Warning: Permanently added '[localhost]:36548' (ED25519) to the list of known hosts.
executing program
syzkaller login: [ 61.295173][ T9409] loop0: detected capacity change from 0 to 32768
[ 61.320105][ T9409] ==================================================================
[ 61.320826][ T9409] BUG: KASAN: slab-out-of-bounds in dtSearch+0x1cf6/0x2270
[ 61.321476][ T9409] Read of size 1 at addr ffff888051af4030 by task syz-executor152/9409
[ 61.322166][ T9409]
[ 61.322391][ T9409] CPU: 1 UID: 0 PID: 9409 Comm: syz-executor152 Not tainted 6.14.0-rc4 #1
[ 61.322405][ T9409] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014
[ 61.322413][ T9409] Call Trace:
[ 61.322417][ T9409]
[ 61.322422][ T9409] dump_stack_lvl+0x116/0x1b0
[ 61.322444][ T9409] print_address_description.constprop.0+0x2c/0x420
[ 61.322464][ T9409] ? dtSearch+0x1cf6/0x2270
[ 61.322482][ T9409] print_report+0xaa/0x270
[ 61.322498][ T9409] ? dtSearch+0x1cf6/0x2270
[ 61.322516][ T9409] ? kasan_addr_to_slab+0x27/0x80
[ 61.322532][ T9409] ? dtSearch+0x1cf6/0x2270
[ 61.322549][ T9409] kasan_report+0xbd/0x100
[ 61.322566][ T9409] ? dtSearch+0x1cf6/0x2270
[ 61.322586][ T9409] dtSearch+0x1cf6/0x2270
[ 61.322612][ T9409] ? trace_kmalloc+0x40/0x100
[ 61.322626][ T9409] ? __kmalloc_noprof+0x231/0x580
[ 61.322649][ T9409] jfs_lookup+0x18f/0x350
[ 61.322669][ T9409] ? __pfx_jfs_lookup+0x10/0x10
[ 61.322690][ T9409] ? __pfx_smack_inode_permission+0x10/0x10
[ 61.322708][ T9409] ? map_id_up+0x285/0x380
[ 61.322719][ T9409] ? make_vfsuid+0x69/0x150
[ 61.322737][ T9409] ? make_vfsgid+0xfa/0x150
[ 61.322756][ T9409] ? bpf_lsm_inode_permission+0x9/0x10
[ 61.322775][ T9409] ? security_inode_permission+0xc5/0x290
[ 61.322793][ T9409] ? inode_permission+0xdc/0x5f0
[ 61.322806][ T9409] ? __pfx_jfs_lookup+0x10/0x10
[ 61.322825][ T9409] lookup_open.isra.0+0x493/0x1540
[ 61.322841][ T9409] ? __pfx_lookup_open.isra.0+0x10/0x10
[ 61.322859][ T9409] ? __pfx_down_write+0x10/0x10
[ 61.322878][ T9409] ? mnt_get_write_access+0x216/0x310
[ 61.322893][ T9409] open_last_lookups+0x82c/0x13b0
[ 61.322910][ T9409] path_openat+0x182/0x6b0
[ 61.322926][ T9409] ? __pfx_path_openat+0x10/0x10
[ 61.322943][ T9409] ? __lock_acquire+0xb97/0x16a0
[ 61.322962][ T9409] do_filp_open+0x1f8/0x460
[ 61.322978][ T9409] ? rcu_is_watching+0x12/0xd0
[ 61.322997][ T9409] ? __pfx_do_filp_open+0x10/0x10
[ 61.323013][ T9409] ? find_held_lock+0x2d/0x120
[ 61.323027][ T9409] ? __lock_release+0x103/0x470
[ 61.323046][ T9409] ? alloc_fd+0x30c/0x5b0
[ 61.323062][ T9409] ? rcu_is_watching+0x12/0xd0
[ 61.323082][ T9409] ? _raw_spin_unlock+0x28/0x50
[ 61.323096][ T9409] ? alloc_fd+0x30c/0x5b0
[ 61.323114][ T9409] do_sys_openat2+0x16a/0x1d0
[ 61.323133][ T9409] ? __pfx_do_sys_openat2+0x10/0x10
[ 61.323153][ T9409] ? dput+0xd1/0x630
[ 61.323166][ T9409] __x64_sys_creat+0xcd/0x130
[ 61.323186][ T9409] ? __pfx___x64_sys_creat+0x10/0x10
[ 61.323208][ T9409] ? do_syscall_64+0x91/0x260
[ 61.323226][ T9409] do_syscall_64+0xcb/0x260
[ 61.323244][ T9409] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 61.323263][ T9409] RIP: 0033:0x7f2c141b8b3d
[ 61.323273][ T9409] Code: c3 e8 f7 20 00 00 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 61.323286][ T9409] RSP: 002b:00007ffe291fab88 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[ 61.323298][ T9409] RAX: ffffffffffffffda RBX: 00007ffe291fad98 RCX: 00007f2c141b8b3d
