk+0x10/0x10 [ 84.400759][ T113] ? rcu_is_watching+0x15/0xb0 [ 84.405535][ T113] ? lock_release+0xbf/0xa30 [ 84.410147][ T113] ? vscnprintf+0x5d/0x90 [ 84.414519][ T113] panic+0x349/0x880 [ 84.418426][ T113] ? check_panic_on_warn+0x21/0xb0 [ 84.423546][ T113] ? __pfx_panic+0x10/0x10 [ 84.427969][ T113] ? do_raw_spin_unlock+0x13c/0x8b0 [ 84.433183][ T113] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 84.439347][ T113] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 84.445773][ T113] ? print_report+0x502/0x550 [ 84.450467][ T113] check_panic_on_warn+0x86/0xb0 [ 84.455446][ T113] ? string+0x218/0x2b0 [ 84.459615][ T113] end_report+0x77/0x160 [ 84.463875][ T113] kasan_report+0x154/0x180 [ 84.468425][ T113] ? string+0x218/0x2b0 [ 84.472597][ T113] string+0x218/0x2b0 [ 84.476596][ T113] vsnprintf+0x1101/0x1da0 [ 84.481046][ T113] ? __pfx_vsnprintf+0x10/0x10 [ 84.485837][ T113] vprintk_store+0x480/0x1160 [ 84.490531][ T113] ? __pfx_vprintk_store+0x10/0x10 [ 84.495660][ T113] ? prb_read_valid+0xa9/0xf0 [ 84.500345][ T113] ? __pfx___console_unlock+0x10/0x10 [ 84.505740][ T113] ? console_unlock+0x2fc/0x3b0 [ 84.510626][ T113] ? this_cpu_in_panic+0x4f/0x80 [ 84.515572][ T113] ? is_printk_legacy_deferred+0x43/0x50 [ 84.521223][ T113] ? printk_get_console_flush_type+0x1fe/0x4f0 [ 84.527391][ T113] vprintk_emit+0x271/0xa10 [ 84.531907][ T113] ? __pfx_vprintk_emit+0x10/0x10 [ 84.536941][ T113] ? __pfx_register_lock_class+0x10/0x10 [ 84.542594][ T113] _printk+0xd5/0x120 [ 84.546590][ T113] ? __pfx__printk+0x10/0x10 [ 84.551195][ T113] spin_bug+0x13b/0x1d0 [ 84.555362][ T113] do_raw_spin_lock+0x209/0x370 [ 84.560230][ T113] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 84.565615][ T113] _raw_spin_lock_irqsave+0xe1/0x120 [ 84.570907][ T113] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 84.576810][ T113] __wake_up_common_lock+0x25/0x1e0 [ 84.582024][ T113] release_metapage+0xb2/0x960 [ 84.586796][ T113] ? txFreeMap+0xa9c/0xd50 [ 84.591222][ T113] ? _raw_spin_unlock+0x28/0x50 [ 84.596107][ T113] ? __mark_inode_dirty+0x5b2/0xe90 [ 84.601324][ T113] xtTruncate+0x1006/0x3270 [ 84.605849][ T113] ? __pfx_xtTruncate+0x10/0x10 [ 84.610725][ T113] jfs_free_zero_link+0x46e/0x6e0 [ 84.615768][ T113] ? inode_wait_for_writeback+0x111/0x2a0 [ 84.621503][ T113] ? __pfx_jfs_free_zero_link+0x10/0x10 [ 84.627115][ T113] jfs_evict_inode+0x35f/0x440 [ 84.631899][ T113] ? __pfx_jfs_evict_inode+0x10/0x10 [ 84.637213][ T113] evict+0x4e8/0x9b0 [ 84.641125][ T113] ? __pfx_evict+0x10/0x10 [ 84.645553][ T113] ? iput+0x713/0xa50 [ 84.649554][ T113] txUpdateMap+0x931/0xb10 [ 84.653983][ T113] ? __pfx_txUpdateMap+0x10/0x10 [ 84.658959][ T113] jfs_lazycommit+0x49a/0xb80 [ 84.663651][ T113] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 84.669552][ T113] ? lockdep_hardirqs_on+0x99/0x150 [ 84.674770][ T113] ? __pfx_jfs_lazycommit+0x10/0x10 [ 84.680071][ T113] ? __pfx_default_wake_function+0x10/0x10 [ 84.685890][ T113] ? __kthread_parkme+0x169/0x1d0 [ 84.690935][ T113] ? __pfx_jfs_lazycommit+0x10/0x10 [ 84.696155][ T113] kthread+0x2f0/0x390 [ 84.700257][ T113] ? __pfx_jfs_lazycommit+0x10/0x10 [ 84.705467][ T113] ? __pfx_kthread+0x10/0x10 [ 84.710239][ T113] ret_from_fork+0x4b/0x80 [ 84.714671][ T113] ? __pfx_kthread+0x10/0x10 [ 84.719276][ T113] ret_from_fork_asm+0x1a/0x30 [ 84.724084][ T113] [ 84.727390][ T113] Kernel Offset: disabled [ 84.731716][ T113] Rebooting in 86400 seconds..