Warning: Permanently added '10.128.0.72' (ED25519) to the list of known hosts. executing program [ 35.410192][ T6170] loop0: detected capacity change from 0 to 32768 [ 35.426980][ T95] ------------[ cut here ]------------ [ 35.428281][ T95] UBSAN: array-index-out-of-bounds in fs/jfs/jfs_dmap.c:2780:24 [ 35.430033][ T95] index 1621 is out of range for type 's8[1365]' (aka 'signed char[1365]') [ 35.431918][ T95] CPU: 1 PID: 95 Comm: jfsCommit Not tainted 6.8.0-rc2-syzkaller-g41bccc98fb79 #0 [ 35.433849][ T95] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 35.436096][ T95] Call trace: [ 35.436772][ T95] dump_backtrace+0x1b8/0x1e4 [ 35.437794][ T95] show_stack+0x2c/0x3c [ 35.438737][ T95] dump_stack_lvl+0xd0/0x124 [ 35.439780][ T95] dump_stack+0x1c/0x28 [ 35.440776][ T95] __ubsan_handle_out_of_bounds+0xf8/0x148 [ 35.442031][ T95] dbJoin+0x288/0x2c4 [ 35.443001][ T95] dbFreeBits+0x458/0xc30 [ 35.443964][ T95] dbFree+0x2d4/0x5b0 [ 35.444825][ T95] txFreeMap+0x668/0xb84 [ 35.445766][ T95] txUpdateMap+0x2e8/0x8e4 [ 35.446775][ T95] jfs_lazycommit+0x3a4/0x98c [ 35.447916][ T95] kthread+0x288/0x310 [ 35.448871][ T95] ret_from_fork+0x10/0x20 [ 35.450024][ T95] ---[ end trace ]--- [ 35.451173][ T95] ------------[ cut here ]------------ [ 35.452353][ T95] WARNING: CPU: 1 PID: 95 at fs/jfs/jfs_dmap.c:2879 dbAdjTree+0x3a0/0x480 [ 35.454217][ T95] Modules linked in: [ 35.455166][ T95] CPU: 1 PID: 95 Comm: jfsCommit Not tainted 6.8.0-rc2-syzkaller-g41bccc98fb79 #0 [ 35.457302][ T95] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 35.459508][ T95] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 35.461267][ T95] pc : dbAdjTree+0x3a0/0x480 [ 35.462343][ T95] lr : dbAdjTree+0x3a0/0x480 [ 35.463331][ T95] sp : ffff800097497950 [ 35.464366][ T95] x29: ffff800097497950 x28: dfff800000000000 x27: 1fffe0001b143c02 [ 35.466156][ T95] x26: dfff800000000000 x25: ffff0000d8a1e676 x24: 0000000000000000 [ 35.467990][ T95] x23: 0000000000000155 x22: 0000000000000656 x21: 0000000000000004 [ 35.469787][ T95] x20: 0000000000000001 x19: ffff0000d8a1e010 x18: ffff800097496f80 [ 35.471662][ T95] x17: 0000000000000000 x16: ffff80008ac972c0 x15: ffff7000123dd7d4 [ 35.473360][ T95] x14: 1ffff000123dd7d4 x13: 0000000000000004 x12: ffffffffffffffff [ 35.475267][ T95] x11: ffff7000123dd7d4 x10: 0000000000ff0100 x9 : 0000000000000000 [ 35.477072][ T95] x8 : ffff0000c4c1da00 x7 : 0000000000000001 x6 : 0000000000000001 [ 35.478968][ T95] x5 : ffff800097497258 x4 : ffff80008ed51900 x3 : 0000000000000000 [ 35.480725][ T95] x2 : 0000000000000004 x1 : 0000000000000155 x0 : 0000000000000656 [ 35.482594][ T95] Call trace: [ 35.483399][ T95] dbAdjTree+0x3a0/0x480 [ 35.484418][ T95] dbJoin+0x20c/0x2c4 [ 35.485319][ T95] dbFreeBits+0x458/0xc30 [ 35.486302][ T95] dbFree+0x2d4/0x5b0 [ 35.487220][ T95] txFreeMap+0x668/0xb84 [ 35.488151][ T95] txUpdateMap+0x2e8/0x8e4 [ 35.489045][ T95] jfs_lazycommit+0x3a4/0x98c [ 35.490102][ T95] kthread+0x288/0x310 [ 35.491094][ T95] ret_from_fork+0x10/0x20 [ 35.492110][ T95] irq event stamp: 184 [ 35.493133][ T95] hardirqs last enabled at (183): [] console_unlock+0x17c/0x3d4 [ 35.495276][ T95] hardirqs last disabled at (184): [] el1_dbg+0x24/0x80 [ 35.497249][ T95] softirqs last enabled at (168): [] __do_softirq+0xac8/0xce4 [ 35.499427][ T95] softirqs last disabled at (105): [] ____do_softirq+0x14/0x20 [ 35.501534][ T95] ---[ end trace 0000000000000000 ]---