program: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000002480)={{r0}, 0x0, 0x0, @unused, @subvolid=0x3}) syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x808010, &(0x7f00000003c0)=ANY=[], 0x1, 0x628f, &(0x7f0000026040)="$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") r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$alg(r0, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-mb\x00'}, 0x58) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000000)=0xb, 0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0xfe, 0x236, &(0x7f0000000300)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) fdatasync(0xffffffffffffffff) setresuid(0x0, 0x0, 0x0) write(r3, &(0x7f0000000180)="7e7226ce9b4d692092ffa2b579f0ff5793012c9738a9be19ff3e69a683a0a1bbace0dc3853c661a4e1019e7a1f3af60350126cb99c5f3ace6f5616c00e0fb30b2832398fed6233b8632a001dd0a846cbb8a5d77e3208db486b055edb6ae7917f07ccf4b6811be57047aa17799359e733ec395940d1feb7a9ec2ddadb1ff61070c9c00f9db8e47f74a5271fa77b6e692e6ac97aaae883e5522f8e86c2403aec0ff8dee1cba5d40f0969470b9a2a95f6f22f9d4250809400ea8403a6540948", 0xfffffec6) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r2, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0xab, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000200)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000400)={&(0x7f0000000180)=[r8], 0x1, r9, r6, 0x0, 0x0, 0x0, 0x800, {0x4, 0x1, 0x3, 0x69, 0x200, 0x0, 0x2, 0x5, 0x4cab, 0xe156, 0x2, 0x0, 0x25, 0x0, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendto$packet(r10, &(0x7f00000000c0)="96685102d300000013000010888e", 0xe, 0x4000004, &(0x7f0000000080)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @broadcast}, 0x14) getsockname$packet(r10, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000580)=0x14) mkdirat(0xffffffffffffff9c, &(0x7f000001f780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) [ 68.617718][ T4673] Bluetooth: hci0: command tx timeout [ 68.940899][ T5327] loop0: detected capacity change from 0 to 32768 [ 69.051201][ T5328] ERROR: (device loop0): dbAlloc: unable to allocate blocks [ 69.051201][ T5328] [ 69.054324][ T5328] ERROR: (device loop0): remounting filesystem as read-only [ 69.059811][ T5328] ialloc: diAlloc returned -5! [ 69.188156][ T5327] ------------[ cut here ]------------ [ 69.190555][ T5327] UBSAN: array-index-out-of-bounds in fs/jfs/jfs_dmap.c:2902:18 [ 69.193363][ T5327] index -3 is out of range for type 's8[1365]' (aka 'signed char[1365]') [ 69.198045][ T5327] CPU: 0 UID: 0 PID: 5327 Comm: syz.0.0 Not tainted 6.12.0-rc5-syzkaller-00181-g6c52d4da1c74 #0 [ 69.201548][ T5327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.204770][ T5327] Call Trace: [ 69.205876][ T5327] [ 69.206942][ T5327] dump_stack_lvl+0x241/0x360 [ 69.208760][ T5327] ? __pfx_dump_stack_lvl+0x10/0x10 [ 69.210777][ T5327] ? __pfx__printk+0x10/0x10 [ 69.212519][ T5327] ? filemap_get_entry+0x328/0x3b0 [ 69.214305][ T5327] __ubsan_handle_out_of_bounds+0x121/0x150 [ 69.216482][ T5327] dbAdjTree+0x377/0x520 [ 69.217936][ T5327] dbAllocBits+0x4ea/0x990 [ 69.219435][ T5327] dbAllocDmap+0x6d/0x150 [ 69.221003][ T5327] dbAlloc+0x509/0xca0 [ 69.222600][ T5327] ? __pfx_dbAlloc+0x10/0x10 [ 69.224307][ T5327] extAlloc+0x4f8/0x1010 [ 69.225874][ T5327] ? __pfx_extAlloc+0x10/0x10 [ 69.227722][ T5327] ? down_write_nested+0x195/0x220 [ 69.229704][ T5327] ? __pfx_down_write_nested+0x10/0x10 [ 69.231797][ T5327] jfs_get_block+0x41b/0xe60 [ 69.233649][ T5327] ? __pfx_jfs_get_block+0x10/0x10 [ 69.235627][ T5327] __block_write_begin_int+0x50c/0x1a70 [ 69.237718][ T5327] ? __pfx_jfs_get_block+0x10/0x10 [ 69.239584][ T5327] ? __pfx___block_write_begin_int+0x10/0x10 [ 69.241744][ T5327] ? __pfx_jfs_get_block+0x10/0x10 [ 69.243424][ T5327] block_write_begin+0x8f/0x120 [ 69.245266][ T5327] jfs_write_begin+0x31/0x70 [ 69.247095][ T5327] generic_perform_write+0x344/0x6d0 [ 69.249180][ T5327] ? __pfx_generic_perform_write+0x10/0x10 [ 69.251492][ T5327] ? __generic_file_write_iter+0x102/0x230 [ 69.253655][ T5327] generic_file_write_iter+0xae/0x310 [ 69.255633][ T5327] vfs_write+0xaeb/0xd30 [ 69.257155][ T5327] ? __pfx_generic_file_write_iter+0x10/0x10 [ 69.259465][ T5327] ? __pfx_vfs_write+0x10/0x10 [ 69.261273][ T5327] ? fdget_pos+0x24e/0x320 [ 69.263073][ T5327] ksys_write+0x183/0x2b0 [ 