Warning: Permanently added '10.128.0.29' (ED25519) to the list of known hosts. executing program [ 42.142525][ T3501] loop0: detected capacity change from 0 to 32768 [ 42.219213][ T26] audit: type=1800 audit(1699939655.088:2): pid=3503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor511" name="file3" dev="loop0" ino=5 res=0 errno=0 [ 42.240075][ T26] audit: type=1800 audit(1699939655.088:3): pid=3503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor511" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 42.302292][ T3501] ================================================================================ [ 42.303724][ T3503] ================================================================================ [ 42.311933][ T3501] UBSAN: array-index-out-of-bounds in fs/jfs/jfs_xtree.c:633:9 [ 42.321126][ T3503] UBSAN: array-index-out-of-bounds in fs/jfs/jfs_txnmgr.c:1775:21 [ 42.329492][ T3501] index 19 is out of range for type 'xad_t[18]' (aka 'struct xad[18]') [ 42.336600][ T3503] index 19 is out of range for type 'xad_t[18]' (aka 'struct xad[18]') [ 42.336614][ T3503] CPU: 0 PID: 3503 Comm: syz-executor511 Not tainted 5.15.138-syzkaller #0 [ 42.336633][ T3503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 42.336642][ T3503] Call Trace: [ 42.336648][ T3503] [ 42.336656][ T3503] dump_stack_lvl+0x1e3/0x2cb [ 42.382782][ T3503] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 42.388423][ T3503] ? panic+0x84d/0x84d [ 42.392505][ T3503] __ubsan_handle_out_of_bounds+0x118/0x140 [ 42.398406][ T3503] txCommit+0x3ed5/0x6ba0 [ 42.402770][ T3503] ? txLinelock+0x160/0x160 [ 42.407281][ T3503] ? txBegin+0x4fe/0x6e0 [ 42.411528][ T3503] jfs_commit_inode+0x362/0x580 [ 42.416400][ T3503] ? jfs_iget+0x3b0/0x3b0 [ 42.420726][ T3503] ? rcu_is_watching+0x11/0xa0 [ 42.425487][ T3503] ? __mark_inode_dirty+0x3dd/0xd60 [ 42.430695][ T3503] extAlloc+0xca8/0x1000 [ 42.434960][ T3503] ? jfs_ioc_trim+0x660/0x660 [ 42.439633][ T3503] ? down_write_nested+0x117/0x180 [ 42.444739][ T3503] ? down_read_non_owner+0x310/0x310 [ 42.450029][ T3503] jfs_get_block+0x417/0xe50 [ 42.454723][ T3503] ? jfs_dirty_inode+0x230/0x230 [ 42.459660][ T3503] ? iov_iter_advance+0x2a2/0x380 [ 42.464684][ T3503] ? iov_iter_bvec_advance+0x192/0x280 [ 42.470142][ T3503] ? jfs_dirty_inode+0x230/0x230 [ 42.475079][ T3503] __blockdev_direct_IO+0x1b13/0x4f40 [ 42.480447][ T3503] ? generic_file_read_iter+0x28d/0x460 [ 42.485990][ T3503] ? generic_file_splice_read+0x4ad/0x790 [ 42.491758][ T3503] ? sb_init_dio_done_wq+0x80/0x80 [ 42.496869][ T3503] ? invalidate_inode_pages2_range+0x1088/0x1230 [ 42.503199][ T3503] ? jfs_dirty_inode+0x230/0x230 [ 42.508153][ T3503] ? seqcount_lockdep_reader_access+0x153/0x220 [ 42.514482][ T3503] ? lockdep_hardirqs_on+0x94/0x130 [ 42.519683][ T3503] ? invalidate_mapping_pagevec+0x30/0x30 [ 42.525398][ T3503] ? seqcount_lockdep_reader_access+0x1d3/0x220 [ 42.531653][ T3503] ? filemap_write_and_wait_range+0x1d3/0x280 [ 42.537746][ T3503] jfs_direct_IO+0xf6/0x1e0 [ 42.542276][ T3503] generic_file_direct_write+0x204/0x460 [ 42.547932][ T3503] __generic_file_write_iter+0x2a2/0x4f0 [ 42.553569][ T3503] generic_file_write_iter+0xa7/0x1b0 [ 42.558938][ T3503] do_iter_readv_writev+0x594/0x7a0 [ 42.564142][ T3503] ? generic_file_rw_checks+0x260/0x260 [ 42.569696][ T3503] ? common_file_perm+0x17d/0x1d0 [ 42.574724][ T3503] ? fsnotify_perm+0x67/0x5a0 [ 42.579484][ T3503] ? bpf_lsm_file_permission+0x5/0x10 [ 42.584860][ T3503] do_iter_write+0x1ea/0x760 [ 42.589460][ T3503] ? vfs_iter_write+0x69/0xa0 [ 42.594138][ T3503] iter_file_splice_write+0x806/0xfa0 [ 42.599525][ T3503] ? splice_from_pipe+0x230/0x230 [ 42.604542][ T3503] ? generic_file_splice_read+0x54a/0x790 [ 42.610263][ T3503] ? splice_shrink_spd+0xb0/0xb0 [ 42.615211][ T3503] ? common_file_perm+0x17d/0x1d0 [ 42.620230][ T3503] ? splice_from_pipe+0x230/0x230 [ 42.625253][ T3503] direct_splice_actor+0xe3/0x1c0 [ 42.630376][ T3503] splice_direct_to_actor+0x500/0xc10 [ 42.635844][ T3503] ? do_splice_direct+0x3d0/0x3d0 [ 42.640871][ T3503] ? pipe_to_sendpage+0x350/0x350 [ 42.645895][ T3503] ? fsnotify_perm+0x67/0x5a0 [ 42.650568][ T3503] ? bpf_lsm_file_permission+0x5/0x10 [ 42.655941][ T3503] do_splice_direct+0x285/0x3d0 [ 42.660795][ T3503] ? splice_direct_to_actor+0xc10/0xc10 [ 42.666336][ T3503] ? rcu_read_lock_any_held+0xb3/0x160 [ 42.671956][ T3503] do_sendfile+0x625/0xff0 [ 42.676412][ T3503] ? do_pwritev+0x360/0x360 [ 42.680914][ T3503] ? rcu_is_watching+0x11/0xa0 [ 42.685685][ T3503] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 42.691670][ T3503] __se_sys_sendfile64+0x178/0x1e0 [ 42.696794][ T3503] ? __x64_sys_sendfile64+0xa0/0xa0 [ 42.701994][ T3503] ? syscall_enter_from_user_mode+0x2e/0x230 [ 42.707975][ T3503] ? lockdep_hardirqs_on+0x94/0x130 [ 42.713172][ T3503] ? syscall_enter_from_user_mode+0x2e/0x230 [ 42.719154][ T3503] do_syscall_64+0x3d/0xb0 [ 42.723582][ T3503] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 42.729473][ T3503] RIP: 0033:0x7fb634a6f429 [ 42.733885][ T3503] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 31 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 42.753709][ T3503] RSP: 002b:00007fb634a0a218 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 42.762134][ T3503] RAX: ffffffffffffffda RBX: 00007fb634afb678 RCX: 00007fb634a6f429 [ 42.770127][ T3503] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 42.778093][ T3503] RBP: 00007fb634afb670 R08: 0000000000000000 R09: 0000000000000000 [ 42.786063][ T3503] R10: 0001000000201014 R11: 0000000000000246 R12: 00007fb634ac8110 [ 42.794125][ T3503] R13: 0033656c69662f2e R14: 0031656c69662f2e R15: 6c75662f7665642f [ 42.802112][ T3503] [ 42.805222][ T3501] CPU: 1 PID: 3501 Comm: syz-executor511 Not tainted 5.15.138-syzkaller #0 [ 42.806248][ T3503] ================================================================================ [ 42.813812][ T3501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 42.813826][ T3501] Call Trace: [ 42.813832][ T3501] [ 42.813839][ T3501] dump_stack_lvl+0x1e3/0x2cb [ 42.813867][ T3501] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 42.813885][ T3501] ? panic+0x84d/0x84d [ 42.823230][ T3503] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 42.833198][ T3501] __ubsan_handle_out_of_bounds+0x118/0x140 [ 42.866861][ T3501] xtInsert+0xf41/0xfa0 [ 42.871030][ T3501] ? xtSearch+0x1ca0/0x1ca0 [ 42.875542][ T3501] ? mark_lock+0x98/0x340 [ 42.879865][ T3501] ? dquot_drop+0x2a0/0x2a0 [ 42.884367][ T3501] ? rcu_is_watching+0x11/0xa0 [ 42.889146][ T3501] ? __mark_inode_dirty+0x3dd/0xd60 [ 42.894341][ T3501] extAlloc+0xa70/0x1000 [ 42.898592][ T3501] ? jfs_ioc_trim+0x660/0x660 [ 42.903260][ T3501] ? down_write_nested+0x117/0x180 [ 42.908366][ T3501] ? memset+0x1f/0x40 [ 42.912343][ T3501] jfs_get_block+0x417/0xe50 [ 42.916951][ T3501] ? jfs_dirty_inode+0x230/0x230 [ 42.921925][ T3501] nobh_write_begin+0x398/0xda0 [ 42.926824][ T3501] jfs_write_begin+0x3e/0x80 [ 42.931441][ T3501] ? jfs_dirty_inode+0x230/0x230 [ 42.936401][ T3501] generic_perform_write+0x2bf/0x5b0 [ 42.941691][ T3501] ? grab_cache_page_write_begin+0x90/0x90 [ 42.947488][ T3501] ? file_remove_privs+0x610/0x610 [ 42.952596][ T3501] ? down_write+0x10e/0x170 [ 42.957097][ T3501] __generic_file_write_iter+0x243/0x4f0 [ 42.962725][ T3501] generic_file_write_iter+0xa7/0x1b0 [ 42.968093][ T3501] do_iter_readv_writev+0x594/0x7a0 [ 42.973293][ T3501] ? generic_file_rw_checks+0x260/0x260 [ 42.978840][ T3501] ? common_file_perm+0x17d/0x1d0 [ 42.983861][ T3501] ? fsnotify_perm+0x67/0x5a0 [ 42.988528][ T3501] ? bpf_lsm_file_permission+0x5/0x10 [ 42.993899][ T3501] do_iter_write+0x1ea/0x760 [ 42.998491][ T3501] ? vfs_iter_write+0x69/0xa0 [ 43.003165][ T3501] iter_file_splice_write+0x806/0xfa0 [ 43.008556][ T3501] ? splice_from_pipe+0x230/0x230 [ 43.013571][ T3501] ? generic_file_splice_read+0x577/0x790 [ 43.019289][ T3501] ? splice_shrink_spd+0xb0/0xb0 [ 43.024231][ T3501] ? common_file_perm+0x17d/0x1d0 [ 43.029246][ T3501] ? splice_from_pipe+0x230/0x230 [ 43.034487][ T3501] direct_splice_actor+0xe3/0x1c0 [ 43.039533][ T3501] splice_direct_to_actor+0x500/0xc10 [ 43.044924][ T3501] ? do_splice_direct+0x3d0/0x3d0 [ 43.049948][ T3501] ? pipe_to_sendpage+0x350/0x350 [ 43.054965][ T3501] ? fsnotify_perm+0x67/0x5a0 [ 43.059724][ T3501] ? bpf_lsm_file_permission+0x5/0x10 [ 43.065091][ T3501] do_splice_direct+0x285/0x3d0 [ 43.069942][ T3501] ? splice_direct_to_actor+0xc10/0xc10 [ 43.075479][ T3501] ? rcu_read_lock_any_held+0xb3/0x160 [ 43.080944][ T3501] do_sendfile+0x625/0xff0 [ 43.085364][ T3501] ? do_pwritev+0x360/0x360 [ 43.089881][ T3501] ? rcu_is_watching+0x11/0xa0 [ 43.094661][ T3501] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 43.100639][ T3501] __se_sys_sendfile64+0x178/0x1e0 [ 43.105748][ T3501] ? __x64_sys_sendfile64+0xa0/0xa0 [ 43.110940][ T3501] ? syscall_enter_from_user_mode+0x2e/0x230 [ 43.116925][ T3501] ? lockdep_hardirqs_on+0x94/0x130 [ 43.122219][ T3501] ? syscall_enter_from_user_mode+0x2e/0x230 [ 43.128196][ T3501] do_syscall_64+0x3d/0xb0 [ 43.132730][ T3501] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 