Warning: Permanently added '10.128.0.38' (ED25519) to the list of known hosts. executing program syzkaller login: [ 42.445188][ T4023] loop0: detected capacity change from 0 to 32768 executing program [ 42.775488][ T4025] loop0: detected capacity change from 0 to 32768 [ 42.899158][ T4025] ================================================================== [ 42.901876][ T4025] BUG: KASAN: slab-out-of-bounds in dtSearch+0x1288/0x1b28 [ 42.903979][ T4025] Read of size 1 at addr ffff0000e203f9f4 by task syz-executor426/4025 [ 42.906461][ T4025] [ 42.907122][ T4025] CPU: 1 PID: 4025 Comm: syz-executor426 Not tainted 5.15.185-syzkaller #0 [ 42.910873][ T4025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 42.913789][ T4025] Call trace: [ 42.914695][ T4025] dump_backtrace+0x0/0x43c [ 42.915942][ T4025] show_stack+0x2c/0x3c [ 42.917093][ T4025] __dump_stack+0x30/0x40 [ 42.918276][ T4025] dump_stack_lvl+0xf8/0x160 [ 42.919584][ T4025] print_address_description+0x78/0x30c [ 42.921150][ T4025] kasan_report+0xec/0x15c [ 42.922411][ T4025] __asan_report_load1_noabort+0x44/0x50 [ 42.923974][ T4025] dtSearch+0x1288/0x1b28 [ 42.925215][ T4025] jfs_lookup+0x13c/0x32c [ 42.926452][ T4025] path_openat+0xfbc/0x26e4 [ 42.928812][ T4025] do_filp_open+0x164/0x330 [ 42.930974][ T4025] do_sys_openat2+0x128/0x3d8 [ 42.932264][ T4025] __arm64_sys_openat+0x120/0x154 [ 42.933728][ T4025] invoke_syscall+0x98/0x2b8 [ 42.935064][ T4025] el0_svc_common+0x1fc/0x258 [ 42.936476][ T4025] do_el0_svc+0x58/0x14c [ 42.937691][ T4025] el0_svc+0x78/0x1e0 [ 42.938834][ T4025] el0t_64_sync_handler+0xcc/0xe4 [ 42.940375][ T4025] el0t_64_sync+0x1a0/0x1a4 [ 42.941615][ T4025] [ 42.942208][ T4025] Allocated by task 4025: [ 42.943538][ T4025] __kasan_slab_alloc+0x8c/0xcc [ 42.945030][ T4025] slab_post_alloc_hook+0x74/0x408 [ 42.946540][ T4025] kmem_cache_alloc+0x1e0/0x3e4 [ 42.947943][ T4025] jfs_alloc_inode+0x24/0x60 [ 42.950930][ T4025] iget_locked+0x178/0x710 [ 42.952293][ T4025] jfs_iget+0x30/0x374 [ 42.953479][ T4025] jfs_fill_super+0x5f0/0x960 [ 42.954833][ T4025] mount_bdev+0x264/0x358 [ 42.956101][ T4025] jfs_do_mount+0x44/0x58 [ 42.957492][ T4025] legacy_get_tree+0xd4/0x16c [ 42.958783][ T4025] vfs_get_tree+0x90/0x274 [ 42.960016][ T4025] do_new_mount+0x228/0x810 [ 42.961291][ T4025] path_mount+0x5b4/0x1000 [ 42.962506][ T4025] __arm64_sys_mount+0x514/0x5e4 [ 42.963905][ T4025] invoke_syscall+0x98/0x2b8 [ 42.965191][ T4025] el0_svc_common+0x1fc/0x258 [ 42.966518][ T4025] do_el0_svc+0x58/0x14c [ 42.967718][ T4025] el0_svc+0x78/0x1e0 [ 42.968882][ T4025] el0t_64_sync_handler+0xcc/0xe4 [ 42.970432][ T4025] el0t_64_sync+0x1a0/0x1a4 [ 42.971844][ T4025] [ 42.972548][ T4025] The buggy address belongs to the object at ffff0000e203ef00 [ 42.972548][ T4025] which belongs to the cache jfs_ip of size 2240 [ 42.976697][ T4025] The buggy address is located 564 bytes to the right of [ 42.976697][ T4025] 2240-byte region [ffff0000e203ef00, ffff0000e203f7c0) [ 42.980914][ T4025] The buggy address belongs to the page: [ 42.982566][ T4025] page:00000000a280c936 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x122038 [ 42.985590][ T4025] head:00000000a280c936 order:3 compound_mapcount:0 compound_pincount:0 [ 42.987928][ T4025] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 42.990181][ T4025] raw: 05ffc00000010200 0000000000000000 dead000000000122 ffff0000c6d44000 [ 42.992729][ T4025] raw: 0000000000000000 00000000000d000d 00000001ffffffff 0000000000000000 [ 42.995304][ T4025] page dumped because: kasan: bad access detected [ 42.998304][ T4025] [ 42.998993][ T4025] Memory state around the buggy address: [ 43.000603][ T4025] ffff0000e203f880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 43.003046][ T4025] ffff0000e203f900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 43.005360][ T4025] >ffff0000e203f980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 43.007633][ T4025] ^ [ 43.009878][ T4025] ffff0000e203fa00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 