./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1467993826

<...>
Warning: Permanently added '10.128.1.225' (ED25519) to the list of known hosts.
execve("./syz-executor1467993826", ["./syz-executor1467993826"], 0x7ffe18cfd650 /* 10 vars */) = 0
brk(NULL)                               = 0x55557c507000
brk(0x55557c507d00)                     = 0x55557c507d00
arch_prctl(ARCH_SET_FS, 0x55557c507380) = 0
set_tid_address(0x55557c507650)         = 5227
set_robust_list(0x55557c507660, 24)     = 0
rseq(0x55557c507ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor1467993826", 4096) = 28
getrandom("\x6b\x8f\xb5\x4f\x37\xfd\x36\xa2", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x55557c507d00
brk(0x55557c528d00)                     = 0x55557c528d00
brk(0x55557c529000)                     = 0x55557c529000
mprotect(0x7f1204534000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
unshare(CLONE_NEWPID)                   = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5228 attached
 <unfinished ...>
[pid  5228] set_robust_list(0x55557c507660, 24 <unfinished ...>
[pid  5227] <... clone resumed>, child_tidptr=0x55557c507650) = 5228
[pid  5228] <... set_robust_list resumed>) = 0
[pid  5228] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy)
[pid  5228] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5228] setsid()                    = 1
[pid  5228] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0
[pid  5228] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0
[pid  5228] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0
[pid  5228] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0
[pid  5228] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0
[pid  5228] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0
[pid  5228] unshare(CLONE_NEWNS)        = 0
[pid  5228] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0
[pid  5228] unshare(CLONE_NEWIPC)       = 0
[pid  5228] unshare(CLONE_NEWCGROUP)    = 0
[pid  5228] unshare(CLONE_NEWUTS)       = 0
[pid  5228] unshare(CLONE_SYSVSEM)      = 0
[pid  5228] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3
[pid  5228] write(3, "16777216", 8)     = 8
[pid  5228] close(3)                    = 0
[pid  5228] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3
[pid  5228] write(3, "536870912", 9)    = 9
[pid  5228] close(3)                    = 0
[pid  5228] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3
[pid  5228] write(3, "1024", 4)         = 4
[pid  5228] close(3)                    = 0
[pid  5228] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3
[pid  5228] write(3, "8192", 4)         = 4
[pid  5228] close(3)                    = 0
[pid  5228] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3
[pid  5228] write(3, "1024", 4)         = 4
[pid  5228] close(3)                    = 0
[pid  5228] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3
[pid  5228] write(3, "1024", 4)         = 4
[pid  5228] close(3)                    = 0
[pid  5228] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3
[pid  5228] write(3, "1024 1048576 500 1024", 21) = 21
[pid  5228] close(3)                    = 0
[pid  5228] getpid()                    = 1
[pid  5228] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PTRACE|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_NICE|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, permitted=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PTRACE|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_NICE|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, inheritable=0}) = 0
[pid  5228] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, permitted=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, inheritable=0}) = 0
[pid  5228] unshare(CLONE_NEWNET)       = 0
[pid  5228] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3
[pid  5228] write(3, "0 65535", 7)      = 7
[pid  5228] close(3)                    = 0
[pid  5228] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3
[pid  5228] write(3, "100000", 6)       = 6
[pid  5228] close(3)                    = 0
[pid  5228] mkdir("./syz-tmp", 0777)    = 0
[pid  5228] mount("", "./syz-tmp", "tmpfs", 0, NULL) = 0
[pid  5228] mkdir("./syz-tmp/newroot", 0777) = 0
[pid  5228] mkdir("./syz-tmp/newroot/dev", 0700) = 0
[pid  5228] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0
[pid  5228] mkdir("./syz-tmp/newroot/proc", 0700) = 0
[pid  5228] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL) = 0
[pid  5228] mkdir("./syz-tmp/newroot/selinux", 0700) = 0
[pid  5228] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory)
[pid  5228] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory)
[pid  5228] mkdir("./syz-tmp/newroot/sys", 0700) = 0
[pid  5228] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0
[pid  5228] mkdir("./syz-tmp/pivot", 0777) = 0
[pid  5228] pivot_root("./syz-tmp", "./syz-tmp/pivot") = 0
[pid  5228] chdir("/")                  = 0
[pid  5228] umount2("./pivot", MNT_DETACH) = 0
[pid  5228] chroot("./newroot")         = 0
[pid  5228] chdir("/")                  = 0
[pid  5228] mkdir("/dev/binderfs", 0777) = 0
[pid  5228] mount("binder", "/dev/binderfs", "binder", 0, NULL) = 0
[pid  5228] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5228] write(1, "executing program\n", 18executing program
) = 18
[pid  5228] memfd_create("syzkaller", 0) = 3
[pid  5228] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f11fc000000
[pid  5228] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5228] munmap(0x7f11fc000000, 138412032) = 0
[pid  5228] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5228] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5228] close(3)                    = 0
[pid  5228] close(4)                    = 0
[pid  5228] mkdir("./file7", 0777)      = 0
[pid  5228] mount("/dev/loop0", "./file7", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME, "") = 0
[pid  5228] openat(AT_FDCWD, "./file7", O_RDONLY|O_DIRECTORY) = 3
[pid  5228] chdir("./file7")            = 0
[pid  5228] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5228] openat(AT_FDCWD, "./file0", O_RDONLY) = 4
[pid  5228] unlinkat(4, "./file0", 0)   = 0
[pid  5228] exit_group(1)               = ?
