... Log Wrap ... Log Wrap ... Log Wrap ... ... Log Wrap ... Log Wrap ... Log Wrap ... ... Log Wrap ... Log Wrap ... Log Wrap ... ... Log Wrap ... Log Wrap ... Log Wrap ... ... Log Wrap ... Log Wrap ... Log Wrap ... ERROR: (device loop0): diWrite: ixpxd invalid ERROR: (device loop0): txCommit: ERROR: (device loop0): diWrite: ixpxd invalid BUG at fs/jfs/jfs_txnmgr.c:2798 assert(mp->nohomeok) ------------[ cut here ]------------ kernel BUG at fs/jfs/jfs_txnmgr.c:2798! Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI CPU: 0 UID: 0 PID: 5332 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 RIP: 0010:LogSyncRelease fs/jfs/jfs_txnmgr.c:2798 [inline] RIP: 0010:txAbort+0x716/0x760 fs/jfs/jfs_txnmgr.c:2623 Code: e9 2c ff ff ff e8 2a c8 5a fe 48 c7 c7 60 a4 2c 8c 48 c7 c6 59 a0 2c 8c ba ee 0a 00 00 48 c7 c1 60 b8 2c 8c e8 fb 05 bc fd 90 <0f> 0b e8 03 c8 5a fe 48 c7 c7 60 a4 2c 8c 48 c7 c6 59 a0 2c 8c ba RSP: 0018:ffffc9000f6575b0 EFLAGS: 00010246 RAX: 0000000000000034 RBX: 1ffff110063639c7 RCX: fcc799f83614fe00 RDX: ffffc90020001000 RSI: 000000000000180d RDI: 000000000000180e RBP: ffff888031b1ce38 R08: ffff88801fc24713 R09: 1ffff11003f848e2 R10: dffffc0000000000 R11: ffffed1003f848e3 R12: 0000000000000036 R13: ffff888031b1cd90 R14: 0000000000000000 R15: 0000000000000006 FS: 00007f705f7f76c0(0000) GS:ffff88808c54a000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000200000009000 CR3: 0000000044409000 CR4: 0000000000352ef0 Call Trace: txCommit+0x474c/0x54a0 fs/jfs/jfs_txnmgr.c:1356 jfs_create+0x8bd/0xae0 fs/jfs/namei.c:157 lookup_open fs/namei.c:4508 [inline] open_last_lookups fs/namei.c:4608 [inline] path_openat+0x133a/0x3830 fs/namei.c:4860 do_file_open+0x23e/0x4a0 fs/namei.c:4892 do_sys_openat2+0x115/0x200 fs/open.c:1368 do_sys_open fs/open.c:1374 [inline] __do_sys_openat fs/open.c:1390 [inline] __se_sys_openat fs/open.c:1385 [inline] __x64_sys_openat+0x138/0x170 fs/open.c:1385 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f705e99de59 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f705f7f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007f705ec26090 RCX: 00007f705e99de59 RDX: 000000000000275a RSI: 0000200000000080 RDI: ffffffffffffff9c RBP: 00007f705ea33e6f R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f705ec26128 R14: 00007f705ec26090 R15: 00007fffedf25a08 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:LogSyncRelease fs/jfs/jfs_txnmgr.c:2798 [inline] RIP: 0010:txAbort+0x716/0x760 fs/jfs/jfs_txnmgr.c:2623 Code: e9 2c ff ff ff e8 2a c8 5a fe 48 c7 c7 60 a4 2c 8c 48 c7 c6 59 a0 2c 8c ba ee 0a 00 00 48 c7 c1 60 b8 2c 8c e8 fb 05 bc fd 90 <0f> 0b e8 03 c8 5a fe 48 c7 c7 60 a4 2c 8c 48 c7 c6 59 a0 2c 8c ba RSP: 0018:ffffc9000f6575b0 EFLAGS: 00010246 RAX: 0000000000000034 RBX: 1ffff110063639c7 RCX: fcc799f83614fe00 RDX: ffffc90020001000 RSI: 000000000000180d RDI: 000000000000180e RBP: ffff888031b1ce38 R08: ffff88801fc24713 R09: 1ffff11003f848e2 R10: dffffc0000000000 R11: ffffed1003f848e3 R12: 0000000000000036 R13: ffff888031b1cd90 R14: 0000000000000000 R15: 0000000000000006 FS: 00007f705f7f76c0(0000) GS:ffff88808c54a000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000200000009000 CR3: 0000000044409000 CR4: 0000000000352ef0