43.012331][ T4025] ffff0000e203fa80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 43.014564][ T4025] ================================================================== [ 43.016875][ T4025] Disabling lock debugging due to kernel taint executing program [ 43.260968][ T4026] loop0: detected capacity change from 0 to 32768 executing program [ 43.507745][ T4027] loop0: detected capacity change from 0 to 32768 executing program [ 43.692178][ T4028] loop0: detected capacity change from 0 to 32768 executing program [ 43.927268][ T4029] loop0: detected capacity change from 0 to 32768 executing program [ 44.159212][ T4030] loop0: detected capacity change from 0 to 32768 executing program [ 44.385977][ T4031] loop0: detected capacity change from 0 to 32768 executing program [ 44.618847][ T4032] loop0: detected capacity change from 0 to 32768 executing program [ 44.864123][ T4033] loop0: detected capacity change from 0 to 32768 executing program [ 45.018056][ T4034] loop0: detected capacity change from 0 to 32768 executing program [ 45.208909][ T4035] loop0: detected capacity change from 0 to 32768 executing program [ 45.367130][ T4036] loop0: detected capacity change from 0 to 32768 executing program [ 45.596503][ T4037] loop0: detected capacity change from 0 to 32768 executing program [ 46.138812][ T4038] loop0: detected capacity change from 0 to 32768 executing program [ 46.332380][ T4039] loop0: detected capacity change from 0 to 32768 executing program [ 46.485348][ T4040] loop0: detected capacity change from 0 to 32768 executing program [ 46.726543][ T4041] loop0: detected capacity change from 0 to 32768 executing program [ 46.881807][ T4042] loop0: detected capacity change from 0 to 32768 executing program [ 47.127134][ T4043] loop0: detected capacity change from 0 to 32768 executing program [ 47.321499][ T4044] loop0: detected capacity change from 0 to 32768 executing program [ 47.498299][ T4045] loop0: detected capacity change from 0 to 32768 executing program [ 47.733786][ T4046] loop0: detected capacity change from 0 to 32768 executing program [ 47.966699][ T4047] loop0: detected capacity change from 0 to 32768 executing program [ 48.187450][ T4048] loop0: detected capacity change from 0 to 32768 executing program [ 48.386067][ T4049] loop0: detected capacity change from 0 to 32768 executing program [ 48.578223][ T4050] loop0: detected capacity change from 0 to 32768 executing program [ 48.786136][ T4051] loop0: detected capacity change from 0 to 32768 executing program [ 48.936640][ T4052] loop0: detected capacity change from 0 to 32768 executing program [ 49.186291][ T4053] loop0: detected capacity change from 0 to 32768 executing program [ 49.339032][ T4054] loop0: detected capacity change from 0 to 32768 executing program [ 49.597740][ T4055] loop0: detected capacity change from 0 to 32768 executing program [ 49.750956][ T4056] loop0: detected capacity change from 0 to 32768 executing program [ 50.236151][ T4057] loop0: detected capacity change from 0 to 32768 executing program [ 50.468775][ T4059] loop0: detected capacity change from 0 to 32768 executing program [ 50.701529][ T4060] loop0: detected capacity change from 0 to 32768 executing program [ 50.941019][ T4061] loop0: detected capacity change from 0 to 32768 executing program [ 51.093683][ T4062] loop0: detected capacity change from 0 to 32768 executing program [ 51.299410][ T4064] loop0: detected capacity change from 0 to 32768 executing program [ 51.454607][ T4065] loop0: detected capacity change from 0 to 32768 executing program [ 51.693936][ T4067] loop0: detected capacity change from 0 to 32768 executing program [ 51.851775][ T4070] loop0: detected capacity change from 0 to 32768 executing program [ 52.388564][ T4071] loop0: detected capacity change from 0 to 32768 executing program [ 52.581609][ T4072] loop0: detected capacity change from 0 to 32768 executing program [ 52.811058][ T4073] loop0: detected capacity change from 0 to 32768 executing program