[   70.504631][ T5228] loop0: detected capacity change from 0 to 32768
[   70.570784][  T113] BUG: spinlock bad magic on CPU#0, jfsCommit/113
[   70.577295][  T113] ==================================================================
[   70.585391][  T113] BUG: KASAN: slab-out-of-bounds in string+0x218/0x2b0
[   70.592306][  T113] Read of size 1 at addr ffff88807512ae48 by task jfsCommit/113
[   70.599958][  T113] 
[   70.602292][  T113] CPU: 0 UID: 0 PID: 113 Comm: jfsCommit Not tainted 6.11.0-syzkaller-07262-g839c4f596f89 #0
[   70.612465][  T113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[   70.622524][  T113] Call Trace:
[   70.625805][  T113]  <TASK>
[   70.628731][  T113]  dump_stack_lvl+0x241/0x360
[   70.633411][  T113]  ? __pfx_dump_stack_lvl+0x10/0x10
[   70.638786][  T113]  ? __pfx__printk+0x10/0x10
[   70.643375][  T113]  ? _printk+0xd5/0x120
[   70.647534][  T113]  ? __virt_addr_valid+0x183/0x530
[   70.652641][  T113]  ? __virt_addr_valid+0x183/0x530
[   70.657747][  T113]  print_report+0x169/0x550
[   70.662247][  T113]  ? __virt_addr_valid+0x183/0x530
[   70.667353][  T113]  ? __virt_addr_valid+0x183/0x530
[   70.672455][  T113]  ? __virt_addr_valid+0x45f/0x530
[   70.677577][  T113]  ? __phys_addr+0xba/0x170
[   70.682073][  T113]  ? string+0x218/0x2b0
[   70.686224][  T113]  kasan_report+0x143/0x180
[   70.690727][  T113]  ? string+0x218/0x2b0
[   70.694878][  T113]  string+0x218/0x2b0
[   70.698875][  T113]  vsnprintf+0x1101/0x1da0
[   70.703417][  T113]  ? __pfx_vsnprintf+0x10/0x10
[   70.708198][  T113]  vprintk_store+0x480/0x1160
[   70.712907][  T113]  ? __pfx_vprintk_store+0x10/0x10
[   70.718083][  T113]  ? prb_read_valid+0xa9/0xf0
[   70.722877][  T113]  ? __pfx___console_unlock+0x10/0x10
[   70.728347][  T113]  ? console_unlock+0x2fc/0x3b0
[   70.733201][  T113]  ? this_cpu_in_panic+0x4f/0x80
[   70.738142][  T113]  ? is_printk_legacy_deferred+0x43/0x50
[   70.743793][  T113]  ? printk_get_console_flush_type+0x1fe/0x4f0
[   70.749949][  T113]  vprintk_emit+0x271/0xa10
[   70.754466][  T113]  ? __pfx_vprintk_emit+0x10/0x10
[   70.759516][  T113]  ? __pfx_register_lock_class+0x10/0x10
[   70.765176][  T113]  _printk+0xd5/0x120
[   70.769170][  T113]  ? __pfx__printk+0x10/0x10
[   70.773787][  T113]  spin_bug+0x13b/0x1d0
[   70.777957][  T113]  do_raw_spin_lock+0x209/0x370
[   70.782816][  T113]  ? __pfx_do_raw_spin_lock+0x10/0x10
[   70.788196][  T113]  _raw_spin_lock_irqsave+0xe1/0x120
[   70.793516][  T113]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[   70.799428][  T113]  __wake_up_common_lock+0x25/0x1e0
[   70.804660][  T113]  release_metapage+0xb2/0x960
[   70.809436][  T113]  ? txFreeMap+0xa9c/0xd50
[   70.813843][  T113]  ? _raw_spin_unlock+0x28/0x50
[   70.818691][  T113]  ? __mark_inode_dirty+0x5b2/0xe90
[   70.823882][  T113]  xtTruncate+0x1006/0x3270
[   70.828405][  T113]  ? __pfx_xtTruncate+0x10/0x10
[   70.833273][  T113]  jfs_free_zero_link+0x46e/0x6e0
[   70.838318][  T113]  ? inode_wait_for_writeback+0x111/0x2a0
