loop0: detected capacity change from 0 to 32768 ... Log Wrap ... Log Wrap ... Log Wrap ... ... Log Wrap ... Log Wrap ... Log Wrap ... ... Log Wrap ... Log Wrap ... Log Wrap ... ... Log Wrap ... Log Wrap ... Log Wrap ... ... Log Wrap ... Log Wrap ... Log Wrap ... ... Log Wrap ... Log Wrap ... Log Wrap ... ... Log Wrap ... Log Wrap ... Log Wrap ... ... Log Wrap ... Log Wrap ... Log Wrap ... ... Log Wrap ... Log Wrap ... Log Wrap ... ... Log Wrap ... Log Wrap ... Log Wrap ... ... Log Wrap ... Log Wrap ... Log Wrap ... ... Log Wrap ... Log Wrap ... Log Wrap ... ... Log Wrap ... Log Wrap ... Log Wrap ... ... Log Wrap ... Log Wrap ... Log Wrap ... ... Log Wrap ... Log Wrap ... Log Wrap ... ... Log Wrap ... Log Wrap ... Log Wrap ... BUG at fs/jfs/jfs_dmap.c:3036 assert(bitno < 32) ------------[ cut here ]------------ kernel BUG at fs/jfs/jfs_dmap.c:3036! Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI CPU: 0 UID: 0 PID: 5314 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 RIP: 0010:dbFindBits+0x19e/0x1a0 fs/jfs/jfs_dmap.c:3036 Code: cb fd 90 0f 0b e8 62 86 69 fe 48 c7 c7 a0 24 0b 8c 48 c7 c6 e0 21 0b 8c ba dc 0b 00 00 48 c7 c1 e0 2c 0b 8c e8 e3 a8 cb fd 90 <0f> 0b 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 RSP: 0018:ffffc9000df1f0d0 EFLAGS: 00010246 RAX: 0000000000000030 RBX: 0000000000000000 RCX: fd9670789cec2000 RDX: ffffc9000ec32000 RSI: 0000000000005a09 RDI: 0000000000005a0a RBP: 00000000ffffffff R08: ffff88801fc247d3 R09: 1ffff11003f848fa R10: dffffc0000000000 R11: ffffed1003f848fb R12: 0000000000000001 R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000020 FS: 00007fb85dbb76c0(0000) GS:ffff88808ca5d000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000200000002000 CR3: 0000000042070000 CR4: 0000000000352ef0 Call Trace: dbAllocNear+0x244/0x3d0 fs/jfs/jfs_dmap.c:1243 dbAlloc+0x936/0xba0 fs/jfs/jfs_dmap.c:832 extBalloc fs/jfs/jfs_extent.c:336 [inline] extAlloc+0x57d/0x1020 fs/jfs/jfs_extent.c:127 jfs_get_block+0x358/0xad0 fs/jfs/inode.c:254 __block_write_begin_int+0x6c6/0x1910 fs/buffer.c:2143 block_write_begin+0x8d/0x120 fs/buffer.c:2254 jfs_write_begin+0x35/0x80 fs/jfs/inode.c:306 generic_perform_write+0x2e2/0x8f0 mm/filemap.c:4314 generic_file_write_iter+0x14a/0x680 mm/filemap.c:4457 aio_write+0x5cd/0x870 fs/aio.c:1634 __io_submit_one fs/aio.c:-1 [inline] io_submit_one+0x7bb/0x14c0 fs/aio.c:2053 __do_sys_io_submit fs/aio.c:2112 [inline] __se_sys_io_submit+0x195/0x340 fs/aio.c:2082 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x14d/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fb85cd9bf79 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fb85dbb7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 RAX: ffffffffffffffda RBX: 00007fb85d015fa0 RCX: 00007fb85cd9bf79 RDX: 0000200000000540 RSI: 000000000000003b RDI: 00007fb85db6d000 RBP: 00007fb85ce327e0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fb85d016038 R14: 00007fb85d015fa0 R15: 00007fff3ed15b28 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:dbFindBits+0x19e/0x1a0 fs/jfs/jfs_dmap.c:3036 Code: cb fd 90 0f 0b e8 62 86 69 fe 48 c7 c7 a0 24 0b 8c 48 c7 c6 e0 21 0b 8c ba dc 0b 00 00 48 c7 c1 e0 2c 0b 8c e8 e3 a8 cb fd 90 <0f> 0b 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 RSP: 0018:ffffc9000df1f0d0 EFLAGS: 00010246 RAX: 0000000000000030 RBX: 0000000000000000 RCX: fd9670789cec2000 RDX: ffffc9000ec32000 RSI: 0000000000005a09 RDI: 0000000000005a0a RBP: 00000000ffffffff R08: ffff88801fc247d3 R09: 1ffff11003f848fa R10: dffffc0000000000 R11: ffffed1003f848fb R12: 0000000000000001 R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000020 FS: 00007fb85dbb76c0(0000) GS:ffff88808ca5d000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000200000002000 CR3: 0000000042070000 CR4: 0000000000352ef0