[ 61.323306][ T9409] RDX: 00007f2c141b8b3d RSI: 0000000000000000 RDI: 0000400000000000
[ 61.323313][ T9409] RBP: 0000400000000000 R08: 0000000000000000 R09: 0000000000000000
[ 61.323321][ T9409] R10: 0000000000006152 R11: 0000000000000246 R12: 0000000000000001
[ 61.323328][ T9409] R13: 00007ffe291fad88 R14: 00007f2c1423c530 R15: 0000000000000001
[ 61.323339][ T9409]
[ 61.323344][ T9409]
[ 61.351062][ T9409] Allocated by task 9409:
[ 61.351412][ T9409] kasan_save_stack+0x24/0x50
[ 61.351825][ T9409] kasan_save_track+0x14/0x40
[ 61.352217][ T9409] __kasan_slab_alloc+0x97/0xa0
[ 61.352612][ T9409] kmem_cache_alloc_lru_noprof+0x16c/0x410
[ 61.353081][ T9409] jfs_alloc_inode+0x27/0x70
[ 61.353458][ T9409] alloc_inode+0x64/0x250
[ 61.353822][ T9409] new_inode+0x22/0x230
[ 61.354166][ T9409] ialloc+0x44/0x9e0
[ 61.354497][ T9409] jfs_create+0x1ff/0xb30
[ 61.354866][ T9409] lookup_open.isra.0+0x1145/0x1540
[ 61.355284][ T9409] open_last_lookups+0x82c/0x13b0
[ 61.355693][ T9409] path_openat+0x182/0x6b0
[ 61.356058][ T9409] do_filp_open+0x1f8/0x460
[ 61.356429][ T9409] do_sys_openat2+0x16a/0x1d0
[ 61.356851][ T9409] __x64_sys_openat+0x140/0x200
[ 61.357251][ T9409] do_syscall_64+0xcb/0x260
[ 61.357648][ T9409] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 61.358125][ T9409]
[ 61.358323][ T9409] The buggy address belongs to the object at ffff888051af3750
[ 61.358323][ T9409] which belongs to the cache jfs_ip of size 2232
[ 61.359371][ T9409] The buggy address is located 40 bytes to the right of
[ 61.359371][ T9409] allocated 2232-byte region [ffff888051af3750, ffff888051af4008)
[ 61.360496][ T9409]
[ 61.360697][ T9409] The buggy address belongs to the physical page:
[ 61.361209][ T9409] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x51af0
[ 61.361905][ T9409] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 61.362579][ T9409] memcg:ffff888047454901
[ 61.362937][ T9409] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff)
[ 61.363548][ T9409] page_type: f5(slab)
[ 61.363893][ T9409] raw: 04fff00000000040 ffff88801ed67dc0 dead000000000122 0000000000000000
[ 61.364589][ T9409] raw: 0000000000000000 00000000800d000d 00000000f5000000 ffff888047454901
[ 61.365263][ T9409] head: 04fff00000000040 ffff88801ed67dc0 dead000000000122 0000000000000000
[ 61.365937][ T9409] head: 0000000000000000 00000000800d000d 00000000f5000000 ffff888047454901
[ 61.366611][ T9409] head: 04fff00000000003 ffffea000146bc01 ffffffffffffffff 0000000000000000
[ 61.367298][ T9409] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[ 61.368012][ T9409] page dumped because: kasan: bad access detected
[ 61.368532][ T9409] page_owner tracks the page as allocated
[ 61.368982][ T9409] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_RECLAIMABLE), pid 9409, tgid 9409 (syz-executor152), ts 61304356473, free_ts 0
[ 61.370639][ T9409] post_alloc_hook+0x1a3/0x1d0
[ 61.371027][ T9409] get_page_from_freelist+0x8a5/0xfa0
[ 61.371457][ T9409] __alloc_frozen_pages_noprof+0x1d8/0x3b0
[ 61.371928][ T9409] alloc_pages_mpol+0x1f2/0x550
[ 61.372321][ T9409] allocate_slab+0x229/0x310
[ 61.372701][ T9409] ___slab_alloc+0x7f3/0x12b0
[ 61.373102][ T9409] __slab_alloc.constprop.0+0x56/0xc0
[ 61.373537][ T9409] kmem_cache_alloc_lru_noprof+0x27a/0x410
[ 61.374009][ T9409] jfs_alloc_inode+0x27/0x70
[ 61.374383][ T9409] alloc_inode+0x64/0x250