[   70.844049][  T113]  ? __pfx_jfs_free_zero_link+0x10/0x10
[   70.849598][  T113]  jfs_evict_inode+0x35f/0x440
[   70.854372][  T113]  ? __pfx_jfs_evict_inode+0x10/0x10
[   70.859672][  T113]  evict+0x4e8/0x9b0
[   70.863567][  T113]  ? __pfx_evict+0x10/0x10
[   70.867985][  T113]  ? iput+0x713/0xa50
[   70.871999][  T113]  txUpdateMap+0x931/0xb10
[   70.876423][  T113]  ? __pfx_txUpdateMap+0x10/0x10
[   70.881452][  T113]  jfs_lazycommit+0x49a/0xb80
[   70.886126][  T113]  ? _raw_spin_unlock_irqrestore+0x8f/0x140
[   70.892030][  T113]  ? lockdep_hardirqs_on+0x99/0x150
[   70.897237][  T113]  ? __pfx_jfs_lazycommit+0x10/0x10
[   70.902429][  T113]  ? __pfx_default_wake_function+0x10/0x10
[   70.908242][  T113]  ? __kthread_parkme+0x169/0x1d0
[   70.913270][  T113]  ? __pfx_jfs_lazycommit+0x10/0x10
[   70.918465][  T113]  kthread+0x2f0/0x390
[   70.922530][  T113]  ? __pfx_jfs_lazycommit+0x10/0x10
[   70.927723][  T113]  ? __pfx_kthread+0x10/0x10
[   70.932307][  T113]  ret_from_fork+0x4b/0x80
[   70.936741][  T113]  ? __pfx_kthread+0x10/0x10
[   70.941327][  T113]  ret_from_fork_asm+0x1a/0x30
[   70.946099][  T113]  </TASK>
[   70.949110][  T113] 
[   70.951439][  T113] The buggy address belongs to the object at ffff88807512ae18
[   70.951439][  T113]  which belongs to the cache jfs_ip of size 2232
[   70.965160][  T113] The buggy address is located 48 bytes inside of
[   70.965160][  T113]  allocated 2232-byte region [ffff88807512ae18, ffff88807512b6d0)
[   70.979297][  T113] 
[   70.981625][  T113] The buggy address belongs to the physical page:
[   70.988036][  T113] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x75128
[   70.996797][  T113] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   71.005475][  T113] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[   71.013102][  T113] page_type: 0xfdffffff(slab)
[   71.017773][  T113] raw: 00fff00000000040 ffff888147aa8140 dead000000000122 0000000000000000
[   71.026353][  T113] raw: 0000000000000000 00000000800d000d 00000001fdffffff 0000000000000000
[   71.034933][  T113] head: 00fff00000000040 ffff888147aa8140 dead000000000122 0000000000000000
[   71.044030][  T113] head: 0000000000000000 00000000800d000d 00000001fdffffff 0000000000000000
[   71.052734][  T113] head: 00fff00000000003 ffffea0001d44a01 ffffffffffffffff 0000000000000000
[   71.061411][  T113] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[   71.070079][  T113] page dumped because: kasan: bad access detected
[   71.076494][  T113] page_owner tracks the page as allocated
[   71.082198][  T113] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_RECLAIMABLE), pid 5228, tgid 5228 (syz-executor146), ts 70532394106, free_ts 21368293119
[   71.104772][  T113]  post_alloc_hook+0x1f3/0x230
[   71.109544][  T113]  get_page_from_freelist+0x2e4c/0x2f10
[   71.115105][  T113]  __alloc_pages_noprof+0x256/0x6c0
[   71.120297][  T113]  alloc_pages_mpol_noprof+0x3e8/0x680
[   71.125748][  T113]  alloc_slab_page+0x6a/0x130