69.264508][ T5327] ? __pfx_ksys_write+0x10/0x10 [ 69.266141][ T5327] ? do_syscall_64+0x100/0x230 [ 69.267587][ T5327] ? do_syscall_64+0xb6/0x230 [ 69.269092][ T5327] do_syscall_64+0xf3/0x230 [ 69.270472][ T5327] ? clear_bhb_loop+0x35/0x90 [ 69.271913][ T5327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.273906][ T5327] RIP: 0033:0x7f7dc997e719 [ 69.275652][ T5327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.282316][ T5327] RSP: 002b:00007f7dca82a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 69.285530][ T5327] RAX: ffffffffffffffda RBX: 00007f7dc9b35f80 RCX: 00007f7dc997e719 [ 69.288629][ T5327] RDX: 00000000fffffec6 RSI: 0000000020000180 RDI: 0000000000000006 [ 69.291763][ T5327] RBP: 00007f7dc99f132e R08: 0000000000000000 R09: 0000000000000000 [ 69.294919][ T5327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.297930][ T5327] R13: 0000000000000000 R14: 00007f7dc9b35f80 R15: 00007fff43dee668 [ 69.300797][ T5327] [ 69.310828][ T5327] ---[ end trace ]--- [ 69.312539][ T5327] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 69.315355][ T5327] CPU: 0 UID: 0 PID: 5327 Comm: syz.0.0 Not tainted 6.12.0-rc5-syzkaller-00181-g6c52d4da1c74 #0 [ 69.319096][ T5327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.323216][ T5327] Call Trace: [ 69.324531][ T5327] [ 69.325723][ T5327] dump_stack_lvl+0x241/0x360 [ 69.327615][ T5327] ? __pfx_dump_stack_lvl+0x10/0x10 [ 69.329707][ T5327] ? __pfx__printk+0x10/0x10 [ 69.331535][ T5327] ? lockdep_hardirqs_on+0x99/0x150 [ 69.333643][ T5327] ? vscnprintf+0x5d/0x90 [ 69.335356][ T5327] panic+0x349/0x880 [ 69.336920][ T5327] ? check_panic_on_warn+0x21/0xb0 [ 69.338933][ T5327] ? __pfx_panic+0x10/0x10 [ 69.340563][ T5327] ? _printk+0xd5/0x120 [ 69.342107][ T5327] ? __pfx__printk+0x10/0x10 [ 69.343685][ T5327] ? filemap_get_entry+0x328/0x3b0 [ 69.345672][ T5327] check_panic_on_warn+0x86/0xb0 [ 69.347625][ T5327] __ubsan_handle_out_of_bounds+0x141/0x150 [ 69.349965][ T5327] dbAdjTree+0x377/0x520 [ 69.351683][ T5327] dbAllocBits+0x4ea/0x990 [ 69.353466][ T5327] dbAllocDmap+0x6d/0x150 [ 69.355094][ T5327] dbAlloc+0x509/0xca0 [ 69.356700][ T5327] ? __pfx_dbAlloc+0x10/0x10 [ 69.358550][ T5327] extAlloc+0x4f8/0x1010 [ 69.360225][ T5327] ? __pfx_extAlloc+0x10/0x10 [ 69.362072][ T5327] ? down_write_nested+0x195/0x220 [ 69.364120][ T5327] ? __pfx_down_write_nested+0x10/0x10 [ 69.366293][ T5327] jfs_get_block+0x41b/0xe60 [ 69.368094][ T5327] ? __pfx_jfs_get_block+0x10/0x10 [ 69.370212][ T5327] __block_write_begin_int+0x50c/0x1a70 [ 69.372579][ T5327] ? __pfx_jfs_get_block+0x10/0x10 [ 69.374608][ T5327] ? __pfx___block_write_begin_int+0x10/0x10 [ 69.376940][ T5327] ? __pfx_jfs_get_block+0x10/0x10 [ 69.379021][ T5327] block_write_begin+0x8f/0x120 [ 69.380925][ T5327] jfs_write_begin+0x31/0x70 [ 69.382831][ T5327] generic_perform_write+0x344/0x6d0 [ 69.384917][ T5327] ? __pfx_generic_perform_write+0x10/0x10 [ 69.387215][ T5327] ? __generic_file_write_iter+0x102/0x230 [ 69.389407][ T5327] generic_file_write_iter+0xae/0x310 [ 69.391472][ T5327] vfs_write+0xaeb/0xd30 [ 69.393115][ T5327] ? __pfx_generic_file_write_iter+0x10/0x10 [ 69.395223][ T5327] ? __pfx_vfs_write+0x10/0x10 [ 69.396882][ T5327] ? fdget_pos+0x24e/0x320 [ 69.398485][ T5327] ksys_write+0x183/0x2b0 [ 69.400101][ T5327] ? __pfx_ksys_write+0x10/0x10 [ 69.401991][ T5327] ? do_syscall_64+0x100/0x230 [ 69.403858][ T5327] ? do_syscall_64+0xb6/0x230 [ 69.405521][ T5327] do_syscall_64+0xf3/0x230 [ 69.406856][ T5327] ? clear_bhb_loop+0x35/0x90 [ 69.408540][ T5327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.410758][ T5327] RIP: 0033:0x7f7dc997e719 [ 69.412387][ T5327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.422663][ T5327] RSP: 002b:00007f7dca82a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 69.425952][ T5327] RAX: ffffffffffffffda RBX: 00007f7dc9b35f80 RCX: 00007f7dc997e719 [ 69.428815][ T5327] RDX: 00000000fffffec6 RSI: 0000000020000180 RDI: 0000000000000006 [ 69.431749][ T5327] RBP: 00007f7dc99f132e R08: 0000000000000000 R09: 0000000000000000 [ 69.434373][ T5327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.436708][ T5327] R13: 0000000000000000 R14: 00007f7dc9b35f80 R15: 00007fff43dee668 [ 69.439001][ T5327] [ 69.440130][ T5327] Kernel Offset: disabled [ 69.441468][ T5327] Rebooting in 86400 seconds..