[ 61.374742][ T9409] new_inode+0x22/0x230
[ 61.375086][ T9409] jfs_fill_super+0x6b4/0x1070
[ 61.375490][ T9409] get_tree_bdev_flags+0x396/0x630
[ 61.375927][ T9409] vfs_get_tree+0x93/0x350
[ 61.376308][ T9409] do_new_mount+0x368/0x730
[ 61.376692][ T9409] path_mount+0x4a6/0x17f0
[ 61.377104][ T9409] page_owner free stack trace missing
[ 61.377535][ T9409]
[ 61.377738][ T9409] Memory state around the buggy address:
[ 61.378180][ T9409] ffff888051af3f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 61.378810][ T9409] ffff888051af3f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 61.379458][ T9409] >ffff888051af4000: 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 61.380099][ T9409] ^
[ 61.380540][ T9409] ffff888051af4080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 61.381202][ T9409] ffff888051af4100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 61.381871][ T9409] ==================================================================
[ 61.403849][ T9409] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 61.404775][ T9409] CPU: 0 UID: 0 PID: 9409 Comm: syz-executor152 Not tainted 6.14.0-rc4 #1
[ 61.405835][ T9409] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014
[ 61.407183][ T9409] Call Trace:
[ 61.407706][ T9409]
[ 61.408173][ T9409] dump_stack_lvl+0x3d/0x1b0
[ 61.408907][ T9409] panic+0x6d5/0x790
[ 61.409528][ T9409] ? __pfx_panic+0x10/0x10
[ 61.410252][ T9409] ? irqentry_exit+0x3b/0xa0
[ 61.410989][ T9409] ? lockdep_hardirqs_on+0x7c/0x120
[ 61.411804][ T9409] ? preempt_schedule_thunk+0x1a/0x30
[ 61.412645][ T9409] ? preempt_schedule_common+0x44/0xc0
[ 61.413500][ T9409] ? dtSearch+0x1cf6/0x2270
[ 61.414226][ T9409] ? dtSearch+0x1cf6/0x2270
[ 61.414945][ T9409] check_panic_on_warn+0xb1/0xc0
[ 61.415737][ T9409] ? dtSearch+0x1cf6/0x2270
[ 61.416469][ T9409] end_report+0x83/0xa0
[ 61.417240][ T9409] kasan_report+0xcd/0x100
[ 61.417964][ T9409] ? dtSearch+0x1cf6/0x2270
[ 61.418703][ T9409] dtSearch+0x1cf6/0x2270
[ 61.419400][ T9409] ? trace_kmalloc+0x40/0x100
[ 61.420147][ T9409] ? __kmalloc_noprof+0x231/0x580
[ 61.420992][ T9409] jfs_lookup+0x18f/0x350
[ 61.421697][ T9409] ? __pfx_jfs_lookup+0x10/0x10
[ 61.422471][ T9409] ? __pfx_smack_inode_permission+0x10/0x10
[ 61.423400][ T9409] ? map_id_up+0x285/0x380
[ 61.424103][ T9409] ? make_vfsuid+0x69/0x150
[ 61.424836][ T9409] ? make_vfsgid+0xfa/0x150
[ 61.425551][ T9409] ? bpf_lsm_inode_permission+0x9/0x10
[ 61.426384][ T9409] ? security_inode_permission+0xc5/0x290
[ 61.427256][ T9409] ? inode_permission+0xdc/0x5f0
[ 61.428018][ T9409] ? __pfx_jfs_lookup+0x10/0x10
[ 61.428782][ T9409] lookup_open.isra.0+0x493/0x1540
[ 61.429569][ T9409] ? __pfx_lookup_open.isra.0+0x10/0x10
[ 61.430434][ T9409] ? __pfx_down_write+0x10/0x10
[ 61.431200][ T9409] ? mnt_get_write_access+0x216/0x310
[ 61.432012][ T9409] open_last_lookups+0x82c/0x13b0
[ 61.432779][ T9409] path_openat+0x182/0x6b0
[ 61.433461][ T9409] ? __pfx_path_openat+0x10/0x10
[ 61.434217][ T9409] ? __lock_acquire+0xb97/0x16a0
[ 61.434978][ T9409] do_filp_open+0x1f8/0x460
[ 61.435673][ T9409] ? rcu_is_watching+0x12/0xd0
[ 61.436403][ T9409] ? __pfx_do_filp_open+0x10/0x10
[ 61.437259][ T9409] ? find_held_lock+0x2d/0x120
[ 61.438021][ T9409] ? __lock_release+0x103/0x470
[ 61.438730][ T9409] ? alloc_fd+0x30c/0x5b0
[ 61.439359][ T9409] ? rcu_is_watching+0x12/0xd0