[   71.130436][  T113]  allocate_slab+0x5a/0x2f0
[   71.134948][  T113]  ___slab_alloc+0xcd1/0x14b0
[   71.139637][  T113]  __slab_alloc+0x58/0xa0
[   71.143995][  T113]  kmem_cache_alloc_lru_noprof+0x1c5/0x2b0
[   71.149846][  T113]  jfs_alloc_inode+0x28/0x70
[   71.154458][  T113]  new_inode+0x6e/0x310
[   71.158652][  T113]  diReadSpecial+0x52/0x680
[   71.163159][  T113]  jfs_mount+0x175/0x830
[   71.167434][  T113]  jfs_fill_super+0x59c/0xc50
[   71.172198][  T113]  mount_bdev+0x20a/0x2d0
[   71.176531][  T113]  legacy_get_tree+0xee/0x190
[   71.181309][  T113] page last free pid 1 tgid 1 stack trace:
[   71.187201][  T113]  free_unref_page+0xd19/0xea0
[   71.192052][  T113]  free_contig_range+0x9e/0x160
[   71.196927][  T113]  destroy_args+0x8a/0x890
[   71.201737][  T113]  debug_vm_pgtable+0x4be/0x550
[   71.206615][  T113]  do_one_initcall+0x248/0x880
[   71.211473][  T113]  do_initcall_level+0x157/0x210
[   71.216412][  T113]  do_initcalls+0x3f/0x80
[   71.220737][  T113]  kernel_init_freeable+0x435/0x5d0
[   71.225940][  T113]  kernel_init+0x1d/0x2b0
[   71.230300][  T113]  ret_from_fork+0x4b/0x80
[   71.234731][  T113]  ret_from_fork_asm+0x1a/0x30
[   71.239506][  T113] 
[   71.241823][  T113] Memory state around the buggy address:
[   71.247452][  T113]  ffff88807512ad00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   71.255522][  T113]  ffff88807512ad80: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc
[   71.263585][  T113] >ffff88807512ae00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   71.271643][  T113]                                               ^
[   71.278053][  T113]  ffff88807512ae80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   71.286108][  T113]  ffff88807512af00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   71.294191][  T113] ==================================================================
[   71.302269][  T113] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   71.309472][  T113] CPU: 0 UID: 0 PID: 113 Comm: jfsCommit Not tainted 6.11.0-syzkaller-07262-g839c4f596f89 #0
[   71.319617][  T113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[   71.329666][  T113] Call Trace:
[   71.332964][  T113]  <TASK>
[   71.335892][  T113]  dump_stack_lvl+0x241/0x360
[   71.340672][  T113]  ? __pfx_dump_stack_lvl+0x10/0x10
[   71.345878][  T113]  ? __pfx__printk+0x10/0x10
[   71.350565][  T113]  ? rcu_is_watching+0x15/0xb0
[   71.355327][  T113]  ? lock_release+0xbf/0xa30
[   71.359919][  T113]  ? vscnprintf+0x5d/0x90
[   71.364249][  T113]  panic+0x349/0x880
[   71.368148][  T113]  ? check_panic_on_warn+0x21/0xb0
[   71.373259][  T113]  ? __pfx_panic+0x10/0x10
[   71.377687][  T113]  ? do_raw_spin_unlock+0x13c/0x8b0
[   71.382883][  T113]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[   71.388780][  T113]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   71.395193][  T113]  ? print_report+0x502/0x550
[   71.399868][  T113]  check_panic_on_warn+0x86/0xb0
[   71.404801][  T113]  ? string+0x218/0x2b0
