jfs_dirty_inode called on read-only volume Is remount racy? jfs_dirty_inode called on read-only volume Is remount racy? jfs_dirty_inode called on read-only volume Is remount racy? jfs_dirty_inode called on read-only volume Is remount racy? INFO: trying to register non-static key. The code is fine but needs lockdep annotation, or maybe you didn't initialize this object before use? turning off the locking correctness validator. CPU: 1 UID: 0 PID: 7287 Comm: syz.0.177 Not tainted syzkaller #0 PREEMPT_{RT,(full)} Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 Call Trace: dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120 assign_lock_key+0x133/0x150 kernel/locking/lockdep.c:984 register_lock_class+0x105/0x320 kernel/locking/lockdep.c:1299 __lock_acquire+0x99/0xd20 kernel/locking/lockdep.c:5112 lock_acquire+0x120/0x360 kernel/locking/lockdep.c:5868 rt_spin_lock+0x88/0x2c0 kernel/locking/spinlock_rt.c:56 spin_lock include/linux/spinlock_rt.h:44 [inline] __wake_up_common_lock+0x2f/0x1e0 kernel/sched/wait.c:124 txEnd+0x8a/0x530 fs/jfs/jfs_txnmgr.c:504 jfs_mkdir+0x344/0xa70 fs/jfs/namei.c:293 vfs_mkdir+0x306/0x510 fs/namei.c:4366 do_mkdirat+0x247/0x590 fs/namei.c:4399 __do_sys_mkdirat fs/namei.c:4416 [inline] __se_sys_mkdirat fs/namei.c:4414 [inline] __x64_sys_mkdirat+0x87/0xa0 fs/namei.c:4414 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f8f5a34eec9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f8f585ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 RAX: ffffffffffffffda RBX: 00007f8f5a5a5fa0 RCX: 00007f8f5a34eec9 RDX: 0000000000000040 RSI: 0000200000000080 RDI: 0000000000000006 RBP: 00007f8f5a3d1f91 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f8f5a5a6038 R14: 00007f8f5a5a5fa0 R15: 00007ffe8e519ca8 Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] CPU: 1 UID: 0 PID: 7287 Comm: syz.0.177 Not tainted syzkaller #0 PREEMPT_{RT,(full)} Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 RIP: 0010:__wake_up_common kernel/sched/wait.c:104 [inline] RIP: 0010:__wake_up_common_lock+0xd2/0x1e0 kernel/sched/wait.c:125 Code: ec 0f 84 d1 00 00 00 8b 6c 24 04 eb 13 48 ba 00 00 00 00 00 fc ff df 4d 39 ec 0f 84 b8 00 00 00 4d 89 e6 4c 89 e0 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 f7 e8 f0 38 84 00 48 ba 00 00 00 00 00 fc RSP: 0018:ffffc900071e7aa8 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 0000000000000002 RCX: 6415c1f080c0ca00 RDX: dffffc0000000000 RSI: ffffffff8b621660 RDI: ffffffff8b621620 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: dffffc0000000000 R11: fffffbfff1e3ac47 R12: 0000000000000000 R13: ffffc900032090b0 R14: 0000000000000000 R15: dffffc0000000000 FS: 00007f8f585ae6c0(0000) GS:ffff8881269bc000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fb5fa73f350 CR3: 0000000068100000 CR4: 00000000003526f0 Call Trace: txEnd+0x8a/0x530 fs/jfs/jfs_txnmgr.c:504 jfs_mkdir+0x344/0xa70 fs/jfs/namei.c:293 vfs_mkdir+0x306/0x510 fs/namei.c:4366 do_mkdirat+0x247/0x590 fs/namei.c:4399 __do_sys_mkdirat fs/namei.c:4416 [inline] __se_sys_mkdirat fs/namei.c:4414 [inline] __x64_sys_mkdirat+0x87/0xa0 fs/namei.c:4414 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f8f5a34eec9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f8f585ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 RAX: ffffffffffffffda RBX: 00007f8f5a5a5fa0 RCX: 00007f8f5a34eec9 RDX: 0000000000000040 RSI: 0000200000000080 RDI: 0000000000000006 RBP: 00007f8f5a3d1f91 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f8f5a5a6038 R14: 00007f8f5a5a5fa0 R15: 00007ffe8e519ca8 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:__wake_up_common kernel/sched/wait.c:104 [inline] RIP: 0010:__wake_up_common_lock+0xd2/0x1e0 kernel/sched/wait.c:125 Code: ec 0f 84 d1 00 00 00 8b 6c 24 04 eb 13 48 ba 00 00 00 00 00 fc ff df 4d 39 ec 0f 84 b8 00 00 00 4d 89 e6 4c 89 e0 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 f7 e8 f0 38 84 00 48 ba 00 00 00 00 00 fc RSP: 0018:ffffc900071e7aa8 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 0000000000000002 RCX: 6415c1f080c0ca00 RDX: dffffc0000000000 RSI: ffffffff8b621660 RDI: ffffffff8b621620 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: dffffc0000000000 R11: fffffbfff1e3ac47 R12: 0000000000000000 R13: ffffc900032090b0 R14: 0000000000000000 R15: dffffc0000000000 FS: 00007f8f585ae6c0(0000) GS:ffff8881269bc000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fb5fa73f350 CR3: 0000000068100000 CR4: 00000000003526f0 ---------------- Code disassembly (best guess): 0: ec in (%dx),%al 1: 0f 84 d1 00 00 00 je 0xd8 7: 8b 6c 24 04 mov 0x4(%rsp),%ebp b: eb 13 jmp 0x20 d: 48 ba 00 00 00 00 00 movabs $0xdffffc0000000000,%rdx 14: fc ff df 17: 4d 39 ec cmp %r13,%r12 1a: 0f 84 b8 00 00 00 je 0xd8 20: 4d 89 e6 mov %r12,%r14 23: 4c 89 e0 mov %r12,%rax 26: 48 c1 e8 03 shr $0x3,%rax * 2a: 80 3c 10 00 cmpb $0x0,(%rax,%rdx,1) <-- trapping instruction 2e: 74 12 je 0x42 30: 4c 89 f7 mov %r14,%rdi 33: e8 f0 38 84 00 call 0x843928 38: 48 rex.W 39: ba 00 00 00 00 mov $0x0,%edx 3e: 00 fc add %bh,%ah