Warning: Permanently added '10.128.0.247' (ED25519) to the list of known hosts. executing program [ 51.285105][ T3542] loop0: detected capacity change from 0 to 32768 [ 51.319024][ T27] audit: type=1804 audit(1708318019.831:2): pid=3542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor255" name="/root/file0/bus" dev="loop0" ino=7 res=1 errno=0 [ 51.343674][ T27] audit: type=1804 audit(1708318019.831:3): pid=3542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor255" name="/root/file0/bus" dev="loop0" ino=7 res=1 errno=0 [ 51.410808][ T3542] ================================================================================ [ 51.411218][ T3544] ================================================================================ [ 51.420317][ T3542] UBSAN: array-index-out-of-bounds in fs/jfs/jfs_xtree.c:622:9 [ 51.420348][ T3542] index 19 is out of range for type 'xad_t[18]' (aka 'struct xad[18]') [ 51.420360][ T3542] CPU: 1 PID: 3542 Comm: syz-executor255 Not tainted 6.1.78-syzkaller #0 [ 51.420378][ T3542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 51.420388][ T3542] Call Trace: [ 51.420395][ T3542] [ 51.420403][ T3542] dump_stack_lvl+0x1e3/0x2cb [ 51.420449][ T3542] ? __get_metapage+0x9ae/0x1040 [ 51.420476][ T3542] ? nf_tcp_handle_invalid+0x642/0x642 [ 51.420499][ T3542] ? panic+0x75d/0x75d [ 51.420537][ T3542] __ubsan_handle_out_of_bounds+0x118/0x140 [ 51.429897][ T3544] UBSAN: array-index-out-of-bounds in fs/jfs/jfs_xtree.c:270:11 [ 51.437382][ T3542] xtInsert+0xf41/0xfa0 [ 51.437414][ T3542] ? xtSearch+0x1ca0/0x1ca0 [ 51.437453][ T3542] ? mark_lock+0x9a/0x340 [ 51.445891][ T3544] index 19 is out of range for type 'xad_t[18]' (aka 'struct xad[18]') [ 51.454249][ T3542] ? dquot_drop+0x2a0/0x2a0 [ 51.529436][ T3542] ? rcu_is_watching+0x11/0xb0 [ 51.534246][ T3542] ? __mark_inode_dirty+0x430/0xf80 [ 51.539463][ T3542] extAlloc+0xa70/0x1000 [ 51.543756][ T3542] ? jfs_ioc_trim+0x660/0x660 [ 51.548621][ T3542] jfs_get_block+0x417/0xe50 [ 51.553219][ T3542] ? create_page_buffers+0x1d2/0x4b0 [ 51.558598][ T3542] ? jfs_dirty_inode+0x230/0x230 [ 51.563630][ T3542] ? create_page_buffers+0x24e/0x4b0 [ 51.568917][ T3542] __block_write_begin_int+0x544/0x1a30 [ 51.574486][ T3542] ? jfs_dirty_inode+0x230/0x230 [ 51.579599][ T3542] ? page_zero_new_buffers+0x650/0x650 [ 51.585239][ T3542] ? jfs_dirty_inode+0x230/0x230 [ 51.590263][ T3542] block_write_begin+0x98/0x1f0 [ 51.595115][ T3542] ? jfs_write_begin+0x16/0x60 [ 51.599886][ T3542] jfs_write_begin+0x2d/0x60 [ 51.604499][ T3542] generic_perform_write+0x2fc/0x5e0 [ 51.609934][ T3542] ? generic_file_direct_write+0x460/0x460 [ 51.615754][ T3542] ? generic_file_direct_write+0x40b/0x460 [ 51.621569][ T3542] __generic_file_write_iter+0x297/0x400 [ 51.627208][ T3542] generic_file_write_iter+0xab/0x310 [ 51.632583][ T3542] do_iter_write+0x6e6/0xc50 [ 51.637183][ T3542] ? vfs_iter_write+0xa0/0xa0 [ 51.641866][ T3542] ? vfs_iter_write+0x69/0xa0 [ 51.646542][ T3542] iter_file_splice_write+0x830/0xfc0 [ 51.651932][ T3542] ? splice_from_pipe+0x240/0x240 [ 51.656970][ T3542] ? splice_shrink_spd+0xb0/0xb0 [ 51.661914][ T3542] ? common_file_perm+0x17d/0x1d0 [ 51.666935][ T3542] ? splice_from_pipe+0x240/0x240 [ 51.671958][ T3542] direct_splice_actor+0xe3/0x1c0 [ 51.677072][ T3542] splice_direct_to_actor+0x4c7/0xc30 [ 51.682457][ T3542] ? direct_file_splice_eof+0xa0/0xa0 [ 51.687848][ T3542] ? pipe_to_sendpage+0x350/0x350 [ 51.693043][ T3542] ? fsnotify_perm+0x67/0x590 [ 51.697744][ T3542] ? bpf_lsm_file_permission+0x5/0x10 [ 51.703140][ T3542] do_splice_direct+0x2a5/0x3e0 [ 51.707998][ T3542] ? splice_direct_to_actor+0xc30/0xc30 [ 51.713803][ T3542] ? rcu_read_lock_any_held+0xb3/0x160 [ 51.719276][ T3542] ? do_splice_direct+0x3e0/0x3e0 [ 51.724311][ T3542] do_sendfile+0x61c/0xff0 [ 51.728920][ T3542] ? rcu_is_watching+0x11/0xb0 [ 51.733694][ T3542] ? do_pwritev+0x360/0x360 [ 51.738195][ T3542] ? restore_fpregs_from_fpstate+0xfc/0x230 [ 51.744090][ T3542] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 51.750098][ T3542] __se_sys_sendfile64+0x178/0x1e0 [ 51.755490][ T3542] ? __x64_sys_sendfile64+0xa0/0xa0 [ 51.760711][ T3542] ? syscall_enter_from_user_mode+0x2e/0x220 [ 51.766706][ T3542] ? lockdep_hardirqs_on+0x94/0x130 [ 51.771991][ T3542] ? syscall_enter_from_user_mode+0x2e/0x220 [ 51.778146][ T3542] do_syscall_64+0x3d/0xb0 [ 51.782567][ T3542] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 51.788485][ T3542] RIP: 0033:0x7fceb7321129 [ 51.793173][ T3542] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 51.813062][ T3542] RSP: 002b:00007fceb72df218 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 51.821480][ T3542] RAX: ffffffffffffffda RBX: 00007fceb73ae648 RCX: 00007fceb7321129 [ 51.829616][ T3542] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 51.837582][ T3542] RBP: 00007fceb73ae640 R08: 0000000000000000 R09: 0000000000000000 [ 51.845550][ T3542] R10: 0001000000201005 R11: 0000000000000246 R12: 00007fceb73ae64c [ 51.853520][ T3542] R13: 00007fceb737ae30 R14: 00007fceb7375060 R15: 0030656c69662f2e [ 51.861511][ T3542] [ 51.864531][ T3544] CPU: 0 PID: 3544 Comm: syz-executor255 Not tainted 6.1.78-syzkaller #0 [ 51.864995][ T3542] ================================================================================ [ 51.873024][ T3544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 51.873037][ T3544] Call Trace: [ 51.873043][ T3544] [ 51.873051][ T3544] dump_stack_lvl+0x1e3/0x2cb [ 51.882387][ T3542] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 51.892361][ T3544] ? nf_tcp_handle_invalid+0x642/0x642 [ 51.892384][ T3544] ? panic+0x75d/0x75d [ 51.892401][ T3544] ? PageHeadHuge+0x8e/0x1c0 [ 51.892419][ T3544] ? folio_unlock+0x122/0x2f0 [ 51.892441][ T3544] __ubsan_handle_out_of_bounds+0x118/0x140 [ 51.892461][ T3544] ? validate_chain+0x112/0x5950 [ 51.892484][ T3544] xtSearch+0x10e8/0x1ca0 [ 51.892521][ T3544] xtLookup+0x2c0/0x8e0 [ 51.892545][ T3544] ? jfs_umount_rw+0x130/0x130 [ 51.892594][ T3544] extHint+0x291/0x710 [ 51.892621][ T3544] ? extAlloc+0x1000/0x1000 [ 51.892651][ T3544] jfs_get_block+0x3a7/0xe50 [ 51.892666][ T3544] ? create_page_buffers+0x1d2/0x4b0 [ 51.892690][ T3544] ? jfs_dirty_inode+0x230/0x230 [ 51.892714][ T3544] ? create_page_buffers+0x24e/0x4b0 [ 51.892731][ T3544] __block_write_begin_int+0x544/0x1a30 [ 51.892766][ T3544] ? jfs_dirty_inode+0x230/0x230 [ 