loop0: detected capacity change from 0 to 32768
================================================================================
UBSAN: array-index-out-of-bounds in fs/jfs/jfs_xtree.c:270:11
index 19 is out of range for type 'xad_t[18]' (aka 'struct xad[18]')
CPU: 1 PID: 4969 Comm: syz.0.101 Not tainted 6.1.119-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Call trace:
 dump_backtrace+0x1c8/0x1f4 arch/arm64/kernel/stacktrace.c:158
 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:165
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x108/0x170 lib/dump_stack.c:106
 dump_stack+0x1c/0x58 lib/dump_stack.c:113
 ubsan_epilogue lib/ubsan.c:151 [inline]
 __ubsan_handle_out_of_bounds+0xfc/0x148 lib/ubsan.c:282
 xtSearch+0xc94/0x156c fs/jfs/jfs_xtree.c:270
 xtLookup+0x230/0x710 fs/jfs/jfs_xtree.c:152
 jfs_get_block+0x264/0xb98 fs/jfs/inode.c:218
 do_mpage_readpage+0x5d8/0x1748 fs/mpage.c:208
 mpage_readahead+0x360/0x644 fs/mpage.c:361
 jfs_readahead+0x28/0x38 fs/jfs/inode.c:285
 read_pages+0x168/0x6a0 mm/readahead.c:161
 page_cache_ra_unbounded+0x46c/0x58c mm/readahead.c:270
 do_page_cache_ra mm/readahead.c:300 [inline]
 page_cache_ra_order+0x850/0xa74 mm/readahead.c:564
 ondemand_readahead+0x5f0/0xafc mm/readahead.c:686
 page_cache_sync_ra+0x350/0x3d0 mm/readahead.c:713
 page_cache_sync_readahead include/linux/pagemap.h:1248 [inline]
 filemap_get_pages mm/filemap.c:2664 [inline]
 filemap_read+0x594/0x2260 mm/filemap.c:2758
 generic_file_read_iter+0xa0/0x450 mm/filemap.c:2913
 call_read_iter include/linux/fs.h:2259 [inline]
 generic_file_splice_read+0x1e0/0x508 fs/splice.c:308
 do_splice_to fs/splice.c:803 [inline]
 splice_direct_to_actor+0x30c/0x9b4 fs/splice.c:875
 do_splice_direct+0x20c/0x348 fs/splice.c:1002
 do_sendfile+0x4c0/0xcb0 fs/read_write.c:1255
 __do_sys_sendfile64 fs/read_write.c:1323 [inline]
 __se_sys_sendfile64 fs/read_write.c:1309 [inline]
 __arm64_sys_sendfile64+0x160/0x3b4 fs/read_write.c:1309
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x168 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
================================================================================
================================================================================
UBSAN: array-index-out-of-bounds in fs/jfs/jfs_xtree.c:179:9
index 19 is out of range for type 'xad_t[18]' (aka 'struct xad[18]')
CPU: 1 PID: 4969 Comm: syz.0.101 Not tainted 6.1.119-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Call trace:
 dump_backtrace+0x1c8/0x1f4 arch/arm64/kernel/stacktrace.c:158
 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:165
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x108/0x170 lib/dump_stack.c:106
 dump_stack+0x1c/0x58 lib/dump_stack.c:113
 ubsan_epilogue lib/ubsan.c:151 [inline]
 __ubsan_handle_out_of_bounds+0xfc/0x148 lib/ubsan.c:282
 xtLookup+0x70c/0x710 fs/jfs/jfs_xtree.c:179
 jfs_get_block+0x264/0xb98 fs/jfs/inode.c:218
 do_mpage_readpage+0x5d8/0x1748 fs/mpage.c:208
 mpage_readahead+0x360/0x644 fs/mpage.c:361
 jfs_readahead+0x28/0x38 fs/jfs/inode.c:285
 read_pages+0x168/0x6a0 mm/readahead.c:161