43.138703][ T3501] RIP: 0033:0x7fb634a6f429 [ 43.143117][ T3501] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 31 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 43.162889][ T3501] RSP: 002b:00007fb634a2b218 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 43.171309][ T3501] RAX: ffffffffffffffda RBX: 00007fb634afb668 RCX: 00007fb634a6f429 [ 43.179709][ T3501] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 43.187672][ T3501] RBP: 00007fb634afb660 R08: 0000000000000000 R09: 0000000000000000 [ 43.195642][ T3501] R10: 0001000000201005 R11: 0000000000000246 R12: 00007fb634ac8110 [ 43.203607][ T3501] R13: 0033656c69662f2e R14: 0031656c69662f2e R15: 6c75662f7665642f [ 43.211589][ T3501] [ 43.214603][ T3503] CPU: 0 PID: 3503 Comm: syz-executor511 Not tainted 5.15.138-syzkaller #0 [ 43.223209][ T3503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 43.228321][ T3501] ================================================================================ [ 43.233354][ T3503] Call Trace: [ 43.233363][ T3503] [ 43.233370][ T3503] dump_stack_lvl+0x1e3/0x2cb [ 43.233396][ T3503] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 43.233414][ T3503] ? panic+0x84d/0x84d [ 43.233441][ T3503] panic+0x318/0x84d [ 43.242915][ T3501] ================================================================================ [ 43.245980][ T3503] ? check_panic_on_warn+0x1d/0xa0 [ 43.246006][ T3503] ? fb_is_primary_device+0xcc/0xcc [ 43.249079][ T3501] UBSAN: array-index-out-of-bounds in fs/jfs/jfs_xtree.c:281:11 [ 43.253723][ T3503] ? dump_stack_lvl+0x24f/0x2cb [ 43.253756][ T3503] check_panic_on_warn+0x7e/0xa0 [ 43.253776][ T3503] __ubsan_handle_out_of_bounds+0x138/0x140 [ 43.253804][ T3503] txCommit+0x3ed5/0x6ba0 [ 43.260841][ T3501] index 19 is out of range for type 'xad_t[18]' (aka 'struct xad[18]') [ 43.263489][ T3503] ? txLinelock+0x160/0x160 [ 43.263520][ T3503] ? txBegin+0x4fe/0x6e0 [ 43.331899][ T3503] jfs_commit_inode+0x362/0x580 [ 43.336765][ T3503] ? jfs_iget+0x3b0/0x3b0 [ 43.341091][ T3503] ? rcu_is_watching+0x11/0xa0 [ 43.345852][ T3503] ? __mark_inode_dirty+0x3dd/0xd60 [ 43.351482][ T3503] extAlloc+0xca8/0x1000 [ 43.355732][ T3503] ? jfs_ioc_trim+0x660/0x660 [ 43.360405][ T3503] ? down_write_nested+0x117/0x180 [ 43.365510][ T3503] ? down_read_non_owner+0x310/0x310 [ 43.370810][ T3503] jfs_get_block+0x417/0xe50 [ 43.375431][ T3503] ? jfs_dirty_inode+0x230/0x230 [ 43.380380][ T3503] ? iov_iter_advance+0x2a2/0x380 [ 43.385398][ T3503] ? iov_iter_bvec_advance+0x192/0x280 [ 43.390943][ T3503] ? jfs_dirty_inode+0x230/0x230 [ 43.395880][ T3503] __blockdev_direct_IO+0x1b13/0x4f40 [ 43.401249][ T3503] ? generic_file_read_iter+0x28d/0x460 [ 43.406894][ T3503] ? generic_file_splice_read+0x4ad/0x790 [ 43.412756][ T3503] ? sb_init_dio_done_wq+0x80/0x80 [ 43.417868][ T3503] ? invalidate_inode_pages2_range+0x1088/0x1230 [ 43.424218][ T3503] ? jfs_dirty_inode+0x230/0x230 [ 43.429258][ T3503] ? seqcount_lockdep_reader_access+0x153/0x220 [ 43.435492][ T3503] ? lockdep_hardirqs_on+0x94/0x130 [ 43.440960][ T3503] ? invalidate_mapping_pagevec+0x30/0x30 [ 43.446847][ T3503] ? seqcount_lockdep_reader_access+0x1d3/0x220 [ 43.453102][ T3503] ? filemap_write_and_wait_range+0x1d3/0x280 [ 43.459185][ T3503] jfs_direct_IO+0xf6/0x1e0 [ 43.463724][ T3503] generic_file_direct_write+0x204/0x460 [ 43.469371][ T3503] __generic_file_write_iter+0x2a2/0x4f0 [ 43.475006][ T3503] generic_file_write_iter+0xa7/0x1b0 [ 43.480378][ T3503] do_iter_readv_writev+0x594/0x7a0 [ 43.485580][ T3503] ? generic_file_rw_checks+0x260/0x260 [ 43.491125][ T3503] ? common_file_perm+0x17d/0x1d0 [ 43.496147][ T3503] ? fsnotify_perm+0x67/0x5a0 [ 43.500831][ T3503] ? bpf_lsm_file_permission+0x5/0x10 [ 43.506220][ T3503] do_iter_write+0x1ea/0x760 [ 43.510817][ T3503] ? vfs_iter_write+0x69/0xa0 [ 43.515492][ T3503] iter_file_splice_write+0x806/0xfa0 [ 43.520879][ T3503] ? splice_from_pipe+0x230/0x230 [ 43.526159][ T3503] ? generic_file_splice_read+0x54a/0x790 [ 43.531883][ T3503] ? splice_shrink_spd+0xb0/0xb0 [ 43.536832][ T3503] ? common_file_perm+0x17d/0x1d0 [ 43.541852][ T3503] ? splice_from_pipe+0x230/0x230 [ 43.546875][ T3503] direct_splice_actor+0xe3/0x1c0 [ 43.551900][ T3503] splice_direct_to_actor+0x500/0xc10 [ 43.557401][ T3503] ? do_splice_direct+0x3d0/0x3d0 [ 43.562570][ T3503] ? pipe_to_sendpage+0x350/0x350 [ 43.567702][ T3503] ? fsnotify_perm+0x67/0x5a0 [ 43.572483][ T3503] ? bpf_lsm_file_permission+0x5/0x10 [ 43.577869][ T3503] do_splice_direct+0x285/0x3d0 [ 43.582739][ T3503] ? splice_direct_to_actor+0xc10/0xc10 [ 43.588283][ T3503] ? rcu_read_lock_any_held+0xb3/0x160 [ 43.593751][ T3503] do_sendfile+0x625/0xff0 [ 43.598182][ T3503] ? do_pwritev+0x360/0x360 [ 43.602683][ T3503] ? rcu_is_watching+0x11/0xa0 [ 43.607532][ T3503] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 43.613528][ T3503] __se_sys_sendfile64+0x178/0x1e0 [ 43.618640][ T3503] ? __x64_sys_sendfile64+0xa0/0xa0 [ 43.623833][ T3503] ? syscall_enter_from_user_mode+0x2e/0x230 [ 43.629809][ T3503] ? lockdep_hardirqs_on+0x94/0x130 [ 43.635010][ T3503] ? syscall_enter_from_user_mode+0x2e/0x230 [ 43.640987][ T3503] do_syscall_64+0x3d/0xb0 [ 43.645408][ T3503] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 43.651300][ T3503] RIP: 0033:0x7fb634a6f429 [ 43.655716][ T3503] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 31 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 43.675318][ T3503] RSP: 002b:00007fb634a0a218 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 43.683830][ T3503] RAX: ffffffffffffffda RBX: 00007fb634afb678 RCX: 00007fb634a6f429 [ 43.691808][ T3503] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 43.700655][ T3503] RBP: 00007fb634afb670 R08: 0000000000000000 R09: 0000000000000000 [ 43.708637][ T3503] R10: 0001000000201014 R11: 0000000000000246 R12: 00007fb634ac8110 [ 43.716620][ T3503] R13: 0033656c69662f2e R14: 0031656c69662f2e R15: 6c75662f7665642f [ 43.724618][ T3503] [ 43.727934][ T3503] Kernel Offset: disabled [ 43.732329][ T3503] Rebooting in 86400 seconds..