[ 61.440054][ T9409] ? _raw_spin_unlock+0x28/0x50
[ 61.440714][ T9409] ? alloc_fd+0x30c/0x5b0
[ 61.441307][ T9409] do_sys_openat2+0x16a/0x1d0
[ 61.441983][ T9409] ? __pfx_do_sys_openat2+0x10/0x10
[ 61.442708][ T9409] ? dput+0xd1/0x630
[ 61.443241][ T9409] __x64_sys_creat+0xcd/0x130
[ 61.443885][ T9409] ? __pfx___x64_sys_creat+0x10/0x10
[ 61.444609][ T9409] ? do_syscall_64+0x91/0x260
[ 61.445273][ T9409] do_syscall_64+0xcb/0x260
[ 61.445890][ T9409] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 61.446673][ T9409] RIP: 0033:0x7f2c141b8b3d
[ 61.447353][ T9409] Code: c3 e8 f7 20 00 00 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 61.449643][ T9409] RSP: 002b:00007ffe291fab88 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[ 61.450675][ T9409] RAX: ffffffffffffffda RBX: 00007ffe291fad98 RCX: 00007f2c141b8b3d
[ 61.451590][ T9409] RDX: 00007f2c141b8b3d RSI: 0000000000000000 RDI: 0000400000000000
[ 61.452514][ T9409] RBP: 0000400000000000 R08: 0000000000000000 R09: 0000000000000000
[ 61.453418][ T9409] R10: 0000000000006152 R11: 0000000000000246 R12: 0000000000000001
[ 61.454332][ T9409] R13: 00007ffe291fad88 R14: 00007f2c1423c530 R15: 0000000000000001
[ 61.455217][ T9409]
[ 61.455693][ T9409] Kernel Offset: disabled
[ 61.456189][ T9409] Rebooting in 86400 seconds..
VM DIAGNOSIS:
00:46:13 Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=0000000000000001 RCX=0000000000000000 RDX=ffff88804483d640
RSI=0000000000000000 RDI=0000000000000000 RBP=ffff88804cda0f18 RSP=ffffc900057b7950
R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000
R12=0000000000000001 R13=00000000000041ed R14=ffffffff8e5d8ba0 R15=00000000000041ed
RIP=ffffffff81be157c RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f37570f68c0 ffffffff 00c00000
GS =0000 ffff88802b600000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00005576504a1003 CR3=0000000025f0c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffff00 00ffff0000000000
XMM02=ffff000000000000 ffff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffffff 0000000000000000 XMM05=0000ff00ffffffff ffffff00ffffffff
XMM06=0000000200000000 0000557650506270 XMM07=000055765044bc50 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=ffff000000000000 000000ffff00ffff
XMM10=0000000020000000 0000000020000000 XMM11=ffff00ffffffffff ffff00ffffffffff
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1
RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=ffffffff9b037a00 RBP=ffffffff9b0379c0 RSP=ffffc90007e5f010
R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000
R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b0379c0 R15=0000000000000000
RIP=ffffffff8540d9bf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555673383c0 ffffffff 00c00000
GS =0000 ffff88807ee00000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000048000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00005641ea1e3d30 CR3=000000004c79a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=676173752e424731 2e626c7465677568 XMM01=0101010100010101 0101010100ffff00
XMM02=6365786500646975 756f6e2c00736678 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000ff0000 00000000000000ff XMM05=cd518db8ffff0000 027fff773ffeb737
XMM06=ecfff5ffebfdf92f ffd7ffa107fff9f2 XMM07=eda7ffe81bfff5ff ebffd7ffafff56bf
XMM08=ffa92fffe7bff64d 2dc77ffeee461800 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000