Warning: Permanently added '10.128.0.9' (ECDSA) to the list of known hosts. [ 441.822634][ T5100] cgroup: Unknown subsys name 'net' [ 441.978107][ T5100] cgroup: Unknown subsys name 'rlimit' [ 442.149232][ T5125] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 442.159061][ T5125] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 442.169828][ T5129] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 442.172000][ T5130] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 442.177805][ T5129] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 442.184730][ T5130] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 442.191752][ T5129] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 442.198419][ T5130] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 442.207107][ T5129] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 442.212643][ T5130] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 442.219247][ T5129] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 442.226408][ T5130] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 442.233278][ T5129] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 442.241249][ T5131] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 442.248056][ T5129] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 442.254849][ T5131] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 442.261826][ T5129] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 442.268254][ T5131] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 442.276082][ T5129] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 442.289668][ T5131] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 442.290189][ T5129] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 442.297070][ T5131] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 442.304247][ T5129] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 442.310924][ T5131] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 442.318497][ T5129] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 442.324890][ T5131] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 442.331939][ T5129] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 442.338611][ T5131] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 442.353118][ T4390] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 442.353419][ T5131] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 442.360707][ T4390] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 442.367387][ T5131] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 442.374257][ T4390] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 442.382918][ T5131] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 442.395462][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 442.397335][ T5131] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 executing program executing program executing program executing program executing program [ 442.860431][ T5136] loop1: detected capacity change from 0 to 32768 executing program [ 442.897191][ T27] audit: type=1800 audit(1672379153.273:2): pid=5136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor375" name="bus" dev="loop1" ino=7 res=0 errno=0 [ 443.005753][ T27] audit: type=1800 audit(1672379153.333:3): pid=5136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor375" name="file1" dev="loop1" ino=4 res=0 errno=0 executing program [ 443.589228][ T5146] loop0: detected capacity change from 0 to 32768 [ 443.634820][ T27] audit: type=1800 audit(1672379154.013:4): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor375" name="bus" dev="loop0" ino=7 res=0 errno=0 [ 443.742904][ T27] audit: type=1800 audit(1672379154.103:5): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor375" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 443.769519][ T5144] loop4: detected capacity change from 0 to 32768 [ 443.842234][ T5150] loop5: detected capacity change from 0 to 32768 [ 443.872585][ T27] audit: type=1800 audit(1672379154.203:6): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor375" name="bus" dev="loop4" ino=7 res=0 errno=0 [ 443.933313][ T5149] loop2: detected capacity change from 0 to 32768 [ 443.935084][ T5152] loop3: detected capacity change from 0 to 32768 [ 443.955895][ T27] audit: type=1800 audit(1672379154.273:7): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor375" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 444.125573][ T27] audit: type=1800 audit(1672379154.313:8): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor375" name="bus" dev="loop5" ino=7 res=0 errno=0 [ 444.186288][ T5160] ================================================================================ [ 444.217788][ T5160] UBSAN: array-index-out-of-bounds in fs/jfs/jfs_txnmgr.c:1738:5 executing program [ 444.226646][ T27] audit: type=1800 audit(1672379154.363:9): pid=5156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor375" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 444.265773][ T5160] index 18 is out of range for type 'xad_t [18]' [ 444.287160][ T5160] CPU: 0 PID: 5160 Comm: syz-executor375 Not tainted 6.2.0-rc1-syzkaller-00043-g2258c2dc850b #0 [ 444.297636][ T5160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 444.307717][ T5160] Call Trace: [ 444.311020][ T5160] [ 444.313971][ T5160] dump_stack_lvl+0x1b1/0x290 [ 444.318791][ T5160] ? nf_tcp_handle_invalid+0x630/0x630 [ 444.324284][ T5160] ? vsnprintf+0x19e/0x1cb0 [ 444.328918][ T5160] ? panic+0x710/0x710 [ 444.333031][ T5160] __ubsan_handle_out_of_bounds+0xe0/0x110 [ 444.338964][ T5160] txCommit+0x3fb5/0x6d40 [ 444.343403][ T5160] ? txLinelock+0x180/0x180 [ 444.347945][ T5160] ? txBegin+0x511/0x690 [ 444.352228][ T5160] jfs_commit_inode+0x342/0x5a0 [ 444.357110][ T5160] ? jfs_iget+0x3b0/0x3b0 [ 444.361465][ T5160] ? jfs_evict_inode+0x440/0x440 [ 444.366448][ T5160] extAlloc+0xc93/0xff0 [ 444.370666][ T5160] ? jfs_ioc_trim+0x660/0x660 [ 444.375375][ T5160] ? down_read_non_owner+0xa0/0xa0 [ 444.380543][ T5160] ? __iov_iter_get_pages_alloc+0x8c9/0xac0 [ 444.386547][ T5160] jfs_get_block+0x342/0xce0 [ 444.391176][ T5160] ? jfs_dirty_inode+0x240/0x240 [ 444.391689][ T5154] loop1: detected capacity change from 0 to 32768 [ 444.396130][ T5160] ? blk_start_plug+0x95/0x110 [ 444.407368][ T5160] ? jfs_dirty_inode+0x240/0x240 [ 444.412332][ T5160] __blockdev_direct_IO+0x1737/0x3bf0 [ 444.417870][ T5160] ? rcu_read_lock_sched_held+0x87/0x110 [ 444.423569][ T5160] ? sb_init_dio_done_wq+0x80/0x80 [ 444.428716][ T5160] ? jfs_dirty_inode+0x240/0x240 [ 444.433689][ T5160] ? mark_lock+0x9a/0x350 [ 444.438083][ T5160] ? filemap_write_and_wait_range+0x215/0x2e0 [ 444.444236][ T5160] ? seqcount_lockdep_reader_access+0x13a/0x1f0 [ 444.450571][ T5160] ? lockdep_hardirqs_on+0x8d/0x130 [ 444.455868][ T5160] jfs_direct_IO+0xf6/0x1e0 [ 444.460407][ T5160] generic_file_direct_write+0x294/0x610 [ 444.466087][ T5160] ? dio_warn_stale_pagecache+0x1a0/0x1a0 [ 444.471845][ T5160] ? file_update_time+0x374/0x5d0 [ 444.476932][ T5160] ? generic_write_checks_count+0x3de/0x4b0 [ 444.482724][ T5132] Bluetooth: hci5: command 0x0409 tx timeout [ 444.482902][ T5160] ? __file_remove_privs+0x610/0x610 [ 444.489228][ T5132] Bluetooth: hci1: command 0x0409 tx timeout [ 444.494206][ T5160] ? generic_write_checks+0x15c/0x1c0 [ 444.494247][ T5160] __generic_file_write_iter+0x1c4/0x400 [ 444.494283][ T5160] generic_file_write_iter+0xab/0x310 [ 444.494312][ T5160] do_iter_write+0x6c2/0xc20 [ 444.521487][ T5160] ? rcu_read_lock_sched_held+0x87/0x110 [ 444.527157][ T5160] ? vfs_iter_write+0xa0/0xa0 [ 444.531880][ T5160] ? PageUptodate+0xe7/0x2b0 [ 444.536543][ T5160] ? vfs_iter_write+0x69/0xa0 [ 444.541255][ T5160] iter_file_splice_write+0x7fc/0xfc0 [ 444.546695][ T5160] ? splice_from_pipe+0x200/0x200 [ 444.551765][ T5160] ? __fsnotify_parent+0x4fa/0x710 [ 444.556905][ T5160] ? splice_shrink_spd+0xb0/0xb0 [ 444.561889][ T5160] ? __fsnotify_update_child_dentry_flags+0x2d0/0x2d0 [ 444.568693][ T5160] ? splice_from_pipe+0x200/0x200 [ 444.573752][ T5160] direct_splice_actor+0xe6/0x1c0 [ 444.578812][ T5160] splice_direct_to_actor+0x4e4/0xc00 [ 444.584245][ T5160] ? do_splice_direct+0x3d0/0x3d0 [ 444.589315][ T5160] ? pipe_to_sendpage+0x340/0x340 [ 444.594376][ T5160] ? bpf_lsm_file_permission+0x5/0x10 [ 444.599851][ T5160] ? security_file_permission+0xe0/0x5c0 [ 444.605602][ T5160] do_splice_direct+0x279/0x3d0 [ 444.610501][ T5160] ? splice_direct_to_actor+0xc00/0xc00 [ 444.616079][ T5160] ? rcu_read_lock_any_held+0xb1/0x130 [ 444.621576][ T5160] ? apparmor_file_permission+0x1f0/0x310 [ 444.627404][ T5160] do_sendfile+0x5fb/0xf80 [ 444.631873][ T5160] ? do_pwritev+0x350/0x350 [ 444.636420][ T5160] ? lockdep_hardirqs_on_prepare+0x428/0x790 [ 444.642436][ T5160] __se_sys_sendfile64+0x14f/0x1b0 [ 444.647587][ T5160] ? __x64_sys_sendfile64+0xa0/0xa0 [ 444.652821][ T5160] ? syscall_enter_from_user_mode+0x2e/0x1d0 [ 444.653519][ T27] audit: type=1800 audit(1672379154.383:10): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor375" name="bus" dev="loop3" ino=7 res=0 errno=0 [ 444.658805][ T5160] ? lockdep_hardirqs_on+0x8d/0x130 [ 444.658831][ T5160] ? syscall_enter_from_user_mode+0x2e/0x1d0 [ 444.658855][ T5160] do_syscall_64+0x3d/0xb0 [ 444.658880][ T5160] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 444.700849][ T5160] RIP: 0033:0x7f023a52fc19 [ 444.705296][ T5160] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 31 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 444.724932][ T5160] RSP: 002b:00007f02328af208 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 executing program executing program [ 444.733391][ T5160] RAX: ffffffffffffffda RBX: 00007f023a5b9598 RCX: 00007f023a52fc19 [ 444.741393][ T5160] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 444.749397][ T5160] RBP: 00007f023a5b9590 R08: 0000000000000000 R09: 0000000000000000 [ 444.757412][ T5160] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 00007f023a5b959c [ 444.765412][ T5160] R13: 00007fffeed6da8f R14: 00007f02328af300 R15: 0000000000022000 executing program [ 444.767540][ T27] audit: type=1800 audit(1672379154.393:11): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor375" name="bus" dev="loop2" ino=7 res=0 errno=0 [ 444.773490][ T5160] [ 444.797485][ T5130] Bluetooth: hci0: command 0x0409 tx timeout [ 444.801911][ T5132] Bluetooth: hci2: command 0x0409 tx timeout [ 444.803898][ T5127] Bluetooth: hci4: command 0x0409 tx timeout [ 444.809814][ T5132] Bluetooth: hci3: command 0x0409 tx timeout [ 444.817396][ T5160] ================================================================================ [ 444.832400][ T5160] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 444.839630][ T5160] CPU: 1 PID: 5160 Comm: syz-executor375 Not tainted 6.2.0-rc1-syzkaller-00043-g2258c2dc850b #0 [ 444.850048][ T5160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 444.860102][ T5160] Call Trace: [ 444.863378][ T5160] [ 444.866307][ T5160] dump_stack_lvl+0x1b1/0x290 [ 444.870994][ T5160] ? nf_tcp_handle_invalid+0x630/0x630 [ 444.876460][ T5160] ? panic+0x710/0x710 [ 444.880524][ T5160] ? tick_nohz_tick_stopped+0x76/0xb0 [ 444.885971][ T5160] ? __irq_work_queue_local+0x121/0x180 [ 444.891555][ T5160] ? vscnprintf+0x59/0x80 [ 444.895898][ T5160] panic+0x2d6/0x710 [ 444.899797][ T5160] ? check_panic_on_warn+0x1d/0xa0 [ 444.904955][ T5160] ? memcpy_page_flushcache+0x100/0x100 [ 444.910501][ T5160] ? dump_stack_lvl+0x20b/0x290 [ 444.915364][ T5160] check_panic_on_warn+0x80/0xa0 [ 444.920304][ T5160] __ubsan_handle_out_of_bounds+0x102/0x110 [ 444.926205][ T5160] txCommit+0x3fb5/0x6d40 [ 444.930573][ T5160] ? txLinelock+0x180/0x180 [ 444.935085][ T5160] ? txBegin+0x511/0x690 [ 444.939339][ T5160] jfs_commit_inode+0x342/0x5a0 [ 444.944190][ T5160] ? jfs_iget+0x3b0/0x3b0 [ 444.948514][ T5160] ? jfs_evict_inode+0x440/0x440 [ 444.953463][ T5160] extAlloc+0xc93/0xff0 [ 444.957634][ T5160] ? jfs_ioc_trim+0x660/0x660 [ 444.962312][ T5160] ? down_read_non_owner+0xa0/0xa0 [ 444.967421][ T5160] ? __iov_iter_get_pages_alloc+0x8c9/0xac0 [ 444.973331][ T5160] jfs_get_block+0x342/0xce0 [ 444.977928][ T5160] ? jfs_dirty_inode+0x240/0x240 [ 444.982874][ T5160] ? blk_start_plug+0x95/0x110 [ 444.987636][ T5160] ? jfs_dirty_inode+0x240/0x240 [ 444.992569][ T5160] __blockdev_direct_IO+0x1737/0x3bf0 [ 444.997986][ T5160] ? rcu_read_lock_sched_held+0x87/0x110 [ 445.003621][ T5160] ? sb_init_dio_done_wq+0x80/0x80 [ 445.008738][ T5160] ? jfs_dirty_inode+0x240/0x240 [ 445.013682][ T5160] ? mark_lock+0x9a/0x350 [ 445.018030][ T5160] ? filemap_write_and_wait_range+0x215/0x2e0 [ 445.024098][ T5160] ? seqcount_lockdep_reader_access+0x13a/0x1f0 [ 445.030338][ T5160] ? lockdep_hardirqs_on+0x8d/0x130 [ 445.035552][ T5160] jfs_direct_IO+0xf6/0x1e0 [ 445.040059][ T5160] generic_file_direct_write+0x294/0x610 [ 445.045704][ T5160] ? dio_warn_stale_pagecache+0x1a0/0x1a0 [ 445.051429][ T5160] ? file_update_time+0x374/0x5d0 [ 445.056465][ T5160] ? generic_write_checks_count+0x3de/0x4b0 [ 445.062365][ T5160] ? __file_remove_privs+0x610/0x610 [ 445.067647][ T5160] ? generic_write_checks+0x15c/0x1c0 [ 445.073027][ T5160] __generic_file_write_iter+0x1c4/0x400 [ 445.078668][ T5160] generic_file_write_iter+0xab/0x310 [ 445.084044][ T5160] do_iter_write+0x6c2/0xc20 [ 445.088644][ T5160] ? rcu_read_lock_sched_held+0x87/0x110 [ 445.094275][ T5160] ? vfs_iter_write+0xa0/0xa0 [ 445.098961][ T5160] ? PageUptodate+0xe7/0x2b0 [ 445.103559][ T5160] ? vfs_iter_write+0x69/0xa0 [ 445.108236][ T5160] iter_file_splice_write+0x7fc/0xfc0 [ 445.113634][ T5160] ? splice_from_pipe+0x200/0x200 [ 445.118665][ T5160] ? __fsnotify_parent+0x4fa/0x710 [ 445.123791][ T5160] ? splice_shrink_spd+0xb0/0xb0 [ 445.128780][ T5160] ? __fsnotify_update_child_dentry_flags+0x2d0/0x2d0 [ 445.135573][ T5160] ? splice_from_pipe+0x200/0x200 [ 445.140616][ T5160] direct_splice_actor+0xe6/0x1c0 [ 445.145666][ T5160] splice_direct_to_actor+0x4e4/0xc00 [ 445.151067][ T5160] ? do_splice_direct+0x3d0/0x3d0 [ 445.156101][ T5160] ? pipe_to_sendpage+0x340/0x340 [ 445.161131][ T5160] ? bpf_lsm_file_permission+0x5/0x10 [ 445.166508][ T5160] ? security_file_permission+0xe0/0x5c0 [ 445.172148][ T5160] do_splice_direct+0x279/0x3d0 [ 445.177006][ T5160] ? splice_direct_to_actor+0xc00/0xc00 [ 445.182552][ T5160] ? rcu_read_lock_any_held+0xb1/0x130 [ 445.188015][ T5160] ? apparmor_file_permission+0x1f0/0x310 [ 445.193746][ T5160] do_sendfile+0x5fb/0xf80 [ 445.198179][ T5160] ? do_pwritev+0x350/0x350 [ 445.202690][ T5160] ? lockdep_hardirqs_on_prepare+0x428/0x790 [ 445.208673][ T5160] __se_sys_sendfile64+0x14f/0x1b0 [ 445.213790][ T5160] ? __x64_sys_sendfile64+0xa0/0xa0 [ 445.218995][ T5160] ? syscall_enter_from_user_mode+0x2e/0x1d0 [ 445.224979][ T5160] ? lockdep_hardirqs_on+0x8d/0x130 [ 445.230175][ T5160] ? syscall_enter_from_user_mode+0x2e/0x1d0 [ 445.236154][ T5160] do_syscall_64+0x3d/0xb0 [ 445.240572][ T5160] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 445.246469][ T5160] RIP: 0033:0x7f023a52fc19 [ 445.250884][ T5160] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 31 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 445.270488][ T5160] RSP: 002b:00007f02328af208 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 445.278900][ T5160] RAX: ffffffffffffffda RBX: 00007f023a5b9598 RCX: 00007f023a52fc19 [ 445.286868][ T5160] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 445.294838][ T5160] RBP: 00007f023a5b9590 R08: 0000000000000000 R09: 0000000000000000 [ 445.302804][ T5160] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 00007f023a5b959c [ 445.310773][ T5160] R13: 00007fffeed6da8f R14: 00007f02328af300 R15: 0000000000022000 [ 445.318777][ T5160] [ 445.322044][ T5160] Kernel Offset: disabled [ 445.326472][ T5160] Rebooting in 86400 seconds..