Warning: Permanently added '[localhost]:43240' (ED25519) to the list of known hosts. executing program [ 63.221113][ T5097] loop0: detected capacity change from 0 to 32768 [ 68.264441][ T101] BUG: spinlock bad magic on CPU#0, jfsCommit/101 [ 68.266967][ T101] ================================================================== [ 68.269844][ T101] BUG: KASAN: slab-out-of-bounds in string+0x218/0x2b0 [ 68.272413][ T101] Read of size 1 at addr ffff8880455149f0 by task jfsCommit/101 [ 68.275160][ T101] [ 68.276048][ T101] CPU: 0 UID: 0 PID: 101 Comm: jfsCommit Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 68.280064][ T101] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.284298][ T101] Call Trace: [ 68.285623][ T101] <TASK> [ 68.286834][ T101] dump_stack_lvl+0x241/0x360 [ 68.288704][ T101] ? __pfx_dump_stack_lvl+0x10/0x10 [ 68.290734][ T101] ? __pfx__printk+0x10/0x10 [ 68.292536][ T101] ? _printk+0xd5/0x120 [ 68.294190][ T101] ? __virt_addr_valid+0x183/0x530 [ 68.296232][ T101] ? __virt_addr_valid+0x183/0x530 [ 68.298283][ T101] print_report+0x169/0x550 [ 68.300366][ T101] ? __virt_addr_valid+0x183/0x530 [ 68.302337][ T101] ? __virt_addr_valid+0x183/0x530 [ 68.304367][ T101] ? __virt_addr_valid+0x45f/0x530 [ 68.306423][ T101] ? __phys_addr+0xba/0x170 [ 68.308211][ T101] ? string+0x218/0x2b0 [ 68.309928][ T101] kasan_report+0x143/0x180 [ 68.311735][ T101] ? string+0x218/0x2b0 [ 68.313358][ T101] string+0x218/0x2b0 [ 68.314876][ T101] vsnprintf+0x1101/0x1da0 [ 68.316992][ T101] ? __pfx_vsnprintf+0x10/0x10 [ 68.318892][ T101] vprintk_store+0x480/0x1160 [ 68.320742][ T101] ? __pfx_vprintk_store+0x10/0x10 [ 68.322671][ T101] ? prb_read_valid+0xa9/0xf0 [ 68.324416][ T101] ? __pfx___console_unlock+0x10/0x10 [ 68.326435][ T101] ? console_unlock+0x2fc/0x3b0 [ 68.328360][ T101] ? this_cpu_in_panic+0x4f/0x80 [ 68.330275][ T101] ? is_printk_legacy_deferred+0x43/0x50 [ 68.332446][ T101] ? printk_get_console_flush_type+0x1fe/0x4f0 [ 68.334747][ T101] vprintk_emit+0x271/0xa10 [ 68.336484][ T101] ? __pfx_vprintk_emit+0x10/0x10 [ 68.338276][ T101] ? __pfx_register_lock_class+0x10/0x10 [ 68.340100][ T101] _printk+0xd5/0x120 [ 68.341605][ T101] ? __pfx__printk+0x10/0x10 [ 68.343294][ T101] spin_bug+0x13b/0x1d0 [ 68.344888][ T101] do_raw_spin_lock+0x209/0x370 [ 68.346718][ T101] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 68.348728][ T101] _raw_spin_lock_irqsave+0xe1/0x120 [ 68.350627][ T101] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 68.352796][ T101] __wake_up_common_lock+0x25/0x1e0 [ 68.354735][ T101] release_metapage+0xb2/0x960 [ 68.356558][ T101] ? txFreeMap+0xa9c/0xd50 [ 68.358238][ T101] ? _raw_spin_unlock+0x28/0x50 [ 68.360063][ T101] ? __mark_inode_dirty+0x5b2/0xe90 [ 68.361983][ T101] xtTruncate+0x1006/0x3270 [ 68.363716][ T101] ? __pfx_xtTruncate+0x10/0x10 [ 68.365576][ T101] jfs_free_zero_link+0x46e/0x6e0 [ 68.367509][ T101] ? inode_wait_for_writeback+0x111/0x2a0 [ 68.369790][ T101] ? __pfx_jfs_free_zero_link+0x10/0x10 [ 68.371979][ T101] jfs_evict_inode+0x35f/0x440 [ 68.373868][ T101] ? __pfx_jfs_evict_inode+0x10/0x10 [ 68.375887][ T101] evict+0x4e8/0x9b0 [ 68.377417][ T101] ? __pfx_evict+0x10/0x10 [ 68.379167][ T101] ? iput+0x713/0xa50 [ 68.380709][ T101] txUpdateMap+0x931/0xb10 [ 68.382424][ T101] ? __pfx_txUpdateMap+0x10/0x10 [ 68.384273][ T101] jfs_lazycommit+0x49a/0xb80 [ 68.386093][ T101] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 68.388273][ T101] ? lockdep_hardirqs_on+0x99/0x150 [ 68.390325][ T101] ? __pfx_jfs_lazycommit+0x10/0x10 [ 68.392366][ T101] ? __pfx_default_wake_function+0x10/0x10 [ 68.394545][ T101] ? __kthread_parkme+0x169/0x1d0 [ 68.396449][ T101] ? __pfx_jfs_lazycommit+0x10/0x10 [ 68.398465][ T101] kthread+0x2f0/0x390 [ 68.400052][ T101] ? __pfx_jfs_lazycommit+0x10/0x10 [ 68.402030][ T101] ? __pfx_kthread+0x10/0x10 [ 68.403808][ T101] ret_from_fork+0x4b/0x80 [ 68.405521][ T101] ? __pfx_kthread+0x10/0x10 [ 68.407325][ T101] ret_from_fork_asm+0x1a/0x30 [ 68.409188][ T101] </TASK> [ 68.410381][ T101] [ 68.411313][ T101] The buggy address belongs to the object at ffff8880455149c0 [ 68.411313][ T101] which belongs to the cache jfs_ip of size 2232 [ 68.416305][ T101] The buggy address is located 48 bytes inside of [ 68.416305][ T101] allocated 2232-byte region [ffff8880455149c0, ffff888045515278) [ 68.421584][ T101] [ 68.422449][ T101] The buggy address belongs to the physical page: [ 68.424923][ T101] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x45510 [ 68.428105][ T101] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 68.431119][ T101] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 68.433884][ T101] page_type: f5(slab) [ 68.435271][ T101] raw: 04fff00000000040 ffff88801f1503c0 dead000000000122 0000000000000000 [ 68.438475][ T101] raw: 0000000000000000 00000000800d000d 00000001f5000000 0000000000000000 [ 68.441793][ T101] head: 04fff00000000040 ffff88801f1503c0 dead000000000122 0000000000000000 [ 68.444918][ T101] head: 0000000000000000 00000000800d000d 00000001f5000000 0000000000000000 [ 68.448111][ T101] head: 04fff00000000003 ffffea0001154401 ffffffffffffffff 0000000000000000 [ 68.451424][ T101] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 68.454553][ T101] page dumped because: kasan: bad access detected [ 68.456780][ T101] page_owner tracks the page as allocated [ 68.458936][ T101] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_RECLAIMABLE), pid 5097, tgid 5097 (syz-executor248), ts 63232774102, free_ts 0 [ 68.466684][ T101] post_alloc_hook+0x1f3/0x230 [ 68.468502][ T101] get_page_from_freelist+0x3045/0x3190 [ 68.470552][ T101] __alloc_pages_noprof+0x292/0x710 [ 68.472513][ T101] alloc_pages_mpol_noprof+0x3e8/0x680 [ 68.474496][ T101] alloc_slab_page+0x6a/0x120 [ 68.476307][ T101] allocate_slab+0x5a/0x2f0 [ 68.478072][ T101] ___slab_alloc+0xcd1/0x14b0 [ 68.479733][ T101] __slab_alloc+0x58/0xa0 [ 68.481371][ T101] kmem_cache_alloc_lru_noprof+0x1c5/0x2b0 [ 68.483542][ T101] jfs_alloc_inode+0x28/0x70 [ 68.485230][ T101] alloc_inode+0x65/0x1a0 [ 68.486785][ T101] new_inode+0x22/0x1d0 [ 68.488281][ T101] jfs_fill_super+0x408/0xc50 [ 68.490025][ T101] mount_bdev+0x20a/0x2d0 [ 68.491543][ T101] legacy_get_tree+0xee/0x190 [ 68.493343][ T101] vfs_get_tree+0x90/0x2b0 [ 68.494977][ T101] page_owner free stack trace missing [ 68.496947][ T101] [ 68.497818][ T101] Memory state around the buggy address: [ 68.499859][ T101] ffff888045514880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 68.502771][ T101] ffff888045514900: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 68.505708][ T101] >ffff888045514980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 68.508673][ T101] ^ [ 68.511572][ T101] ffff888045514a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 68.514604][ T101] ffff888045514a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 68.517667][ T101] ================================================================== [ 68.520677][ T101] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 68.523393][ T101] CPU: 0 UID: 0 PID: 101 Comm: jfsCommit Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 68.527348][ T101] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.531273][ T101] Call Trace: [ 68.532601][ T101] <TASK> [ 68.533709][ T101] dump_stack_lvl+0x241/0x360 [ 68.535485][ T101] ? __pfx_dump_stack_lvl+0x10/0x10 [ 68.537499][ T101] ? __pfx__printk+0x10/0x10 [ 68.539138][ T101] ? rcu_is_watching+0x15/0xb0 [ 68.540850][ T101] ? lock_release+0xbf/0xa30 [ 68.542619][ T101] ? vscnprintf+0x5d/0x90 [ 68.544170][ T101] panic+0x349/0x880 [ 68.545839][ T101] ? check_panic_on_warn+0x21/0xb0 [ 68.548046][ T101] ? __pfx_panic+0x10/0x10 [ 68.549771][ T101] ? do_raw_spin_unlock+0x58/0x8b0 [ 68.551781][ T101] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 68.554041][ T101] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 68.556756][ T101] ? print_report+0x502/0x550 [ 68.558558][ T101] check_panic_on_warn+0x86/0xb0 [ 68.560481][ T101] ? string+0x218/0x2b0 [ 68.562098][ T101] end_report+0x77/0x160 [ 68.563726][ T101] kasan_report+0x154/0x180 [ 68.565540][ T101] ? string+0x218/0x2b0 [ 68.567148][ T101] string+0x218/0x2b0 [ 68.568705][ T101] vsnprintf+0x1101/0x1da0 [ 68.570473][ T101] ? __pfx_vsnprintf+0x10/0x10 [ 68.572310][ T101] vprintk_store+0x480/0x1160 [ 68.574158][ T101] ? __pfx_vprintk_store+0x10/0x10 [ 68.576128][ T101] ? prb_read_valid+0xa9/0xf0 [ 68.577906][ T101] ? __pfx___console_unlock+0x10/0x10 [ 68.579839][ T101] ? console_unlock+0x2fc/0x3b0 [ 68.581640][ T101] ? this_cpu_in_panic+0x4f/0x80 [ 68.583429][ T101] ? is_printk_legacy_deferred+0x43/0x50 [ 68.585525][ T101] ? printk_get_console_flush_type+0x1fe/0x4f0 [ 68.587843][ T101] vprintk_emit+0x271/0xa10 [ 68.589450][ T101] ? __pfx_vprintk_emit+0x10/0x10 [ 68.591329][ T101] ? __pfx_register_lock_class+0x10/0x10 [ 68.593430][ T101] _printk+0xd5/0x120 [ 68.595115][ T101] ? __pfx__printk+0x10/0x10 [ 68.596838][ T101] spin_bug+0x13b/0x1d0 [ 68.598465][ T101] do_raw_spin_lock+0x209/0x370 [ 68.600275][ T101] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 68.602270][ T101] _raw_spin_lock_irqsave+0xe1/0x120 [ 68.604267][ T101] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 68.606525][ T101] __wake_up_common_lock+0x25/0x1e0 [ 68.608457][ T101] release_metapage+0xb2/0x960 [ 68.610283][ T101] ? txFreeMap+0xa9c/0xd50 [ 68.611938][ T101] ? _raw_spin_unlock+0x28/0x50 [ 68.613810][ T101] ? __mark_inode_dirty+0x5b2/0xe90 [ 68.615827][ T101] xtTruncate+0x1006/0x3270 [ 68.617563][ T101] ? __pfx_xtTruncate+0x10/0x10 [ 68.619461][ T101] jfs_free_zero_link+0x46e/0x6e0 [ 68.621403][ T101] ? inode_wait_for_writeback+0x111/0x2a0 [ 68.623499][ T101] ? __pfx_jfs_free_zero_link+0x10/0x10 [ 68.625568][ T101] jfs_evict_inode+0x35f/0x440 [ 68.627363][ T101] ? __pfx_jfs_evict_inode+0x10/0x10 [ 68.629330][ T101] evict+0x4e8/0x9b0 [ 68.630836][ T101] ? __pfx_evict+0x10/0x10 [ 68.632439][ T101] ? iput+0x713/0xa50 [ 68.633987][ T101] txUpdateMap+0x931/0xb10 [ 68.635551][ T101] ? __pfx_txUpdateMap+0x10/0x10 [ 68.637306][ T101] jfs_lazycommit+0x49a/0xb80 [ 68.638936][ T101] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 68.641038][ T101] ? lockdep_hardirqs_on+0x99/0x150 [ 68.642998][ T101] ? __pfx_jfs_lazycommit+0x10/0x10 [ 68.644895][ T101] ? __pfx_default_wake_function+0x10/0x10 [ 68.647033][ T101] ? __kthread_parkme+0x169/0x1d0 [ 68.648937][ T101] ? __pfx_jfs_lazycommit+0x10/0x10 [ 68.650910][ T101] kthread+0x2f0/0x390 [ 68.652479][ T101] ? __pfx_jfs_lazycommit+0x10/0x10 [ 68.654413][ T101] ? __pfx_kthread+0x10/0x10 [ 68.656193][ T101] ret_from_fork+0x4b/0x80 [ 68.657924][ T101] ? __pfx_kthread+0x10/0x10 [ 68.659771][ T101] ret_from_fork_asm+0x1a/0x30 [ 68.661677][ T101] </TASK> [ 68.663150][ T101] Kernel Offset: disabled [ 68.664772][ T101] Rebooting in 86400 seconds.. VM DIAGNOSIS: 11:40:02 Registers: info registers vcpu 0 CPU#0 RAX=000000000005c832 RBX=ffffffffffffffc7 RCX=ffff88801f19a440 RDX=00000000002ab993 RSI=0000000000000001 RDI=00000000002ab994 RBP=ffffc900011b6db8 RSP=ffffc900011b6c78 R8 =ffffffff87bd31dc R9 =1ffff11003f8519a R10=dffffc0000000000 R11=ffffffff8bc27cb0 R12=0000000000000be5 R13=dffffc0000000000 R14=0000000000000001 R15=0000000000000b1d RIP=ffffffff8bc27cd0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88801fc00000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055cedd80f120 CR3=000000000e734000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffffe00 Opmask01=0000000000000000 Opmask02=0000000001e1f9ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000034dadd88 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 403fe20c40000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdc9268110 0000003000000010 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000c0fe ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000c0fe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0200000000000000 00000000000080fe ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0200000000000000 00000000000080fe ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000056 12ddc60000000056 12a793d630000072 656c6c616b7a7973 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6864203a73250070 6475646e65735f70 636864203a732500 73646e6f63657320 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4d41051f56000055 4150414b40565f55 464d41051f560000 56414b4a46405605 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbf2b313423342c ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020