Warning: Permanently added '[localhost]:15422' (ED25519) to the list of known hosts. executing program [ 80.774519][ T5111] loop0: detected capacity change from 0 to 32768 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 85.816558][ T101] BUG: spinlock bad magic on CPU#0, jfsCommit/101 [ 85.819065][ T101] ================================================================== [ 85.822870][ T101] BUG: KASAN: slab-out-of-bounds in string+0x218/0x2b0 [ 85.825648][ T101] Read of size 1 at addr ffff8880412849f0 by task jfsCommit/101 [ 85.828377][ T101] [ 85.829278][ T101] CPU: 0 UID: 0 PID: 101 Comm: jfsCommit Not tainted 6.11.0-rc7-syzkaller #0 [ 85.832646][ T101] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.836800][ T101] Call Trace: [ 85.838079][ T101] [ 85.839195][ T101] dump_stack_lvl+0x241/0x360 [ 85.841011][ T101] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.843103][ T101] ? __pfx__printk+0x10/0x10 [ 85.844911][ T101] ? _printk+0xd5/0x120 [ 85.846523][ T101] ? __virt_addr_valid+0x183/0x530 [ 85.848510][ T101] ? __virt_addr_valid+0x183/0x530 [ 85.850305][ T101] print_report+0x169/0x550 [ 85.851965][ T101] ? __virt_addr_valid+0x183/0x530 [ 85.853956][ T101] ? __virt_addr_valid+0x183/0x530 [ 85.855966][ T101] ? __virt_addr_valid+0x45f/0x530 [ 85.857978][ T101] ? __phys_addr+0xba/0x170 [ 85.859745][ T101] ? string+0x218/0x2b0 [ 85.861307][ T101] kasan_report+0x143/0x180 [ 85.863063][ T101] ? string+0x218/0x2b0 [ 85.864661][ T101] string+0x218/0x2b0 [ 85.866221][ T101] vsnprintf+0x1101/0x1da0 [ 85.867982][ T101] ? __pfx_vsnprintf+0x10/0x10 [ 85.869827][ T101] ? do_raw_spin_lock+0x14f/0x370 [ 85.871759][ T101] vprintk_store+0x480/0x1160 [ 85.873621][ T101] ? __pfx_vprintk_store+0x10/0x10 [ 85.875609][ T101] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 85.878047][ T101] ? rcu_is_watching+0x15/0xb0 [ 85.879969][ T101] ? __pfx_console_unlock+0x10/0x10 [ 85.881955][ T101] ? _printk+0xd5/0x120 [ 85.883426][ T101] ? __irq_work_queue_local+0x137/0x410 [ 85.885450][ T101] ? irq_work_queue+0xca/0x150 [ 85.887333][ T101] vprintk_emit+0x1e0/0x7c0 [ 85.889080][ T101] ? __pfx_vprintk_emit+0x10/0x10 [ 85.891033][ T101] _printk+0xd5/0x120 [ 85.892562][ T101] ? __pfx__printk+0x10/0x10 [ 85.894352][ T101] spin_bug+0x13b/0x1d0 [ 85.895945][ T101] do_raw_spin_lock+0x209/0x370 [ 85.897630][ T101] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 85.899540][ T101] _raw_spin_lock_irqsave+0xe1/0x120 [ 85.901401][ T101] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 85.903511][ T101] __wake_up_common_lock+0x25/0x1e0 [ 85.905313][ T101] release_metapage+0xb2/0x960 [ 85.906988][ T101] ? txFreeMap+0xa9c/0xd50 [ 85.908579][ T101] ? _raw_spin_unlock+0x28/0x50 [ 85.910293][ T101] ? __mark_inode_dirty+0x60d/0xe20 [ 85.912334][ T101] xtTruncate+0x1006/0x3270 [ 85.914142][ T101] ? __pfx_xtTruncate+0x10/0x10 [ 85.916110][ T101] jfs_free_zero_link+0x46e/0x6e0 [ 85.918078][ T101] ? inode_wait_for_writeback+0x224/0x290 [ 85.920286][ T101] ? __pfx_jfs_free_zero_link+0x10/0x10 [ 85.922465][ T101] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 