Warning: Permanently added '10.128.0.205' (ED25519) to the list of known hosts. executing program [ 49.624935][ T3501] loop0: detected capacity change from 0 to 32768 [ 49.791834][ T26] audit: type=1804 audit(1708745373.047:2): pid=3503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor173" name="/root/file0/bus" dev="loop0" ino=7 res=1 errno=0 [ 49.820039][ T3503] ================================================================================ [ 49.820151][ T3501] ================================================================================ [ 49.829710][ T3503] UBSAN: array-index-out-of-bounds in fs/jfs/jfs_xtree.c:633:9 [ 49.839674][ T3501] UBSAN: array-index-out-of-bounds in fs/jfs/jfs_xtree.c:281:11 [ 49.846821][ T3503] index 19 is out of range for type 'xad_t[18]' (aka 'struct xad[18]') [ 49.854557][ T3501] index 19 is out of range for type 'xad_t[18]' (aka 'struct xad[18]') [ 49.862657][ T3503] CPU: 1 PID: 3503 Comm: syz-executor173 Not tainted 5.15.149-syzkaller #0 [ 49.879377][ T3503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 49.889439][ T3503] Call Trace: [ 49.892719][ T3503] [ 49.895649][ T3503] dump_stack_lvl+0x1e3/0x2cb [ 49.900356][ T3503] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 49.905995][ T3503] ? panic+0x84d/0x84d [ 49.910079][ T3503] __ubsan_handle_out_of_bounds+0x118/0x140 [ 49.915988][ T3503] xtInsert+0xf41/0xfa0 [ 49.920162][ T3503] ? xtSearch+0x1ca0/0x1ca0 [ 49.924689][ T3503] ? mark_lock+0x98/0x340 [ 49.929026][ T3503] ? dquot_drop+0x2a0/0x2a0 [ 49.933538][ T3503] ? rcu_is_watching+0x11/0xa0 [ 49.938314][ T3503] ? __mark_inode_dirty+0x3dd/0xd60 [ 49.943516][ T3503] extAlloc+0xa70/0x1000 [ 49.947782][ T3503] ? jfs_ioc_trim+0x660/0x660 [ 49.952459][ T3503] ? down_write_nested+0x117/0x180 [ 49.957579][ T3503] ? memset+0x1f/0x40 [ 49.961567][ T3503] jfs_get_block+0x417/0xe50 [ 49.966169][ T3503] ? jfs_dirty_inode+0x230/0x230 [ 49.971124][ T3503] nobh_write_begin+0x398/0xda0 [ 49.975991][ T3503] jfs_write_begin+0x3e/0x80 [ 49.980581][ T3503] ? jfs_dirty_inode+0x230/0x230 [ 49.985531][ T3503] generic_perform_write+0x2bf/0x5b0 [ 49.990829][ T3503] ? grab_cache_page_write_begin+0x90/0x90 [ 49.996639][ T3503] ? file_remove_privs+0x610/0x610 [ 50.001784][ T3503] ? down_write+0x10e/0x170 [ 50.006291][ T3503] __generic_file_write_iter+0x243/0x4f0 [ 50.011934][ T3503] generic_file_write_iter+0xa7/0x1b0 [ 50.017404][ T3503] do_iter_readv_writev+0x594/0x7a0 [ 50.022611][ T3503] ? generic_file_rw_checks+0x260/0x260 [ 50.028160][ T3503] ? common_file_perm+0x17d/0x1d0 [ 50.033190][ T3503] ? fsnotify_perm+0x67/0x5a0 [ 50.037868][ T3503] ? bpf_lsm_file_permission+0x5/0x10 [ 50.043244][ T3503] do_iter_write+0x1ea/0x760 [ 50.047841][ T3503] ? vfs_iter_write+0x69/0xa0 [ 50.052520][ T3503] iter_file_splice_write+0x806/0xfa0 [ 50.057915][ T3503] ? splice_from_pipe+0x230/0x230 [ 50.062945][ T3503] ? generic_file_splice_read+0x54a/0x790 [ 50.068678][ T3503] ? splice_shrink_spd+0xb0/0xb0 [ 50.073628][ T3503] ? common_file_perm+0x17d/0x1d0 [ 50.078655][ T3503] ? splice_from_pipe+0x230/0x230 [ 50.083686][ T3503] direct_splice_actor+0xe3/0x1c0 [ 