51.892780][ T3544] ? page_zero_new_buffers+0x650/0x650 [ 51.892802][ T3544] ? jfs_dirty_inode+0x230/0x230 [ 51.892816][ T3544] block_write_begin+0x98/0x1f0 [ 51.892828][ T3544] ? jfs_write_begin+0x16/0x60 [ 51.892846][ T3544] jfs_write_begin+0x2d/0x60 [ 51.892862][ T3544] generic_perform_write+0x2fc/0x5e0 [ 51.892887][ T3544] ? generic_file_direct_write+0x460/0x460 [ 51.892902][ T3544] ? __file_remove_privs+0x640/0x640 [ 51.892922][ T3544] ? generic_write_checks+0x15c/0x1c0 [ 51.892937][ T3544] ? clear_nonspinnable+0x60/0x60 [ 51.892958][ T3544] __generic_file_write_iter+0x176/0x400 [ 51.892978][ T3544] generic_file_write_iter+0xab/0x310 [ 51.892996][ T3544] vfs_write+0x7ae/0xba0 [ 51.893022][ T3544] ? file_end_write+0x250/0x250 [ 51.893038][ T3544] ? __fget_files+0x28/0x4a0 [ 51.893050][ T3544] ? __fget_files+0x435/0x4a0 [ 51.893071][ T3544] ? __fdget_pos+0x2ba/0x360 [ 51.893083][ T3544] ? ksys_write+0x77/0x2c0 [ 51.893098][ T3544] ksys_write+0x19c/0x2c0 [ 51.893112][ T3544] ? print_irqtrace_events+0x210/0x210 [ 51.893133][ T3544] ? __ia32_sys_read+0x80/0x80 [ 51.893147][ T3544] ? syscall_enter_from_user_mode+0x2e/0x220 [ 51.893162][ T3544] ? lockdep_hardirqs_on+0x94/0x130 [ 51.893178][ T3544] ? syscall_enter_from_user_mode+0x2e/0x220 [ 51.893195][ T3544] do_syscall_64+0x3d/0xb0 [ 51.893214][ T3544] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 51.893232][ T3544] RIP: 0033:0x7fceb7321129 [ 51.893245][ T3544] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 51.893256][ T3544] RSP: 002b:00007fceb72be218 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 51.893271][ T3544] RAX: ffffffffffffffda RBX: 00007fceb73ae658 RCX: 00007fceb7321129 [ 51.893282][ T3544] RDX: 000000000208e24b RSI: 0000000020000300 RDI: 0000000000000008 [ 51.893290][ T3544] RBP: 00007fceb73ae650 R08: 0000000000000000 R09: 0000000000000000 [ 51.893299][ T3544] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fceb73ae65c [ 51.893308][ T3544] R13: 00007fceb737ae30 R14: 00007fceb7375060 R15: 0030656c69662f2e [ 51.893332][ T3544] [ 51.893337][ T3542] CPU: 1 PID: 3542 Comm: syz-executor255 Not tainted 6.1.78-syzkaller #0 [ 52.209700][ T3542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 52.219749][ T3542] Call Trace: [ 52.223023][ T3542] [ 52.225949][ T3542] dump_stack_lvl+0x1e3/0x2cb [ 52.230643][ T3542] ? nf_tcp_handle_invalid+0x642/0x642 [ 52.236095][ T3542] ? panic+0x75d/0x75d [ 52.240173][ T3542] ? vscnprintf+0x59/0x80 [ 52.244502][ T3542] panic+0x318/0x75d [ 52.248388][ T3542] ? check_panic_on_warn+0x1d/0xa0 [ 52.253492][ T3542] ? memcpy_page_flushcache+0xfc/0xfc [ 52.258852][ T3542] ? dump_stack_lvl+0x24f/0x2cb [ 52.263703][ T3542] check_panic_on_warn+0x7e/0xa0 [ 52.268639][ T3542] __ubsan_handle_out_of_bounds+0x138/0x140 [ 52.274529][ T3542] xtInsert+0xf41/0xfa0 [ 52.278724][ T3542] ? xtSearch+0x1ca0/0x1ca0 [ 52.283248][ T3542] ? mark_lock+0x9a/0x340 [ 52.287581][ T3542] ? dquot_drop+0x2a0/0x2a0 [ 52.292086][ T3542] ? rcu_is_watching+0x11/0xb0 [ 52.296842][ T3542] ? __mark_inode_dirty+0x430/0xf80 [ 52.302035][ T3542] extAlloc+0xa70/0x1000 [ 52.306280][ T3542] ? jfs_ioc_trim+0x660/0x660 [ 52.310960][ T3542] jfs_get_block+0x417/0xe50 [ 