Warning: Permanently added '10.128.0.126' (ED25519) to the list of known hosts. executing program [ 36.777687][ T4291] loop0: detected capacity change from 0 to 32768 [ 36.788291][ T4291] read_mapping_page failed! [ 36.789379][ T4291] ERROR: (device loop0): txAbort: [ 36.789379][ T4291] [ 36.791161][ T4291] ERROR: (device loop0): remounting filesystem as read-only [ 36.798163][ T4290] BUG: spinlock bad magic on CPU#1, syz-executor131/4290 [ 36.799622][ T4290] ================================================================== [ 36.801218][ T4290] BUG: KASAN: slab-out-of-bounds in string+0x1dc/0x264 [ 36.802583][ T4290] Read of size 1 at addr ffff0000e4c6d320 by task syz-executor131/4290 [ 36.804143][ T4290] [ 36.804629][ T4290] CPU: 1 PID: 4290 Comm: syz-executor131 Not tainted 6.1.126-syzkaller #0 [ 36.806328][ T4290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 36.808228][ T4290] Call trace: [ 36.808897][ T4290] dump_backtrace+0x1c8/0x1f4 [ 36.809926][ T4290] show_stack+0x2c/0x3c [ 36.810794][ T4290] dump_stack_lvl+0x108/0x170 [ 36.811795][ T4290] print_report+0x174/0x4c0 [ 36.812668][ T4290] kasan_report+0xd4/0x130 [ 36.813613][ T4290] __asan_report_load1_noabort+0x2c/0x38 [ 36.814719][ T4290] string+0x1dc/0x264 [ 36.815474][ T4290] vsnprintf+0xe9c/0x1a8c [ 36.816317][ T4290] vprintk_store+0x3c4/0xdc8 [ 36.817313][ T4290] vprintk_emit+0x110/0x2e8 [ 36.818277][ T4290] vprintk_default+0xa0/0xe4 [ 36.819213][ T4290] vprintk+0x200/0x2d4 [ 36.820110][ T4290] _printk+0xdc/0x128 [ 36.820867][ T4290] spin_bug+0x120/0x240 [ 36.821688][ T4290] do_raw_spin_lock+0x1fc/0x358 [ 36.822655][ T4290] _raw_spin_lock_irqsave+0x74/0xb4 [ 36.823744][ T4290] __wake_up+0xec/0x1a8 [ 36.824581][ T4290] release_metapage+0x19c/0xc84 [ 36.825500][ T4290] xtTruncate+0xc78/0x2a08 [ 36.826430][ T4290] jfs_free_zero_link+0x374/0x598 [ 36.827444][ T4290] jfs_evict_inode+0x300/0x3f4 [ 36.828455][ T4290] evict+0x418/0x894 [ 36.829245][ T4290] iput+0x7c0/0x8a4 [ 36.830058][ T4290] dentry_unlink_inode+0x37c/0x4bc [ 36.831096][ T4290] __dentry_kill+0x324/0x5e4 [ 36.832001][ T4290] shrink_dentry_list+0x41c/0x850 [ 36.833040][ T4290] shrink_dcache_parent+0xbc/0x434 [ 36.834021][ T4290] do_one_tree+0x30/0xfc [ 36.834913][ T4290] shrink_dcache_for_umount+0x80/0x12c [ 36.836022][ T4290] generic_shutdown_super+0x68/0x328 [ 36.837114][ T4290] kill_block_super+0x70/0xdc [ 36.838031][ T4290] deactivate_locked_super+0xac/0x124 [ 36.839226][ T4290] deactivate_super+0xf0/0x110 [ 36.840166][ T4290] cleanup_mnt+0x394/0x41c [ 36.841094][ T4290] __cleanup_mnt+0x20/0x30 [ 36.841949][ T4290] task_work_run+0x240/0x2f0 [ 36.842944][ T4290] do_notify_resume+0x2080/0x2cb8 [ 36.843954][ T4290] el0_svc+0x9c/0x168 [ 36.844768][ T4290] el0t_64_sync_handler+0x84/0xf0 [ 36.845819][ T4290] el0t_64_sync+0x18c/0x190 [ 36.846658][ T4290] [ 36.847205][ T4290] Allocated by task 4291: [ 36.848167][ T4290] kasan_set_track+0x4c/0x80 [ 36.849103][ T4290] kasan_save_alloc_info+0x24/0x30 [ 36.850154][ T4290] __kasan_slab_alloc+0x74/0x8c [ 36.851232][ T4290] slab_post_alloc_hook+0x74/0x458 [ 36.852313][ T4290] kmem_cache_alloc_lru+0x1ac/0x2f8 [ 36.853366][ T4290] jfs_alloc_inode+0x2c/0x68 [ 36.854438][ T4290] iget_locked+0x170/0x708 [ 36.855271][ T4290] jfs_iget+0x30/0x364 [ 36.856080][ T4290] jfs_lookup+0x1e8/0x39c [ 36.857003][ T4290] lookup_one_qstr_excl+0x108/0x230 [ 36.858169][ T4290] do_renameat2+0x5b8/0xe64 [ 36.859167][ T4290] __arm64_sys_renameat2+0xe0/0xfc [ 36.860289][ T4290] invoke_syscall+0x98/0x2bc [ 36.861133][ T4290] el0_svc_common+0x138/0x258 [ 36.862030][ T4290] do_el0_svc+0x58/0x13c [ 36.862877][ T4290] el0_svc+0x58/0x168 [ 36.863717][ T4290] el0t_64_sync_handler+0x84/0xf0 [ 36.864720][ T4290] el0t_64_sync+0x18c/0x190 [ 36.865575][ T4290] [ 36.866026][ T4290] The buggy address belongs to the object at ffff0000e4c6ca00 [ 36.866026][ T4290] which belongs to the cache jfs_ip of size 2240 [ 36.868707][ T4290] The buggy address is located 96 bytes to the right of [ 36.868707][ T4290] 2240-byte region [ffff0000e4c6ca00, ffff0000e4c6d2c0) [ 36.871501][ T4290] [ 36.871973][ T4290] The buggy address belongs to the physical page: [ 36.873139][ T4290] page:00000000b5a721e0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x124c68 [ 36.875257][ T4290] head:00000000b5a721e0 order:3 compound_mapcount:0 compound_pincount:0 [ 36.876916][ T4290] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 36.878629][ T4290] raw: 05ffc00000010200 0000000000000000 dead000000000122 ffff0000c6f98300 [ 36.880434][ T4290] raw: 0000000000000000 00000000800d000d 00000001ffffffff 0000000000000000 [ 36.882145][ T4290] page dumped because: kasan: bad access detected [ 36.883485][ T4290] [ 36.883977][ T4290] Memory state around the buggy address: [ 36.885069][ T4290] ffff0000e4c6d200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 36.886631][ T4290] ffff0000e4c6d280: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 36.888284][ T4290] >ffff0000e4c6d300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 36.889895][ T4290] ^ [ 36.890974][ T4290] ffff0000e4c6d380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 36.892658][ T4290] ffff0000e4c6d400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 36.894312][ T4290] ================================================================== [ 36.799615][ T4290] lock: 0xffff0000e4c6caa8, .magic: ffff8000, .owner: /0, .owner_cpu: 512 [ 36.897685][ T4290] CPU: 1 PID: 4290 Comm: syz-executor131 Tainted: G B 6.1.126-syzkaller #0 [ 36.899717][ T4290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 36.901657][ T4290] Call trace: [ 36.902315][ T4290] dump_backtrace+0x1c8/0x1f4 [ 36.903313][ T4290] show_stack+0x2c/0x3c [ 36.904096][ T4290] dump_stack_lvl+0x108/0x170 [ 36.905117][ T4290] dump_stack+0x1c/0x5c [ 36.905973][ T4290] spin_bug+0x124/0x240 [ 36.906836][ T4290] do_raw_spin_lock+0x1fc/0x358 [ 36.907844][ T4290] _raw_spin_lock_irqsave+0x74/0xb4 [ 36.908874][ T4290] __wake_up+0xec/0x1a8 [ 36.909674][ T4290] release_metapage+0x19c/0xc84 [ 36.910640][ T4290] xtTruncate+0xc78/0x2a08 [ 36.911532][ T4290] jfs_free_zero_link+0x374/0x598 [ 36.912613][ T4290] jfs_evict_inode+0x300/0x3f4 [ 36.913567][ T4290] evict+0x418/0x894 [ 36.914324][ T4290] iput+0x7c0/0x8a4 [ 36.915181][ T4290] dentry_unlink_inode+0x37c/0x4bc [ 36.916284][ T4290] __dentry_kill+0x324/0x5e4 [ 36.917201][ T4290] shrink_dentry_list+0x41c/0x850 [ 36.918284][ T4290] shrink_dcache_parent+0xbc/0x434 [ 36.919310][ T4290] do_one_tree+0x30/0xfc [ 36.920162][ T4290] shrink_dcache_for_umount+0x80/0x12c [ 36.921293][ T4290] generic_shutdown_super+0x68/0x328 [ 36.922311][ T4290] kill_block_super+0x70/0xdc [ 36.923191][ T4290] deactivate_locked_super+0xac/0x124 [ 36.924233][ T4290] deactivate_super+0xf0/0x110 [ 36.925273][ T4290] cleanup_mnt+0x394/0x41c [ 36.926177][ T4290] __cleanup_mnt+0x20/0x30 [ 36.927153][ T4290] task_work_run+0x240/0x2f0 [ 36.928095][ T4290] do_notify_resume+0x2080/0x2cb8 [ 36.929165][ T4290] el0_svc+0x9c/0x168 [ 36.929926][ T4290] el0t_64_sync_handler+0x84/0xf0 [ 36.930896][ T4290] el0t_64_sync+0x18c/0x190 [ 36.931948][ T4290] ================================================================================ [ 36.933994][ T4290] UBSAN: array-index-out-of-bounds in kernel/locking/qspinlock.c:131:9 [ 36.935620][ T4290] index 1182 is out of range for type 'unsigned long[8]' [ 36.937105][ T4290] CPU: 1 PID: 4290 Comm: syz-executor131 Tainted: G B 6.1.126-syzkaller #0 [ 36.939069][ T4290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 36.941109][ T4290] Call trace: [ 36.941727][ T4290] dump_backtrace+0x1c8/0x1f4 [ 36.942665][ T4290] show_stack+0x2c/0x3c [ 36.943461][ T4290] dump_stack_lvl+0x108/0x170 [ 36.944482][ T4290] dump_stack+0x1c/0x5c [ 36.945410][ T4290] __ubsan_handle_out_of_bounds+0xfc/0x148 [ 36.946604][ T4290] queued_spin_lock_slowpath+0x9fc/0xe48 [ 36.947834][ T4290] do_raw_spin_lock+0x330/0x358 [ 36.948942][ T4290] _raw_spin_lock_irqsave+0x74/0xb4 [ 36.949968][ T4290] __wake_up+0xec/0x1a8 [ 36.950793][ T4290] release_metapage+0x19c/0xc84 [ 36.951872][ T4290] xtTruncate+0xc78/0x2a08 [ 36.952815][ T4290] jfs_free_zero_link+0x374/0x598 [ 36.953835][ T4290] jfs_evict_inode+0x300/0x3f4 [ 36.954898][ T4290] evict+0x418/0x894 [ 36.955702][ T4290] iput+0x7c0/0x8a4 [ 36.956512][ T4290] dentry_unlink_inode+0x37c/0x4bc [ 36.957676][ T4290] __dentry_kill+0x324/0x5e4 [ 36.958657][ T4290] shrink_dentry_list+0x41c/0x850 [ 36.959741][ T4290] shrink_dcache_parent+0xbc/0x434 [ 36.960777][ T4290] do_one_tree+0x30/0xfc [ 36.961676][ T4290] shrink_dcache_for_umount+0x80/0x12c [ 36.962748][ T4290] generic_shutdown_super+0x68/0x328 [ 36.963746][ T4290] kill_block_super+0x70/0xdc [ 36.964723][ T4290] deactivate_locked_super+0xac/0x124 [ 36.965909][ T4290] deactivate_super+0xf0/0x110 [ 36.966877][ T4290] cleanup_mnt+0x394/0x41c [ 36.967786][ T4290] __cleanup_mnt+0x20/0x30 [ 36.968668][ T4290] task_work_run+0x240/0x2f0 [ 36.969619][ T4290] do_notify_resume+0x2080/0x2cb8 [ 36.970729][ T4290] el0_svc+0x9c/0x168 [ 36.971679][ T4290] el0t_64_sync_handler+0x84/0xf0 [ 36.972674][ T4290] el0t_64_sync+0x18c/0x190 [ 36.973582][ T4290] ================================================================================ [ 36.975651][ T4290] Unable to handle kernel paging request at virtual address ffff8000159f7f70 [ 36.977588][ T4290] KASAN: probably user-memory-access in range [0x00000000acfbfb80-0x00000000acfbfb87] [ 36.979507][ T4290] Mem abort info: [ 36.980255][ T4290] ESR = 0x0000000096000047 [ 36.981120][ T4290] EC = 0x25: DABT (current EL), IL = 32 bits [ 36.982304][ T4290] SET = 0, FnV = 0 [ 36.983085][ T4290] EA = 0, S1PTW = 0 [ 36.983925][ T4290] FSC = 0x07: level 3 translation fault [ 36.985093][ T4290] Data abort info: [ 36.985863][ T4290] ISV = 0, ISS = 0x00000047 [ 36.986804][ T4290] CM = 0, WnR = 1 [ 36.987544][ T4290] swapper pgtable: 4k pages, 48-bit VAs, pgdp=00000001ab226000 [ 36.989171][ T4290] [ffff8000159f7f70] pgd=100000023ffff003, p4d=100000023ffff003, pud=100000023fffe003, pmd=100000023fffa003, pte=0000000000000000 [ 36.991933][ T4290] Internal error: Oops: 0000000096000047 [#1] PREEMPT SMP [ 36.993346][ T4290] Modules linked in: [ 36.994048][ T4290] CPU: 1 PID: 4290 Comm: syz-executor131 Tainted: G B 6.1.126-syzkaller #0 [ 36.995929][ T4290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 36.998028][ T4290] pstate: 804000c5 (Nzcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 36.999818][ T4290] pc : queued_spin_lock_slowpath+0x3f4/0xe48 [ 37.000965][ T4290] lr : queued_spin_lock_slowpath+0x9fc/0xe48 [ 37.002103][ T4290] sp : ffff800021716c60 [ 37.002985][ T4290] x29: ffff800021716d00 x28: 000000000000127f x27: 1ffff000042e2d98 [ 37.004665][ T4290] x26: dfff800000000000 x25: 1fffe0001c98d955 x24: 0000000000080000 [ 37.006366][ T4290] x23: ffff0001b3d14f48 x22: ffff8000159f7f70 x21: ffff0001b3d14f40 [ 37.008089][ T4290] x20: 1fffe000367a29e8 x19: ffff0000e4c6caa8 x18: ffff800021716a40 [ 37.009696][ T4290] x17: 3d3d3d3d3d3d3d3d x16: ffff800012330a64 x15: 0000000000000000 [ 37.011417][ T4290] x14: 00000000ffffffff x13: 0000000000000001 x12: ffff7000030c5eb0 [ 37.013102][ T4290] x11: 0000000000ff0100 x10: ffff8000159f7f40 x9 : 0000000000000003 [ 37.014729][ T4290] x8 : 0000000000000000 x7 : 0000000000000001 x6 : 0000000000000001 [ 37.016460][ T4290] x5 : ffff800021716518 x4 : ffff800015b731c0 x3 : ffff8000081a927c [ 37.018095][ T4290] x2 : 0000000000000001 x1 : 0000000000000004 x0 : ffff0001b3d14f48 [ 37.019871][ T4290] Call trace: [ 37.020514][ T4290] queued_spin_lock_slowpath+0x3f4/0xe48 [ 37.021592][ T4290] do_raw_spin_lock+0x330/0x358 [ 37.022541][ T4290] _raw_spin_lock_irqsave+0x74/0xb4 [ 37.023569][ T4290] __wake_up+0xec/0x1a8 [ 37.024431][ T4290] release_metapage+0x19c/0xc84 [ 37.025416][ T4290] xtTruncate+0xc78/0x2a08 [ 37.026349][ T4290] jfs_free_zero_link+0x374/0x598 [ 37.027369][ T4290] jfs_evict_inode+0x300/0x3f4 [ 37.028345][ T4290] evict+0x418/0x894 [ 37.029178][ T4290] iput+0x7c0/0x8a4 [ 37.029876][ T4290] dentry_unlink_inode+0x37c/0x4bc [ 37.030996][ T4290] __dentry_kill+0x324/0x5e4 [ 37.032005][ T4290] shrink_dentry_list+0x41c/0x850 [ 37.033027][ T4290] shrink_dcache_parent+0xbc/0x434 [ 37.033994][ T4290] do_one_tree+0x30/0xfc [ 37.034891][ T4290] shrink_dcache_for_umount+0x80/0x12c [ 37.035980][ T4290] generic_shutdown_super+0x68/0x328 [ 37.037111][ T4290] kill_block_super+0x70/0xdc [ 37.038096][ T4290] deactivate_locked_super+0xac/0x124 [ 37.039272][ T4290] deactivate_super+0xf0/0x110 [ 37.040310][ T4290] cleanup_mnt+0x394/0x41c [ 37.041231][ T4290] __cleanup_mnt+0x20/0x30 [ 37.042136][ T4290] task_work_run+0x240/0x2f0 [ 37.043158][ T4290] do_notify_resume+0x2080/0x2cb8 [ 37.044134][ T4290] el0_svc+0x9c/0x168 [ 37.044970][ T4290] el0t_64_sync_handler+0x84/0xf0 [ 37.046062][ T4290] el0t_64_sync+0x18c/0x190 [ 37.047111][ T4290] Code: aa1603e0 976c3e87 aa1703e0 52800081 (f90002d5) [ 37.048505][ T4290] ---[ end trace 0000000000000000 ]--- [ 37.392208][ T4290] Kernel panic - not syncing: Oops: Fatal exception [ 37.393521][ T4290] SMP: stopping secondary CPUs [ 37.394554][ T4290] Kernel Offset: disabled [ 37.395470][ T4290] CPU features: 0x080000,02070084,26017203 [ 37.396688][ T4290] Memory Limit: none [ 37.727299][ T4290] Rebooting in 86400 seconds..