50.088716][ T3503] splice_direct_to_actor+0x500/0xc10 [ 50.094101][ T3503] ? do_splice_direct+0x3d0/0x3d0 [ 50.099133][ T3503] ? pipe_to_sendpage+0x350/0x350 [ 50.104162][ T3503] ? fsnotify_perm+0x67/0x5a0 [ 50.108841][ T3503] ? bpf_lsm_file_permission+0x5/0x10 [ 50.114217][ T3503] do_splice_direct+0x285/0x3d0 [ 50.119075][ T3503] ? splice_direct_to_actor+0xc10/0xc10 [ 50.124623][ T3503] ? rcu_read_lock_any_held+0xb3/0x160 [ 50.130101][ T3503] do_sendfile+0x625/0xff0 [ 50.134544][ T3503] ? do_pwritev+0x360/0x360 [ 50.139049][ T3503] ? rcu_is_watching+0x11/0xa0 [ 50.143817][ T3503] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 50.149803][ T3503] __se_sys_sendfile64+0x178/0x1e0 [ 50.154920][ T3503] ? __x64_sys_sendfile64+0xa0/0xa0 [ 50.160125][ T3503] ? syscall_enter_from_user_mode+0x2e/0x230 [ 50.166139][ T3503] ? lockdep_hardirqs_on+0x94/0x130 [ 50.171347][ T3503] ? syscall_enter_from_user_mode+0x2e/0x230 [ 50.177332][ T3503] do_syscall_64+0x3d/0xb0 [ 50.181779][ T3503] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 50.187679][ T3503] RIP: 0033:0x7f398cf0e129 [ 50.192095][ T3503] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 50.211704][ T3503] RSP: 002b:00007f398ceab218 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 50.220120][ T3503] RAX: ffffffffffffffda RBX: 00007f398cf9b658 RCX: 00007f398cf0e129 [ 50.228096][ T3503] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000007 [ 50.236066][ T3503] RBP: 00007f398cf9b650 R08: 0000000000000000 R09: 0000000000000000 [ 50.244037][ T3503] R10: 0001000000201005 R11: 0000000000000246 R12: 00007f398cf9b65c [ 50.252009][ T3503] R13: 00007f398cf67e30 R14: 00007f398cf62060 R15: 0030656c69662f2e [ 50.259994][ T3503] [ 50.263013][ T3501] CPU: 0 PID: 3501 Comm: syz-executor173 Not tainted 5.15.149-syzkaller #0 [ 50.263358][ T3503] ================================================================================ [ 50.271615][ T3501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 50.271629][ T3501] Call Trace: [ 50.271637][ T3501] [ 50.271646][ T3501] dump_stack_lvl+0x1e3/0x2cb [ 50.281027][ T3503] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 50.290976][ T3501] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 50.314606][ T3501] ? panic+0x84d/0x84d [ 50.318679][ T3501] ? do_read_cache_page+0xcb3/0x1040 [ 50.323966][ T3501] ? unlock_page+0x188/0x200 [ 50.328557][ T3501] __ubsan_handle_out_of_bounds+0x118/0x140 [ 50.334458][ T3501] xtSearch+0x10e8/0x1ca0 [ 50.338810][ T3501] xtLookup+0x2c0/0x8e0 [ 50.342976][ T3501] ? jfs_umount_rw+0x130/0x130 [ 50.347762][ T3501] ? ksys_write+0x1a2/0x2c0 [ 50.352266][ T3501] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 50.358338][ T3501] ? __might_sleep+0xc0/0xc0 [ 50.362931][ T3501] extHint+0x291/0x710 [ 50.367007][ T3501] ? extAlloc+0x1000/0x1000 [ 50.371506][ T3501] ? down_write_nested+0x117/0x180 [ 50.376617][ T3501] ? down_read_non_owner+0x310/0x310 [ 50.381905][ T3501] ? memset+0x1f/0x40 [ 50.385892][ T3501] jfs_get_block+0x3a7/0xe50 [ 50.390496][ T3501] ? jfs_dirty_inode+0x230/0x230 [ 50.395466][ T3501] nobh_write_begin+0x398/0xda0 [ 50.400331][ T3501] jfs_write_begin+0x3e/0x80 [ 50.404919][ T3501] ? jfs_dirty_inode+0x230/0x230 [ 50.409860][ T3501] generic_perform_write+0x2bf/0x5b0 [ 50.415158][ T3501] ? grab_cache_page_write_begin+0x90/0x90 [ 50.420964][ T3501] ? file_remove_privs+0x610/0x610 [ 50.426080][ T3501] ? down_write+0x10e/0x170 [ 50.430587][ T3501] __generic_file_write_iter+0x243/0x4f0 [ 50.436225][ T3501] generic_file_write_iter+0xa7/0x1b0 [ 50.441604][ T3501] vfs_write+0xacf/0xe50 [ 50.445853][ T3501] ? file_end_write+0x250/0x250 [ 50.450712][ T3501] ? __fget_files+0x413/0x480 [ 50.455395][ T3501] ? mutex_lock_nested+0x17/0x20 [ 50.460336][ T3501] ? __fdget_pos+0x2cb/0x380 [ 50.464924][ T3501] ? ksys_write+0x77/0x2c0 [ 50.469341][ T3501] ksys_write+0x1a2/0x2c0 [ 50.473671][ T3501] ? print_irqtrace_events+0x210/0x210 [ 50.479131][ T3501] ? __ia32_sys_read+0x80/0x80 [ 50.483894][ T3501] ? syscall_enter_from_user_mode+0x2e/0x230 [ 50.489879][ T3501] ? lockdep_hardirqs_on+0x94/0x130 [ 50.495081][ T3501] ? syscall_enter_from_user_mode+0x2e/0x230 [ 50.501064][ T3501] do_syscall_64+0x3d/0xb0 [ 50.505477][ T3501] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 50.511372][ T3501] RIP: 0033:0x7f398cf0e129 [ 50.515803][ T3501] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 50.535405][ T3501] RSP: 002b:00007f398cecc218 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 50.543819][ T3501] RAX: ffffffffffffffda RBX: 00007f398cf9b648 RCX: 00007f398cf0e129 [ 50.551808][ T3501] RDX: 000000000208e24b RSI: 0000000020000300 RDI: 0000000000000006 [ 50.559809][ T3501] RBP: 00007f398cf9b640 R08: 0000000000000000 R09: 0000000000000000 [ 50.567789][ T3501] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f398cf9b64c [ 50.575760][ T3501] R13: 00007f398cf67e30 R14: 00007f398cf62060 R15: 0030656c69662f2e [ 50.583749][ T3501] [ 50.586783][ T3503] CPU: 1 PID: 3503 Comm: syz-executor173 Not tainted 5.15.149-syzkaller #0 [ 50.595398][ T3503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 50.600093][ T3501] ================================================================================ [ 50.605467][ T3503] Call Trace: [ 50.614778][ T3501] ================================================================================ [ 50.618016][ T3503] [ 50.618027][ T3503] dump_stack_lvl+0x1e3/0x2cb [ 50.618063][ T3503] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 50.628169][ T3501] UBSAN: array-index-out-of-bounds in fs/jfs/jfs_xtree.c:190:9 [ 50.630366][ T3503] ? panic+0x84d/0x84d [ 50.635029][ T3501] index 19 is out of range for type 'xad_t[18]' (aka 'struct xad[18]') [ 50.640658][ T3503] panic+0x318/0x84d [ 50.640685][ T3503] ? check_panic_on_warn+0x1d/0xa0 [ 50.640708][ T3503] ? fb_is_primary_device+0xcc/0xcc [ 50.640732][ T3503] ? dump_stack_lvl+0x24f/0x2cb [ 50.640776][ T3503] check_panic_on_warn+0x7e/0xa0 [ 50.640799][ T3503] __ubsan_handle_out_of_bounds+0x138/0x140 [ 50.640829][ T3503] xtInsert+0xf41/0xfa0 [ 50.640866][ T3503] ? xtSearch+0x1ca0/0x1ca0 [ 50.640913][ T3503] ? mark_lock+0x98/0x340 [ 50.640937][ T3503] ? dquot_drop+0x2a0/0x2a0 [ 50.640966][ T3503] ? rcu_is_watching+0x11/0xa0 [ 50.712687][ T3503] ? __mark_inode_dirty+0x3dd/0xd60 [ 50.717895][ T3503] extAlloc+0xa70/0x1000 [ 50.722154][ T3503] ? jfs_ioc_trim+0x660/0x660 [ 50.726826][ T3503] ? down_write_nested+0x117/0x180 [ 50.731946][ T3503] ? memset+0x1f/0x40 [ 50.735936][ T3503] jfs_get_block+0x417/0xe50 [ 50.740538][ T3503] ? jfs_dirty_inode+0x230/0x230 [ 50.745661][ T3503] nobh_write_begin+0x398/0xda0 [ 50.750547][ T3503] jfs_write_begin+0x3e/0x80 [ 50.755155][ T3503] ? jfs_dirty_inode+0x230/0x230 [ 50.760272][ T3503] generic_perform_write+0x2bf/0x5b0 [ 50.765596][ T3503] ? grab_cache_page_write_begin+0x90/0x90 [ 50.771418][ T3503] ? file_remove_privs+0x610/0x610 [ 50.776555][ T3503] ? down_write+0x10e/0x170 [ 50.781067][ T3503] __generic_file_write_iter+0x243/0x4f0 [ 50.786712][ T3503] generic_file_write_iter+0xa7/0x1b0 [ 50.792099][ T3503] do_iter_readv_writev+0x594/0x7a0 [ 50.797307][ T3503] ? generic_file_rw_checks+0x260/0x260 [ 50.802861][ T3503] ? common_file_perm+0x17d/0x1d0 [ 50.807886][ T3503] ? fsnotify_perm+0x67/0x5a0 [ 50.812677][ T3503] ? bpf_lsm_file_permission+0x5/0x10 [ 50.818078][ T3503] do_iter_write+0x1ea/0x760 [ 50.822683][ T3503] ? vfs_iter_write+0x69/0xa0 [ 50.827369][ T3503] iter_file_splice_write+0x806/0xfa0 [ 50.832767][ T3503] ? splice_from_pipe+0x230/0x230 [ 50.837792][ T3503] ? generic_file_splice_read+0x54a/0x790 [ 50.843521][ T3503] ? splice_shrink_spd+0xb0/0xb0 [ 50.848472][ T3503] ? common_file_perm+0x17d/0x1d0 [ 50.853498][ T3503] ? splice_from_pipe+0x230/0x230 [ 50.858531][ T3503] direct_splice_actor+0xe3/0x1c0 [ 50.863570][ T3503] splice_direct_to_actor+0x500/0xc10 [ 50.868953][ T3503] ? do_splice_direct+0x3d0/0x3d0 [ 50.873985][ T3503] ? pipe_to_sendpage+0x350/0x350 [ 50.879015][ T3503] ? fsnotify_perm+0x67/0x5a0 [ 50.883693][ T3503] ? bpf_lsm_file_permission+0x5/0x10 [ 50.889254][ T3503] do_splice_direct+0x285/0x3d0 [ 50.894112][ T3503] ? splice_direct_to_actor+0xc10/0xc10 [ 50.899657][ T3503] ? rcu_read_lock_any_held+0xb3/0x160 [ 50.905132][ T3503] do_sendfile+0x625/0xff0 [ 50.909563][ T3503] ? do_pwritev+0x360/0x360 [ 50.914070][ T3503] ? rcu_is_watching+0x11/0xa0 [ 50.918837][ T3503] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 50.924819][ T3503] __se_sys_sendfile64+0x178/0x1e0 [ 50.929933][ T3503] ? __x64_sys_sendfile64+0xa0/0xa0 [ 50.935133][ T3503] ? syscall_enter_from_user_mode+0x2e/0x230 [ 50.941139][ T3503] ? lockdep_hardirqs_on+0x94/0x130 [ 50.946344][ T3503] ? syscall_enter_from_user_mode+0x2e/0x230 [ 50.952333][ T3503] do_syscall_64+0x3d/0xb0 [ 50.956753][ T3503] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 50.962648][ T3503] RIP: 0033:0x7f398cf0e129 [ 50.967061][ T3503] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 50.986664][ T3503] RSP: 002b:00007f398ceab218 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 50.995075][ T3503] RAX: ffffffffffffffda RBX: 00007f398cf9b658 RCX: 00007f398cf0e129 [ 51.003081][ T3503] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000007 [ 51.011222][ T3503] RBP: 00007f398cf9b650 R08: 0000000000000000 R09: 0000000000000000 [ 51.019289][ T3503] R10: 0001000000201005 R11: 0000000000000246 R12: 