[   71.408967][  T113]  end_report+0x77/0x160
[   71.413342][  T113]  kasan_report+0x154/0x180
[   71.417972][  T113]  ? string+0x218/0x2b0
[   71.422123][  T113]  string+0x218/0x2b0
[   71.426102][  T113]  vsnprintf+0x1101/0x1da0
[   71.430517][  T113]  ? __pfx_vsnprintf+0x10/0x10
[   71.435277][  T113]  vprintk_store+0x480/0x1160
[   71.439953][  T113]  ? __pfx_vprintk_store+0x10/0x10
[   71.445061][  T113]  ? prb_read_valid+0xa9/0xf0
[   71.449734][  T113]  ? __pfx___console_unlock+0x10/0x10
[   71.455139][  T113]  ? console_unlock+0x2fc/0x3b0
[   71.460001][  T113]  ? this_cpu_in_panic+0x4f/0x80
[   71.464949][  T113]  ? is_printk_legacy_deferred+0x43/0x50
[   71.470584][  T113]  ? printk_get_console_flush_type+0x1fe/0x4f0
[   71.476734][  T113]  vprintk_emit+0x271/0xa10
[   71.481232][  T113]  ? __pfx_vprintk_emit+0x10/0x10
[   71.486251][  T113]  ? __pfx_register_lock_class+0x10/0x10
[   71.491998][  T113]  _printk+0xd5/0x120
[   71.495987][  T113]  ? __pfx__printk+0x10/0x10
[   71.500603][  T113]  spin_bug+0x13b/0x1d0
[   71.504764][  T113]  do_raw_spin_lock+0x209/0x370
[   71.509791][  T113]  ? __pfx_do_raw_spin_lock+0x10/0x10
[   71.515216][  T113]  _raw_spin_lock_irqsave+0xe1/0x120
[   71.520504][  T113]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[   71.526402][  T113]  __wake_up_common_lock+0x25/0x1e0
[   71.531696][  T113]  release_metapage+0xb2/0x960
[   71.536486][  T113]  ? txFreeMap+0xa9c/0xd50
[   71.540898][  T113]  ? _raw_spin_unlock+0x28/0x50
[   71.545751][  T113]  ? __mark_inode_dirty+0x5b2/0xe90
[   71.551121][  T113]  xtTruncate+0x1006/0x3270
[   71.555642][  T113]  ? __pfx_xtTruncate+0x10/0x10
[   71.560590][  T113]  jfs_free_zero_link+0x46e/0x6e0
[   71.565666][  T113]  ? inode_wait_for_writeback+0x111/0x2a0
[   71.571412][  T113]  ? __pfx_jfs_free_zero_link+0x10/0x10
[   71.576981][  T113]  jfs_evict_inode+0x35f/0x440
[   71.581754][  T113]  ? __pfx_jfs_evict_inode+0x10/0x10
[   71.587043][  T113]  evict+0x4e8/0x9b0
[   71.590965][  T113]  ? __pfx_evict+0x10/0x10
[   71.595404][  T113]  ? iput+0x713/0xa50
[   71.599408][  T113]  txUpdateMap+0x931/0xb10
[   71.603835][  T113]  ? __pfx_txUpdateMap+0x10/0x10
[   71.608796][  T113]  jfs_lazycommit+0x49a/0xb80
[   71.613483][  T113]  ? _raw_spin_unlock_irqrestore+0x8f/0x140
[   71.619405][  T113]  ? lockdep_hardirqs_on+0x99/0x150
[   71.624632][  T113]  ? __pfx_jfs_lazycommit+0x10/0x10
[   71.629829][  T113]  ? __pfx_default_wake_function+0x10/0x10
[   71.635640][  T113]  ? __kthread_parkme+0x169/0x1d0
[   71.640675][  T113]  ? __pfx_jfs_lazycommit+0x10/0x10
[   71.645891][  T113]  kthread+0x2f0/0x390
[   71.649959][  T113]  ? __pfx_jfs_lazycommit+0x10/0x10
[   71.655504][  T113]  ? __pfx_kthread+0x10/0x10
[   71.660102][  T113]  ret_from_fork+0x4b/0x80
[   71.664525][  T113]  ? __pfx_kthread+0x10/0x10
[   71.669123][  T113]  ret_from_fork_asm+0x1a/0x30
[   71.673901][  T113]  </TASK>
[   71.677451][  T113] Kernel Offset: disabled
[   71.681780][  T113] Rebooting in 86400 seconds..