[   28.843864][ T4649] dhcpcd-run-hook (4649) used greatest stack depth: 16688 bytes left
forked to background, child pid 4645
[   30.813579][ T4646] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.839535][ T4646] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.1.78' (ECDSA) to the list of known hosts.
syzkaller login: [   60.236497][   T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   60.244311][   T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   60.251880][   T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   60.259778][   T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   60.267740][   T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   60.275118][ T5074] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   60.349443][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.361564][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.370688][  T898] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   60.387462][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
executing program
[   60.395502][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.404973][  T898] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   60.544243][ T5077] loop0: detected capacity change from 0 to 32768
[   60.623786][ T5078] ================================================================================
[   60.623891][ T5077] ================================================================================
[   60.633492][ T5078] UBSAN: array-index-out-of-bounds in fs/jfs/jfs_xtree.c:622:9
[   60.650848][ T5077] UBSAN: array-index-out-of-bounds in fs/jfs/jfs_xtree.c:270:11
[   60.651237][ T5078] index 19 is out of range for type 'xad_t [18]'
[   60.664900][ T5077] index 19 is out of range for type 'xad_t [18]'
[   60.665071][ T5078] CPU: 1 PID: 5078 Comm: syz-executor296 Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0
[   60.681648][ T5078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[   60.692666][ T5078] Call Trace:
[   60.695948][ T5078]  
[   60.698882][ T5078]  dump_stack_lvl+0x1b1/0x290
[   60.703596][ T5078]  ? nf_tcp_handle_invalid+0x630/0x630
[   60.709456][ T5078]  ? vsnprintf+0x19e/0x1cb0
[   60.713964][ T5078]  ? panic+0x710/0x710
[   60.718036][ T5078]  ? xtSearch+0x188c/0x1cb0
[   60.722589][ T5078]  __ubsan_handle_out_of_bounds+0xe0/0x110
[   60.728409][ T5078]  xtInsert+0xf2f/0xff0
[   60.732601][ T5078]  ? xtSearch+0x1cb0/0x1cb0
[   60.737110][ T5078]  ? do_raw_spin_unlock+0x134/0x8a0
[   60.742342][ T5078]  ? _raw_spin_unlock+0x24/0x40
[   60.747213][ T5078]  ? __dquot_alloc_space+0x2d7/0x1050
[   60.752711][ T5078]  ? rcu_read_lock_sched_held+0x87/0x110
[   60.758386][ T5078]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[   60.764375][ T5078]  ? dquot_drop+0x2a0/0x2a0
[   60.768897][ T5078]  ? lockdep_hardirqs_on_prepare+0x428/0x790
[   60.774890][ T5078]  ? jfs_evict_inode+0x440/0x440
[   60.779836][ T5078]  extAlloc+0xa5d/0xff0
[   60.784006][ T5078]  ? jfs_ioc_trim+0x660/0x660
[   60.788682][ T5078]  ? down_read_non_owner+0xa0/0xa0
[   60.793797][ T5078]  jfs_get_block+0x342/0xce0
[   60.798394][ T5078]  ? jfs_dirty_inode+0x240/0x240
[   60.803332][ T5078]  ? folio_alloc+0x47/0x50
[   60.807761][ T5078]  ? create_page_buffers+0x244/0x4b0
[   60.813053][ T5078]  __block_write_begin_int+0x54c/0x1a80
[   60.818638][ T5078]  ? jfs_dirty_inode+0x240/0x240
[   60.823577][ T5078]  ? page_zero_new_buffers+0x940/0x940
[   60.829047][ T5078]  ? PageHeadHuge+0x8a/0x1d0
[   60.833641][ T5078]  ? jfs_dirty_inode+0x240/0x240
[   60.838666][ T5078]  block_write_begin+0x93/0x1e0
[   60.843518][ T5078]  ? jfs_write_begin+0x16/0x60
[   60.848281][ T5078]  jfs_write_begin+0x2d/0x60
