Warning: Permanently added '10.128.10.6' (ED25519) to the list of known hosts. executing program [ 43.581690][ T4018] loop0: detected capacity change from 0 to 32768 [ 43.677762][ T4018] ================================================================== [ 43.680021][ T4018] BUG: KASAN: slab-out-of-bounds in dtReadFirst+0x3f4/0x78c [ 43.681955][ T4018] Read of size 4 at addr ffff0000dc3c4050 by task syz-executor125/4018 [ 43.684200][ T4018] [ 43.684822][ T4018] CPU: 0 PID: 4018 Comm: syz-executor125 Not tainted 5.15.180-syzkaller #0 [ 43.687075][ T4018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 43.689764][ T4018] Call trace: [ 43.690660][ T4018] dump_backtrace+0x0/0x43c [ 43.691878][ T4018] show_stack+0x2c/0x3c [ 43.693000][ T4018] __dump_stack+0x30/0x40 [ 43.694155][ T4018] dump_stack_lvl+0xf8/0x160 [ 43.695447][ T4018] print_address_description+0x78/0x30c [ 43.696927][ T4018] kasan_report+0xec/0x15c [ 43.698059][ T4018] __asan_report_load4_noabort+0x44/0x50 [ 43.699628][ T4018] dtReadFirst+0x3f4/0x78c [ 43.700857][ T4018] jfs_readdir+0x628/0x3024 [ 43.702040][ T4018] iterate_dir+0x1f0/0x4cc [ 43.703219][ T4018] __arm64_sys_getdents64+0x11c/0x340 [ 43.704756][ T4018] invoke_syscall+0x98/0x2b8 [ 43.706043][ T4018] el0_svc_common+0x138/0x258 [ 43.707307][ T4018] do_el0_svc+0x58/0x14c [ 43.708563][ T4018] el0_svc+0x78/0x1e0 [ 43.709599][ T4018] el0t_64_sync_handler+0xcc/0xe4 [ 43.710897][ T4018] el0t_64_sync+0x1a0/0x1a4 [ 43.712182][ T4018] [ 43.712797][ T4018] Allocated by task 4018: [ 43.713995][ T4018] __kasan_slab_alloc+0x8c/0xcc [ 43.715260][ T4018] slab_post_alloc_hook+0x74/0x408 [ 43.716598][ T4018] kmem_cache_alloc+0x1e0/0x3e4 [ 43.717936][ T4018] jfs_alloc_inode+0x24/0x60 [ 43.719120][ T4018] new_inode_pseudo+0x68/0x1fc [ 43.720460][ T4018] new_inode+0x38/0x174 [ 43.721549][ T4018] ialloc+0x54/0x7a4 [ 43.722656][ T4018] jfs_create+0x170/0x8c4 [ 43.723849][ T4018] path_openat+0x1144/0x26e4 [ 43.725106][ T4018] do_filp_open+0x164/0x330 [ 43.726299][ T4018] do_sys_openat2+0x128/0x3d8 [ 43.727552][ T4018] __arm64_sys_openat+0x120/0x154 [ 43.728872][ T4018] invoke_syscall+0x98/0x2b8 [ 43.730149][ T4018] el0_svc_common+0x138/0x258 [ 43.731412][ T4018] do_el0_svc+0x58/0x14c [ 43.732570][ T4018] el0_svc+0x78/0x1e0 [ 43.733725][ T4018] el0t_64_sync_handler+0xcc/0xe4 [ 43.735097][ T4018] el0t_64_sync+0x1a0/0x1a4 [ 43.736356][ T4018] [ 43.736981][ T4018] The buggy address belongs to the object at ffff0000dc3c3780 [ 43.736981][ T4018] which belongs to the cache jfs_ip of size 2240 [ 43.740598][ T4018] The buggy address is located 16 bytes to the right of [ 43.740598][ T4018] 2240-byte region [ffff0000dc3c3780, ffff0000dc3c4040) [ 43.744298][ T4018] The buggy address belongs to the page: [ 43.745882][ T4018] page:0000000043a8212e refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11c3c0 [ 43.748595][ T4018] head:0000000043a8212e order:3 compound_mapcount:0 compound_pincount:0 [ 43.750818][ T4018] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 43.753000][ T4018] raw: 05ffc00000010200 0000000000000000 dead000000000122 ffff0000c2a3ea80 [ 43.755249][ T4018] raw: 0000000000000000 00000000800d000d 00000001ffffffff 0000000000000000 [ 43.757619][ T4018] page dumped because: kasan: bad access detected [ 43.759267][ T4018] [ 43.759940][ T4018] Memory state around the buggy address: [ 43.761409][ T4018] ffff0000dc3c3f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 43.763545][ T4018] ffff0000dc3c3f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 43.765698][ T4018] >ffff0000dc3c4000: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 43.767856][ T4018] ^ [ 43.769602][ T4018] ffff0000dc3c4080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 43.771817][ T4018] ffff0000dc3c4100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 43.773967][ T4018] ================================================================== [ 43.776149][ T4018] Disabling lock debugging due to kernel taint [ 43.777942][ T4018] ERROR: (device loop0): dtReadFirst: btstack overrun [ 43.777942][ T4018] [ 43.780934][ T4018] ERROR: (device loop0): remounting filesystem as read-only [ 43.782849][ T4018] btstack dump: [ 43.783712][ T4018] bn = 0, index = 0 [ 43.784720][ T4018] bn = 0, index = 0 [ 43.785661][ T4018] bn = 0, index = 0 [ 43.786661][ T4018] bn = 0, index = 0 [ 43.787677][ T4018] bn = 0, index = 0 [ 43.788743][ T4018] bn = 0, index = 0 [ 43.789774][ T4018] bn = 0, index = 0 [ 43.790772][ T4018] bn = 0, index = 0