Warning: Permanently added '10.128.10.59' (ED25519) to the list of known hosts. executing program syzkaller login: [ 46.330641][ T4017] loop0: detected capacity change from 0 to 32768 [ 46.412365][ T4017] find_entry called with index >= next_index [ 46.417580][ T4017] read_mapping_page failed! [ 46.418635][ T4017] bread failed! [ 46.419320][ T4017] jfs_mkdir: dtInsert returned -EIO [ 46.420368][ T4017] ERROR: (device loop0): txAbort: [ 46.420368][ T4017] [ 46.422497][ T4017] ERROR: (device loop0): remounting filesystem as read-only [ 46.424316][ T4017] ================================================================== [ 46.426016][ T4017] BUG: KASAN: slab-out-of-bounds in jfs_readdir+0x159c/0x385c [ 46.427373][ T4017] Read of size 1 at addr ffff0000e1863735 by task syz-executor372/4017 [ 46.429088][ T4017] [ 46.429561][ T4017] CPU: 0 PID: 4017 Comm: syz-executor372 Not tainted 5.15.173-syzkaller #0 [ 46.431257][ T4017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 46.433232][ T4017] Call trace: [ 46.433982][ T4017] dump_backtrace+0x0/0x530 [ 46.434940][ T4017] show_stack+0x2c/0x3c [ 46.435751][ T4017] dump_stack_lvl+0x108/0x170 [ 46.436657][ T4017] print_address_description+0x7c/0x3f0 [ 46.437770][ T4017] kasan_report+0x174/0x1e4 [ 46.438699][ T4017] __asan_report_load1_noabort+0x44/0x50 [ 46.439866][ T4017] jfs_readdir+0x159c/0x385c [ 46.440750][ T4017] iterate_dir+0x1f4/0x4ec [ 46.441679][ T4017] __arm64_sys_getdents64+0x1c4/0x4c4 [ 46.442743][ T4017] invoke_syscall+0x98/0x2b8 [ 46.443706][ T4017] el0_svc_common+0x138/0x258 [ 46.444677][ T4017] do_el0_svc+0x58/0x14c [ 46.445540][ T4017] el0_svc+0x7c/0x1f0 [ 46.446403][ T4017] el0t_64_sync_handler+0x84/0xe4 [ 46.447479][ T4017] el0t_64_sync+0x1a0/0x1a4 [ 46.448397][ T4017] [ 46.448845][ T4017] Allocated by task 4017: [ 46.449732][ T4017] __kasan_slab_alloc+0x8c/0xcc [ 46.450676][ T4017] slab_post_alloc_hook+0x74/0x3f4 [ 46.451683][ T4017] kmem_cache_alloc+0x1dc/0x45c [ 46.452643][ T4017] jfs_alloc_inode+0x24/0x60 [ 46.453597][ T4017] iget_locked+0x180/0x720 [ 46.454481][ T4017] jfs_iget+0x30/0x364 [ 46.455345][ T4017] jfs_fill_super+0x65c/0xa08 [ 46.456273][ T4017] mount_bdev+0x274/0x370 [ 46.457157][ T4017] jfs_do_mount+0x44/0x58 [ 46.457991][ T4017] legacy_get_tree+0xd4/0x16c [ 46.458955][ T4017] vfs_get_tree+0x90/0x274 [ 46.459880][ T4017] do_new_mount+0x278/0x8fc [ 46.460759][ T4017] path_mount+0x594/0x101c [ 46.461603][ T4017] __arm64_sys_mount+0x510/0x5e0 [ 46.462517][ T4017] invoke_syscall+0x98/0x2b8 [ 46.463411][ T4017] el0_svc_common+0x138/0x258 [ 46.464282][ T4017] do_el0_svc+0x58/0x14c [ 46.465122][ T4017] el0_svc+0x7c/0x1f0 [ 46.465923][ T4017] el0t_64_sync_handler+0x84/0xe4 [ 46.466858][ T4017] el0t_64_sync+0x1a0/0x1a4 [ 46.467752][ T4017] [ 46.468210][ T4017] The buggy address belongs to the object at ffff0000e1862e40 [ 46.468210][ T4017] which belongs to the cache jfs_ip of size 2240 [ 46.470908][ T4017] The buggy address is located 53 bytes to the right of [ 46.470908][ T4017] 2240-byte region [ffff0000e1862e40, ffff0000e1863700) [ 46.473834][ T4017] The buggy address belongs to the page: [ 46.474897][ T4017] page:00000000b7916bd0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x121860 [ 46.476951][ T4017] head:00000000b7916bd0 order:3 compound_mapcount:0 compound_pincount:0 [ 46.478627][ T4017] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 46.480220][ T4017] raw: 05ffc00000010200 0000000000000000 dead000000000122 ffff0000c68c9c80 [ 46.481951][ T4017] raw: 0000000000000000 00000000800d000d 00000001ffffffff 0000000000000000 [ 46.483623][ T4017] page dumped because: kasan: bad access detected [ 46.484955][ T4017] [ 46.485449][ T4017] Memory state around the buggy address: [ 46.486513][ T4017] ffff0000e1863600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 46.488223][ T4017] ffff0000e1863680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 46.489779][ T4017] >ffff0000e1863700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 46.491368][ T4017] ^ [ 46.492400][ T4017] ffff0000e1863780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 46.494044][ T4017] ffff0000e1863800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 46.495587][ T4017] ================================================================== [ 46.497234][ T4017] Disabling lock debugging due to kernel taint [ 46.498659][ T4017] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 0 [ 46.498659][ T4017] [ 46.500840][ T4017] ERROR: (device loop0): __get_metapage: using a discarded metapage [ 46.500840][ T4017]