85.924871][ T101] ? __pfx_wake_bit_function+0x10/0x10 [ 85.926983][ T101] jfs_evict_inode+0x35f/0x440 [ 85.928884][ T101] ? __pfx_jfs_evict_inode+0x10/0x10 [ 85.930987][ T101] evict+0x532/0x950 [ 85.932573][ T101] ? __pfx_evict+0x10/0x10 [ 85.934297][ T101] ? _raw_spin_unlock+0x28/0x50 [ 85.936196][ T101] ? iput+0x6ed/0x930 [ 85.937590][ T101] txUpdateMap+0x931/0xb10 [ 85.939226][ T101] ? __pfx_txUpdateMap+0x10/0x10 [ 85.941066][ T101] jfs_lazycommit+0x49a/0xb80 [ 85.942918][ T101] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 85.945164][ T101] ? lockdep_hardirqs_on+0x99/0x150 [ 85.947000][ T101] ? __pfx_jfs_lazycommit+0x10/0x10 [ 85.948834][ T101] ? __pfx_default_wake_function+0x10/0x10 [ 85.950924][ T101] ? __kthread_parkme+0x169/0x1d0 [ 85.952541][ T101] ? __pfx_jfs_lazycommit+0x10/0x10 [ 85.954256][ T101] kthread+0x2f0/0x390 [ 85.955692][ T101] ? __pfx_jfs_lazycommit+0x10/0x10 [ 85.957437][ T101] ? __pfx_kthread+0x10/0x10 [ 85.959006][ T101] ret_from_fork+0x4b/0x80 [ 85.960433][ T101] ? __pfx_kthread+0x10/0x10 [ 85.961967][ T101] ret_from_fork_asm+0x1a/0x30 [ 85.963613][ T101] [ 85.964653][ T101] [ 85.965464][ T101] The buggy address belongs to the object at ffff8880412849c0 [ 85.965464][ T101] which belongs to the cache jfs_ip of size 2232 [ 85.970612][ T101] The buggy address is located 48 bytes inside of [ 85.970612][ T101] allocated 2232-byte region [ffff8880412849c0, ffff888041285278) [ 85.975814][ T101] [ 85.976646][ T101] The buggy address belongs to the physical page: [ 85.978898][ T101] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x41280 [ 85.982299][ T101] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 85.985562][ T101] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 85.988398][ T101] page_type: 0xfdffffff(slab) [ 85.989994][ T101] raw: 04fff00000000040 ffff88801f594280 dead000000000122 0000000000000000 [ 85.993308][ T101] raw: 0000000000000000 00000000800d000d 00000001fdffffff 0000000000000000 [ 85.996426][ T101] head: 04fff00000000040 ffff88801f594280 dead000000000122 0000000000000000 [ 85.999403][ T101] head: 0000000000000000 00000000800d000d 00000001fdffffff 0000000000000000 [ 86.002587][ T101] head: 04fff00000000003 ffffea000104a001 ffffffffffffffff 0000000000000000 [ 86.005872][ T101] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 86.009058][ T101] page dumped because: kasan: bad access detected [ 86.011392][ T101] page_owner tracks the page as allocated [ 86.013459][ T101] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_RECLAIMABLE), pid 5111, tgid 5111 (syz-executor352), ts 80788950583, free_ts 0 [ 86.021418][ T101] post_alloc_hook+0x1f3/0x230 [ 86.023286][ T101] get_page_from_freelist+0x2e4c/0x2f10 [ 86.025240][ T101] __alloc_pages_noprof+0x256/0x6c0 [ 86.027259][ T101] alloc_slab_page+0x5f/0x120 [ 86.029071][ T101] allocate_slab+0x5a/0x2f0 [ 86.030842][ T101] ___slab_alloc+0xcd1/0x14b0 [ 86.032564][ T101] __slab_alloc+0x58/0xa0 [ 86.034178][ T101] kmem_cache_alloc_lru_noprof+0x1c5/0x2b0 [ 86.036340][ T101] jfs_alloc_inode+0x28/0x70 [ 86.038086][ T101] new_inode+0x6e/0x310 [ 86.039682][ T101] jfs_fill_super+0x408/0xc50 [ 86.041358][ T101] mount_bdev+0x20a/0x2d0 [ 86.043016][ T101] legacy_get_tree+0xee/0x190 [ 86.044819][ T101] vfs_get_tree+0x90/0x2b0 [ 86.046452][ T101] do_new_mount+0x2be/0xb40 [ 86.048105][ T101] __se_sys_mount+0x2d6/0x3c0 [ 86.049797][ T101] page_owner free stack trace missing [ 86.051758][ T101] [ 86.052666][ T101] Memory state around the buggy address: [ 86.054814][ T101] ffff888041284880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 86.057493][ T101] ffff888041284900: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 86.060027][ T101] >ffff888041284980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 86.062595][ T101] ^ [ 86.065113][ T101] ffff888041284a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 86.067804][ T101] ffff888041284a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 86.070438][ T101] ================================================================== [ 86.073481][ T101] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 86.076087][ T101] CPU: 0 UID: 0 PID: 101 Comm: jfsCommit Not tainted 6.11.0-rc7-syzkaller #0 [ 86.079377][ T101] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.083251][ T101] Call Trace: [ 86.084509][ T101] [ 86.085549][ T101] dump_stack_lvl+0x241/0x360 [ 86.087252][ T101] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.089231][ T101] ? __pfx__printk+0x10/0x10 [ 86.090957][ T101] ? rcu_is_watching+0x15/0xb0 [ 86.092735][ T101] ? lock_release+0xbf/0xa30 [ 86.094486][ T101] ? vscnprintf+0x5d/0x90 [ 86.096071][ T101] panic+0x349/0x860 [ 86.097504][ T101] ? check_panic_on_warn+0x21/0xb0 [ 86.099344][ T101] ? __pfx_panic+0x10/0x10 [ 86.100996][ T101] ? do_raw_spin_unlock+0x58/0x8b0 [ 86.102970][ T101] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 86.105269][ T101] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 86.107635][ T101] ? print_report+0x502/0x550 [ 86.109301][ T101] check_panic_on_warn+0x86/0xb0 [ 86.111010][ T101] ? string+0x218/0x2b0 [ 86.112530][ T101] end_report+0x77/0x160 [ 86.114056][ T101] kasan_report+0x154/0x180 [ 86.115731][ T101] ? string+0x218/0x2b0 [ 86.117251][ T101] string+0x218/0x2b0 [ 86.118810][ T101] vsnprintf+0x1101/0x1da0 [ 86.120501][ T101] ? __pfx_vsnprintf+0x10/0x10 [ 86.122261][ T101] ? do_raw_spin_lock+0x14f/0x370 [ 86.124117][ T101] vprintk_store+0x480/0x1160 [ 86.125725][ T101] ? __pfx_vprintk_store+0x10/0x10 [ 86.127654][ T101] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 86.129864][ T101] ? rcu_is_watching+0x15/0xb0 [ 86.131540][ T101] ? __pfx_console_unlock+0x10/0x10 [ 86.133330][ T101] ? _printk+0xd5/0x120 [ 86.134824][ T101] ? __irq_work_queue_local+0x137/0x410 [ 86.136946][ T101] ? irq_work_queue+0xca/0x150 [ 86.138761][ T101] vprintk_emit+0x1e0/0x7c0 [ 86.140307][ T101] ? __pfx_vprintk_emit+0x10/0x10 [ 86.142240][ T101] _printk+0xd5/0x120 [ 86.143673][ T101] ? __pfx__printk+0x10/0x10 [ 86.145287][ T101] spin_bug+0x13b/0x1d0 [ 86.146888][ T101] do_raw_spin_lock+0x209/0x370 [ 86.148822][ T101] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 