00007f398cf9b65c [ 51.027262][ T3503] R13: 00007f398cf67e30 R14: 00007f398cf62060 R15: 0030656c69662f2e [ 51.035243][ T3503] [ 51.038264][ T3501] CPU: 0 PID: 3501 Comm: syz-executor173 Not tainted 5.15.149-syzkaller #0 [ 51.046867][ T3501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 51.056917][ T3501] Call Trace: [ 51.060192][ T3501] [ 51.063121][ T3501] dump_stack_lvl+0x1e3/0x2cb [ 51.067806][ T3501] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 51.073441][ T3501] ? panic+0x84d/0x84d [ 51.077524][ T3501] __ubsan_handle_out_of_bounds+0x118/0x140 [ 51.083429][ T3501] xtLookup+0x8cc/0x8e0 [ 51.087597][ T3501] ? jfs_umount_rw+0x130/0x130 [ 51.092386][ T3501] ? ksys_write+0x1a2/0x2c0 [ 51.096889][ T3501] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 51.102961][ T3501] ? __might_sleep+0xc0/0xc0 [ 51.107554][ T3501] extHint+0x291/0x710 [ 51.111633][ T3501] ? extAlloc+0x1000/0x1000 [ 51.116135][ T3501] ? down_write_nested+0x117/0x180 [ 51.121276][ T3501] ? down_read_non_owner+0x310/0x310 [ 51.126565][ T3501] ? memset+0x1f/0x40 [ 51.130553][ T3501] jfs_get_block+0x3a7/0xe50 [ 51.135159][ T3501] ? jfs_dirty_inode+0x230/0x230 [ 51.140112][ T3501] nobh_write_begin+0x398/0xda0 [ 51.144980][ T3501] jfs_write_begin+0x3e/0x80 [ 51.149587][ T3501] ? jfs_dirty_inode+0x230/0x230 [ 51.154528][ T3501] generic_perform_write+0x2bf/0x5b0 [ 51.159827][ T3501] ? grab_cache_page_write_begin+0x90/0x90 [ 51.165656][ T3501] ? file_remove_privs+0x610/0x610 [ 51.170771][ T3501] ? down_write+0x10e/0x170 [ 51.175316][ T3501] __generic_file_write_iter+0x243/0x4f0 [ 51.180974][ T3501] generic_file_write_iter+0xa7/0x1b0 [ 51.186353][ T3501] vfs_write+0xacf/0xe50 [ 51.190606][ T3501] ? file_end_write+0x250/0x250 [ 51.195483][ T3501] ? __fget_files+0x413/0x480 [ 51.200170][ T3501] ? mutex_lock_nested+0x17/0x20 [ 51.205113][ T3501] ? __fdget_pos+0x2cb/0x380 [ 51.209705][ T3501] ? ksys_write+0x77/0x2c0 [ 51.214123][ T3501] ksys_write+0x1a2/0x2c0 [ 51.218454][ T3501] ? print_irqtrace_events+0x210/0x210 [ 51.223917][ T3501] ? __ia32_sys_read+0x80/0x80 [ 51.228682][ T3501] ? syscall_enter_from_user_mode+0x2e/0x230 [ 51.234664][ T3501] ? lockdep_hardirqs_on+0x94/0x130 [ 51.239862][ T3501] ? syscall_enter_from_user_mode+0x2e/0x230 [ 51.245846][ T3501] do_syscall_64+0x3d/0xb0 [ 51.250266][ T3501] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 51.256159][ T3501] RIP: 0033:0x7f398cf0e129 [ 51.260574][ T3501] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 51.280178][ T3501] RSP: 002b:00007f398cecc218 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 51.288607][ T3501] RAX: ffffffffffffffda RBX: 00007f398cf9b648 RCX: 00007f398cf0e129 [ 51.296665][ T3501] RDX: 000000000208e24b RSI: 0000000020000300 RDI: 0000000000000006 [ 51.304633][ T3501] RBP: 00007f398cf9b640 R08: 0000000000000000 R09: 0000000000000000 [ 51.312687][ T3501] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f398cf9b64c [ 51.320656][ T3501] R13: 00007f398cf67e30 R14: 00007f398cf62060 R15: 0030656c69662f2e [ 51.328644][ T3501] [ 51.331896][ T3503] Kernel Offset: disabled [ 51.336296][ T3503] Rebooting in 86400 seconds..