 page_cache_ra_unbounded+0x46c/0x58c mm/readahead.c:270
 do_page_cache_ra mm/readahead.c:300 [inline]
 page_cache_ra_order+0x850/0xa74 mm/readahead.c:564
 ondemand_readahead+0x5f0/0xafc mm/readahead.c:686
 page_cache_sync_ra+0x350/0x3d0 mm/readahead.c:713
 page_cache_sync_readahead include/linux/pagemap.h:1248 [inline]
 filemap_get_pages mm/filemap.c:2664 [inline]
 filemap_read+0x594/0x2260 mm/filemap.c:2758
 generic_file_read_iter+0xa0/0x450 mm/filemap.c:2913
 call_read_iter include/linux/fs.h:2259 [inline]
 generic_file_splice_read+0x1e0/0x508 fs/splice.c:308
 do_splice_to fs/splice.c:803 [inline]
 splice_direct_to_actor+0x30c/0x9b4 fs/splice.c:875
 do_splice_direct+0x20c/0x348 fs/splice.c:1002
 do_sendfile+0x4c0/0xcb0 fs/read_write.c:1255
 __do_sys_sendfile64 fs/read_write.c:1323 [inline]
 __se_sys_sendfile64 fs/read_write.c:1309 [inline]
 __arm64_sys_sendfile64+0x160/0x3b4 fs/read_write.c:1309
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x168 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
================================================================================
================================================================================
UBSAN: array-index-out-of-bounds in fs/jfs/jfs_xtree.c:1370:9
index 19 is out of range for type 'xad_t[18]' (aka 'struct xad[18]')
CPU: 1 PID: 4969 Comm: syz.0.101 Not tainted 6.1.119-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Call trace:
 dump_backtrace+0x1c8/0x1f4 arch/arm64/kernel/stacktrace.c:158
 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:165
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x108/0x170 lib/dump_stack.c:106
 dump_stack+0x1c/0x58 lib/dump_stack.c:113
 ubsan_epilogue lib/ubsan.c:151 [inline]
 __ubsan_handle_out_of_bounds+0xfc/0x148 lib/ubsan.c:282
 xtExtend+0x10fc/0x1334 fs/jfs/jfs_xtree.c:1370
 extAlloc+0x84c/0xdec fs/jfs/jfs_extent.c:143
 jfs_get_block+0x340/0xb98 fs/jfs/inode.c:248
 get_more_blocks fs/direct-io.c:665 [inline]
 do_direct_IO fs/direct-io.c:953 [inline]
 __blockdev_direct_IO+0x14cc/0x3ef4 fs/direct-io.c:1266
 blockdev_direct_IO include/linux/fs.h:3342 [inline]
 jfs_direct_IO+0xf4/0x1e0 fs/jfs/inode.c:336
 generic_file_direct_write+0x234/0x538 mm/filemap.c:3769
 __generic_file_write_iter+0x1bc/0x388 mm/filemap.c:3929
 generic_file_write_iter+0xb8/0x2b4 mm/filemap.c:4005
 do_iter_write+0x534/0x964 fs/read_write.c:861
 vfs_iter_write+0x88/0xac fs/read_write.c:902
 iter_file_splice_write+0x62c/0xc5c fs/splice.c:685
 do_splice_from fs/splice.c:763 [inline]
 direct_splice_actor+0xe4/0x1c0 fs/splice.c:950
 splice_direct_to_actor+0x3c4/0x9b4 fs/splice.c:896
 do_splice_direct+0x20c/0x348 fs/splice.c:1002
 do_sendfile+0x4c0/0xcb0 fs/read_write.c:1255
 __do_sys_sendfile64 fs/read_write.c:1323 [inline]
 __se_sys_sendfile64 fs/read_write.c:1309 [inline]
 __arm64_sys_sendfile64+0x160/0x3b4 fs/read_write.c:1309
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x168 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
================================================================================