86.150924][ T101] _raw_spin_lock_irqsave+0xe1/0x120 [ 86.153038][ T101] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 86.155272][ T101] __wake_up_common_lock+0x25/0x1e0 [ 86.157746][ T101] release_metapage+0xb2/0x960 [ 86.160107][ T101] ? txFreeMap+0xa9c/0xd50 [ 86.162273][ T101] ? _raw_spin_unlock+0x28/0x50 [ 86.164680][ T101] ? __mark_inode_dirty+0x60d/0xe20 [ 86.166674][ T101] xtTruncate+0x1006/0x3270 [ 86.168573][ T101] ? __pfx_xtTruncate+0x10/0x10 [ 86.170453][ T101] jfs_free_zero_link+0x46e/0x6e0 [ 86.172378][ T101] ? inode_wait_for_writeback+0x224/0x290 [ 86.174456][ T101] ? __pfx_jfs_free_zero_link+0x10/0x10 [ 86.176504][ T101] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 86.178607][ T101] ? __pfx_wake_bit_function+0x10/0x10 [ 86.180544][ T101] jfs_evict_inode+0x35f/0x440 [ 86.182347][ T101] ? __pfx_jfs_evict_inode+0x10/0x10 [ 86.184479][ T101] evict+0x532/0x950 [ 86.186028][ T101] ? __pfx_evict+0x10/0x10 [ 86.187765][ T101] ? _raw_spin_unlock+0x28/0x50 [ 86.189656][ T101] ? iput+0x6ed/0x930 [ 86.191247][ T101] txUpdateMap+0x931/0xb10 [ 86.192957][ T101] ? __pfx_txUpdateMap+0x10/0x10 [ 86.194849][ T101] jfs_lazycommit+0x49a/0xb80 [ 86.196619][ T101] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 86.198764][ T101] ? lockdep_hardirqs_on+0x99/0x150 [ 86.200625][ T101] ? __pfx_jfs_lazycommit+0x10/0x10 [ 86.202347][ T101] ? __pfx_default_wake_function+0x10/0x10 [ 86.204477][ T101] ? __kthread_parkme+0x169/0x1d0 [ 86.206297][ T101] ? __pfx_jfs_lazycommit+0x10/0x10 [ 86.208251][ T101] kthread+0x2f0/0x390 [ 86.209799][ T101] ? __pfx_jfs_lazycommit+0x10/0x10 [ 86.211743][ T101] ? __pfx_kthread+0x10/0x10 [ 86.213464][ T101] ret_from_fork+0x4b/0x80 [ 86.215119][ T101] ? __pfx_kthread+0x10/0x10 [ 86.216813][ T101] ret_from_fork_asm+0x1a/0x30 [ 86.218606][ T101] [ 86.220083][ T101] Kernel Offset: disabled [ 86.221733][ T101] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:28:30 Registers: info registers vcpu 0 CPU#0 RAX=000000000000003d RBX=ffffffff9a668f40 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=0000000000000000 RSP=ffffc9000166e710 R8 =ffffffff8540b4bb R9 =1ffff11006671046 R10=dffffc0000000000 R11=ffffffff8540b470 R12=dffffc0000000000 R13=000000000000003d R14=000000000000003d R15=00000000000003f8 RIP=ffffffff8540b4ee RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88801fe00000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005555735c8ca8 CR3=00000000330fc000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000440401 Opmask01=0000000000000001 Opmask02=00000000fff7ffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffea2afcb70 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f54c73f1560 00007f54c73e55d8 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f54c73d7084 00007f54c73ea240 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65723d73726f7272 6500747865003036 36396f7369007265 6c6c616b7a797300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40571856574a5757 4000515d40001513 131c4a564c005740 4949444e5f5c5600 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000