52.315727][ T3542] ? create_page_buffers+0x1d2/0x4b0 [ 52.321009][ T3542] ? jfs_dirty_inode+0x230/0x230 [ 52.325944][ T3542] ? create_page_buffers+0x24e/0x4b0 [ 52.331222][ T3542] __block_write_begin_int+0x544/0x1a30 [ 52.336773][ T3542] ? jfs_dirty_inode+0x230/0x230 [ 52.341700][ T3542] ? page_zero_new_buffers+0x650/0x650 [ 52.347154][ T3542] ? jfs_dirty_inode+0x230/0x230 [ 52.352088][ T3542] block_write_begin+0x98/0x1f0 [ 52.356926][ T3542] ? jfs_write_begin+0x16/0x60 [ 52.361689][ T3542] jfs_write_begin+0x2d/0x60 [ 52.366271][ T3542] generic_perform_write+0x2fc/0x5e0 [ 52.371559][ T3542] ? generic_file_direct_write+0x460/0x460 [ 52.377356][ T3542] ? generic_file_direct_write+0x40b/0x460 [ 52.383158][ T3542] __generic_file_write_iter+0x297/0x400 [ 52.388783][ T3542] generic_file_write_iter+0xab/0x310 [ 52.394158][ T3542] do_iter_write+0x6e6/0xc50 [ 52.398926][ T3542] ? vfs_iter_write+0xa0/0xa0 [ 52.403768][ T3542] ? vfs_iter_write+0x69/0xa0 [ 52.408451][ T3542] iter_file_splice_write+0x830/0xfc0 [ 52.413833][ T3542] ? splice_from_pipe+0x240/0x240 [ 52.418957][ T3542] ? splice_shrink_spd+0xb0/0xb0 [ 52.423916][ T3542] ? common_file_perm+0x17d/0x1d0 [ 52.428947][ T3542] ? splice_from_pipe+0x240/0x240 [ 52.433968][ T3542] direct_splice_actor+0xe3/0x1c0 [ 52.438990][ T3542] splice_direct_to_actor+0x4c7/0xc30 [ 52.444448][ T3542] ? direct_file_splice_eof+0xa0/0xa0 [ 52.449815][ T3542] ? pipe_to_sendpage+0x350/0x350 [ 52.454928][ T3542] ? fsnotify_perm+0x67/0x590 [ 52.459598][ T3542] ? bpf_lsm_file_permission+0x5/0x10 [ 52.464962][ T3542] do_splice_direct+0x2a5/0x3e0 [ 52.469823][ T3542] ? splice_direct_to_actor+0xc30/0xc30 [ 52.475382][ T3542] ? rcu_read_lock_any_held+0xb3/0x160 [ 52.480843][ T3542] ? do_splice_direct+0x3e0/0x3e0 [ 52.485950][ T3542] do_sendfile+0x61c/0xff0 [ 52.490363][ T3542] ? rcu_is_watching+0x11/0xb0 [ 52.495137][ T3542] ? do_pwritev+0x360/0x360 [ 52.499656][ T3542] ? restore_fpregs_from_fpstate+0xfc/0x230 [ 52.505562][ T3542] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 52.511640][ T3542] __se_sys_sendfile64+0x178/0x1e0 [ 52.516755][ T3542] ? __x64_sys_sendfile64+0xa0/0xa0 [ 52.521941][ T3542] ? syscall_enter_from_user_mode+0x2e/0x220 [ 52.528019][ T3542] ? lockdep_hardirqs_on+0x94/0x130 [ 52.533221][ T3542] ? syscall_enter_from_user_mode+0x2e/0x220 [ 52.539215][ T3542] do_syscall_64+0x3d/0xb0 [ 52.543648][ T3542] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 52.549638][ T3542] RIP: 0033:0x7fceb7321129 [ 52.554049][ T3542] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 52.573662][ T3542] RSP: 002b:00007fceb72df218 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 52.582270][ T3542] RAX: ffffffffffffffda RBX: 00007fceb73ae648 RCX: 00007fceb7321129 [ 52.590512][ T3542] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 52.598493][ T3542] RBP: 00007fceb73ae640 R08: 0000000000000000 R09: 0000000000000000 [ 52.606617][ T3542] R10: 0001000000201005 R11: 0000000000000246 R12: 00007fceb73ae64c [ 52.614631][ T3542] R13: 00007fceb737ae30 R14: 00007fceb7375060 R15: 0030656c69662f2e [ 52.622615][ T3542] [ 52.625835][ T3542] Kernel Offset: disabled [ 52.630230][ T3542] Rebooting in 86400 seconds..