Warning: Permanently added '[localhost]:29347' (ED25519) to the list of known hosts. executing program [ 75.211234][ T5098] loop0: detected capacity change from 0 to 32768 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 80.314899][ T101] BUG: spinlock bad magic on CPU#0, jfsCommit/101 [ 80.317393][ T101] ================================================================== [ 80.321707][ T101] BUG: KASAN: slab-out-of-bounds in string+0x218/0x2b0 [ 80.324333][ T101] Read of size 1 at addr ffff888040b2c0b8 by task jfsCommit/101 [ 80.326887][ T101] [ 80.327849][ T101] CPU: 0 UID: 0 PID: 101 Comm: jfsCommit Not tainted 6.11.0-syzkaller-05442-g932d2d1fcb2b #0 [ 80.331619][ T101] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.335768][ T101] Call Trace: [ 80.337104][ T101] [ 80.338245][ T101] dump_stack_lvl+0x241/0x360 [ 80.339964][ T101] ? __pfx_dump_stack_lvl+0x10/0x10 [ 80.341902][ T101] ? __pfx__printk+0x10/0x10 [ 80.343644][ T101] ? _printk+0xd5/0x120 [ 80.345377][ T101] ? __virt_addr_valid+0x183/0x530 [ 80.347292][ T101] ? __virt_addr_valid+0x183/0x530 [ 80.349297][ T101] print_report+0x169/0x550 [ 80.351068][ T101] ? __virt_addr_valid+0x183/0x530 [ 80.353058][ T101] ? __virt_addr_valid+0x183/0x530 [ 80.354952][ T101] ? __virt_addr_valid+0x45f/0x530 [ 80.356856][ T101] ? __phys_addr+0xba/0x170 [ 80.358628][ T101] ? string+0x218/0x2b0 [ 80.360159][ T101] kasan_report+0x143/0x180 [ 80.361780][ T101] ? string+0x218/0x2b0 [ 80.363300][ T101] string+0x218/0x2b0 [ 80.364790][ T101] vsnprintf+0x1101/0x1da0 [ 80.366527][ T101] ? __pfx_vsnprintf+0x10/0x10 [ 80.368385][ T101] vprintk_store+0x480/0x1160 [ 80.370205][ T101] ? __pfx_vprintk_store+0x10/0x10 [ 80.372135][ T101] ? prb_read_valid+0xa9/0xf0 [ 80.373957][ T101] ? __pfx___console_unlock+0x10/0x10 [ 80.376066][ T101] ? console_unlock+0x2fc/0x3b0 [ 80.378013][ T101] ? this_cpu_in_panic+0x4f/0x80 [ 80.379875][ T101] ? is_printk_legacy_deferred+0x43/0x50 [ 80.381861][ T101] ? printk_get_console_flush_type+0x1fe/0x4f0 [ 80.384104][ T101] vprintk_emit+0x271/0xa10 [ 80.385834][ T101] ? __pfx_vprintk_emit+0x10/0x10 [ 80.387740][ T101] ? __pfx_register_lock_class+0x10/0x10 [ 80.389682][ T101] _printk+0xd5/0x120 [ 80.391141][ T101] ? __pfx__printk+0x10/0x10 [ 80.392810][ T101] spin_bug+0x13b/0x1d0 [ 80.394423][ T101] do_raw_spin_lock+0x209/0x370 [ 80.396259][ T101] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 80.398371][ T101] _raw_spin_lock_irqsave+0xe1/0x120 [ 80.400261][ T101] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 80.402224][ T101] __wake_up_common_lock+0x25/0x1e0 [ 80.403910][ T101] release_metapage+0xb2/0x960 [ 80.405496][ T101] ? txFreeMap+0xa9c/0xd50 [ 80.407016][ T101] ? _raw_spin_unlock+0x28/0x50 [ 80.408784][ T101] ? __mark_inode_dirty+0x5b2/0xe90 [ 80.410609][ T101] xtTruncate+0x1006/0x3270 [ 80.412298][ T101] ? __pfx_xtTruncate+0x10/0x10 [ 80.414036][ T101] jfs_free_zero_link+0x46e/0x6e0 [ 80.415704][ T101] ? inode_wait_for_writeback+0x111/0x2a0 [ 80.417545][ T101] ? __pfx_jfs_free_zero_link+0x10/0x10 [ 80.419319][ T101] jfs_evict_inode+0x35f/0x440 [ 80.421163][ T101] ? __pfx_jfs_evict_inode+0x10/0x10 [ 80.423188][ T101] evict+0x4e8/0x9b0 [ 80.424662][ T101] ? __pfx_evict+0x10/0x10 [ 80.426275][ T101] ? iput+0x713/0xa50 [ 80.427575][ T101] txUpdateMap+0x931/0xb10 [ 80.429234][ T101] ? __pfx_txUpdateMap+0x10/0x10 [ 80.431016][ T101] jfs_lazycommit+0x49a/0xb80 [ 80.432782][ T101] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 80.435144][ T101] ? lockdep_hardirqs_on+0x99/0x150 [ 80.437098][ T101] ? __pfx_jfs_lazycommit+0x10/0x10 [ 80.439021][ T101] ? __pfx_default_wake_function+0x10/0x10 [ 80.441108][ T101] ? __kthread_parkme+0x169/0x1d0 [ 80.442978][ T101] ? __pfx_jfs_lazycommit+0x10/0x10 [ 80.444884][ T101] kthread+0x2f0/0x390 [ 80.446407][ T101] ? __pfx_jfs_lazycommit+0x10/0x10 [ 80.448361][ T101] ? __pfx_kthread+0x10/0x10 [ 80.450106][ T101] ret_from_fork+0x4b/0x80 [ 80.451794][ T101] ? __pfx_kthread+0x10/0x10 [ 80.453474][ T101] ret_from_fork_asm+0x1a/0x30 [ 80.455242][ T101] [ 80.456350][ T101] [ 80.457097][ T101] The buggy address belongs to the object at ffff888040b2c088 [ 80.457097][ T101] which belongs to the cache jfs_ip of size 2232 [ 80.461917][ T101] The buggy address is located 48 bytes inside of [ 80.461917][ T101] allocated 2232-byte region [ffff888040b2c088, ffff888040b2c940) [ 80.466903][ T101] [ 80.467820][ T101] The buggy address belongs to the physical page: [ 80.470109][ T101] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x40b28 [ 80.473234][ T101] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 80.476316][ T101] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 80.479131][ T101] page_type: 0xfdffffff(slab) [ 80.480903][ T101] raw: 04fff00000000040 ffff8880330903c0 dead000000000122 0000000000000000 [ 80.483991][ T101] raw: 0000000000000000 00000000800d000d 00000001fdffffff 0000000000000000 [ 80.487113][ T101] head: 04fff00000000040 ffff8880330903c0 dead000000000122 0000000000000000 [ 80.490257][ T101] head: 0000000000000000 00000000800d000d 00000001fdffffff 0000000000000000 [ 80.493396][ T101] head: 04fff00000000003 ffffea000102ca01 ffffffffffffffff 0000000000000000 [ 80.496441][ T101] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 80.499168][ T101] page dumped because: kasan: bad access detected [ 80.501347][ T101] page_owner tracks the page as allocated [ 80.503461][ T101] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_RECLAIMABLE), pid 5098, tgid 5098 (syz-executor336), ts 75232262298, free_ts 0 [ 80.511177][ T101] post_alloc_hook+0x1f3/0x230 [ 80.512936][ T101] get_page_from_freelist+0x2e4c/0x2f10 [ 80.514961][ T101] __alloc_pages_noprof+0x256/0x6c0 [ 80.516887][ T101] alloc_pages_mpol_noprof+0x3e8/0x680 [ 80.518886][ T101] alloc_slab_page+0x6a/0x130 [ 80.520556][ T101] allocate_slab+0x5a/0x2f0 [ 80.522211][ T101] ___slab_alloc+0xcd1/0x14b0 [ 80.523965][ T101] __slab_alloc+0x58/0xa0 [ 80.525570][ T101] kmem_cache_alloc_lru_noprof+0x1c5/0x2b0 [ 80.527700][ T101] jfs_alloc_inode+0x28/0x70 [ 80.529334][ T101] new_inode+0x6e/0x310 [ 80.530664][ T101] jfs_fill_super+0x408/0xc50 [ 80.532296][ T101] mount_bdev+0x20a/0x2d0 [ 80.533856][ T101] legacy_get_tree+0xee/0x190 [ 80.535596][ T101] vfs_get_tree+0x90/0x2b0 [ 80.537299][ T101] do_new_mount+0x2be/0xb40 [ 80.539022][ T101] page_owner free stack trace missing [ 80.540892][ T101] [ 80.541759][ T101] Memory state around the buggy address: [ 80.543654][ T101] ffff888040b2bf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 80.546575][ T101] ffff888040b2c000: 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 80.549484][ T101] >ffff888040b2c080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 80.552346][ T101] ^ [ 80.554553][ T101] ffff888040b2c100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 80.557611][ T101] ffff888040b2c180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 80.560417][ T101] ================================================================== [ 80.563153][ T101] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 80.565492][ T101] CPU: 0 UID: 0 PID: 101 Comm: jfsCommit Not tainted 6.11.0-syzkaller-05442-g932d2d1fcb2b #0 [ 80.569082][ T101] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.572781][ T101] Call Trace: [ 80.573983][ T101] [ 80.575026][ T101] dump_stack_lvl+0x241/0x360 [ 80.576711][ T101] ? __pfx_dump_stack_lvl+0x10/0x10 [ 80.578667][ T101] ? __pfx__printk+0x10/0x10 [ 80.580472][ T101] ? rcu_is_watching+0x15/0xb0 [ 80.582271][ T101] ? lock_release+0xbf/0xa30 [ 80.583899][ T101] ? vscnprintf+0x5d/0x90 [ 80.585423][ T101] panic+0x349/0x870 [ 80.586797][ T101] ? check_panic_on_warn+0x21/0xb0 [ 80.588489][ T101] ? __pfx_panic+0x10/0x10 [ 80.589896][ T101] ? do_raw_spin_unlock+0x58/0x8b0 [ 80.591516][ T101] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 80.593485][ T101] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 80.595698][ T101] ? print_report+0x502/0x550 [ 80.597484][ T101] check_panic_on_warn+0x86/0xb0 [ 80.599316][ T101] ? string+0x218/0x2b0 [ 80.600817][ T101] end_report+0x77/0x160 [ 80.602364][ T101] kasan_report+0x154/0x180 [ 80.603976][ T101] ? string+0x218/0x2b0 [ 80.605478][ T101] string+0x218/0x2b0 [ 80.606924][ T101] vsnprintf+0x1101/0x1da0 [ 80.608560][ T101] ? __pfx_vsnprintf+0x10/0x10 [ 80.610280][ T101] vprintk_store+0x480/0x1160 [ 80.611968][ T101] ? __pfx_vprintk_store+0x10/0x10 [ 80.613924][ T101] ? prb_read_valid+0xa9/0xf0 [ 80.615671][ T101] ? __pfx___console_unlock+0x10/0x10 [ 80.617673][ T101] ? console_unlock+0x2fc/0x3b0 [ 80.619456][ T101] ? this_cpu_in_panic+0x4f/0x80 [ 80.621316][ T101] ? is_printk_legacy_deferred+0x43/0x50 [ 80.623366][ T101] ? printk_get_console_flush_type+0x1fe/0x4f0 [ 80.625568][ T101] vprintk_emit+0x271/0xa10 [ 80.627148][ T101] ? __pfx_vprintk_emit+0x10/0x10 [ 80.628907][ T101] ? __pfx_register_lock_class+0x10/0x10 [ 80.631072][ T101] _printk+0xd5/0x120 [ 80.632497][ T101] ? __pfx__printk+0x10/0x10 [ 80.634285][ T101] spin_bug+0x13b/0x1d0 [ 80.635776][ T101] do_raw_spin_lock+0x209/0x370 [ 80.637556][ T101] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 80.639547][ T101] _raw_spin_lock_irqsave+0xe1/0x120 [ 80.641601][ T101] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 80.643893][ T101] __wake_up_common_lock+0x25/0x1e0 [ 80.645765][ T101] release_metapage+0xb2/0x960 [ 80.647513][ T101] ? txFreeMap+0xa9c/0xd50 [ 80.649094][ T101] ? _raw_spin_unlock+0x28/0x50 [ 80.650887][ T101] ? __mark_inode_dirty+0x5b2/0xe90 [ 80.652669][ T101] xtTruncate+0x1006/0x3270 [ 80.654173][ T101] ? __pfx_xtTruncate+0x10/0x10 [ 80.655953][ T101] jfs_free_zero_link+0x46e/0x6e0 [ 80.657850][ T101] ? inode_wait_for_writeback+0x111/0x2a0 [ 80.659890][ T101] ? __pfx_jfs_free_zero_link+0x10/0x10 [ 80.661992][ T101] jfs_evict_inode+0x35f/0x440 [ 80.663787][ T101] ? __pfx_jfs_evict_inode+0x10/0x10 [ 80.665570][ T101] evict+0x4e8/0x9b0 [ 80.666807][ T101] ? __pfx_evict+0x10/0x10 [ 80.668393][ T101] ? iput+0x713/0xa50 [ 80.669729][ T101] txUpdateMap+0x931/0xb10 [ 80.671237][ T101] ? __pfx_txUpdateMap+0x10/0x10 [ 80.673026][ T101] jfs_lazycommit+0x49a/0xb80 [ 80.674776][ T101] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 80.676903][ T101] ? lockdep_hardirqs_on+0x99/0x150 [ 80.678667][ T101] ? __pfx_jfs_lazycommit+0x10/0x10 [ 80.680360][ T101] ? __pfx_default_wake_function+0x10/0x10 [ 80.682357][ T101] ? __kthread_parkme+0x169/0x1d0 [ 80.684159][ T101] ? __pfx_jfs_lazycommit+0x10/0x10 [ 80.686136][ T101] kthread+0x2f0/0x390 [ 80.687509][ T101] ? __pfx_jfs_lazycommit+0x10/0x10 [ 80.689399][ T101] ? __pfx_kthread+0x10/0x10 [ 80.691109][ T101] ret_from_fork+0x4b/0x80 [ 80.692825][ T101] ? __pfx_kthread+0x10/0x10 [ 80.694450][ T101] ret_from_fork_asm+0x1a/0x30 [ 80.696239][ T101] [ 80.697680][ T101] Kernel Offset: disabled [ 80.699341][ T101] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:36:26 Registers: info registers vcpu 0 CPU#0 RAX=000000000000003d RBX=ffffffff9a6e1f00 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=0000000000000000 RSP=ffffc9000165e730 R8 =ffffffff8544209b R9 =1ffff110001e7046 R10=dffffc0000000000 R11=ffffffff85442050 R12=dffffc0000000000 R13=ffffffff9a3defd8 R14=000000000000003d R15=00000000000003f8 RIP=ffffffff854420ce RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88801fe00000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2a521ff000 CR3=0000000011a28000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000440401 Opmask01=0000000000000001 Opmask02=00000000fff7ffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff2b300710 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2a597a1560 00007f2a597955d8 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2a59787084 00007f2a5979a240 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65723d73726f7272 6500747865003036 36396f7369007265 6c6c616b7a797300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40571856574a5757 4000515d40001513 131c4a564c005740 4949444e5f5c5600 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000