[   60.852866][ T5078]  generic_perform_write+0x2e4/0x5e0
[   60.858249][ T5078]  ? jfs_write_begin+0x60/0x60
[   60.863022][ T5078]  ? generic_file_direct_write+0x610/0x610
[   60.868832][ T5078]  ? __file_remove_privs+0x610/0x610
[   60.874117][ T5078]  ? generic_write_checks+0x15c/0x1c0
[   60.879607][ T5078]  __generic_file_write_iter+0x176/0x400
[   60.885252][ T5078]  generic_file_write_iter+0xab/0x310
[   60.890809][ T5078]  vfs_write+0x7dc/0xc50
[   60.895065][ T5078]  ? __lock_acquire+0x1f60/0x1f60
[   60.900096][ T5078]  ? file_end_write+0x230/0x230
[   60.904960][ T5078]  ? mutex_lock_nested+0x17/0x20
[   60.909901][ T5078]  ? __fdget_pos+0x242/0x2e0
[   60.914521][ T5078]  ? ksys_write+0x72/0x2a0
[   60.918941][ T5078]  ksys_write+0x177/0x2a0
[   60.923282][ T5078]  ? __ia32_sys_read+0x80/0x80
[   60.928228][ T5078]  ? syscall_enter_from_user_mode+0x2e/0x1d0
[   60.934210][ T5078]  ? lockdep_hardirqs_on+0x8d/0x130
[   60.939411][ T5078]  ? syscall_enter_from_user_mode+0x2e/0x1d0
[   60.945396][ T5078]  do_syscall_64+0x3d/0xb0
[   60.950121][ T5078]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   60.956106][ T5078] RIP: 0033:0x7f10bbe42b19
[   60.960535][ T5078] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 91 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[   60.980153][ T5078] RSP: 002b:00007f10b41c3208 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   60.988571][ T5078] RAX: ffffffffffffffda RBX: 00007f10bbec67b8 RCX: 00007f10bbe42b19
[   60.996571][ T5078] RDX: 00000000000ffe00 RSI: 0000000020004200 RDI: 0000000000000006
[   61.004550][ T5078] RBP: 00007f10bbec67b0 R08: 0000000000000000 R09: 0000000000000000
[   61.012526][ T5078] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f10bbec67bc
[   61.020508][ T5078] R13: 00007ffe95898c1f R14: 00007f10b41c3300 R15: 0000000000022000
[   61.028511][ T5078]  
[   61.032804][ T5077] CPU: 1 PID: 5077 Comm: syz-executor296 Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0
[   61.043342][ T5077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[   61.053510][ T5077] Call Trace:
[   61.056792][ T5077]  
[   61.059728][ T5077]  dump_stack_lvl+0x1b1/0x290
[   61.064415][ T5077]  ? nf_tcp_handle_invalid+0x630/0x630
[   61.069882][ T5077]  ? vsnprintf+0x19e/0x1cb0
[   61.074388][ T5077]  ? panic+0x710/0x710
[   61.078483][ T5077]  ? do_read_cache_folio+0x6f7/0x790
[   61.083776][ T5077]  ? folio_unlock+0x112/0x310
[   61.088466][ T5077]  __ubsan_handle_out_of_bounds+0xe0/0x110
[   61.094290][ T5077]  xtSearch+0x1114/0x1cb0
[   61.098636][ T5077]  ? stack_trace_save+0x104/0x1e0
[   61.103674][ T5077]  xtLookup+0x235/0x880
[   61.107848][ T5077]  ? jfs_umount_rw+0x130/0x130
[   61.112893][ T5077]  ? read_lock_is_recursive+0x10/0x10
[   61.118277][ T5077]  ? __might_sleep+0xc0/0xc0
[   61.122875][ T5077]  extHint+0x204/0x630
[   61.126961][ T5077]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[   61.132951][ T5077]  ? extAlloc+0xff0/0xff0
[   61.137288][ T5077]  ? down_read_non_owner+0xa0/0xa0
[   61.142515][ T5077]  jfs_get_block+0x2e3/0xce0
[   61.147119][ T5077]  ? jfs_dirty_inode+0x240/0x240
[   61.152058][ T5077]  ? do_raw_spin_unlock+0x134/0x8a0
[   61.157547][ T5077]  ? folio_alloc+0x47/0x50
[   61.161998][ T5077]  ? create_page_buffers+0x244/0x4b0
[   61.167294][ T5077]  __block_write_begin_int+0x54c/0x1a80
[   61.172864][ T5077]  ? __mark_inode_dirty+0x24a/0x600
[   61.178066][ T5077]  ? jfs_dirty_inode+0x240/0x240
[   61.183009][ T5077]  ? page_zero_new_buffers+0x940/0x940
[   61.188520][ T5077]  ? PageHeadHuge+0x8a/0x1d0
[   61.193116][ T5077]  ? jfs_dirty_inode+0x240/0x240
[   61.198058][ T5077]  block_write_begin+0x93/0x1e0
[   61.202915][ T5077]  ? jfs_write_begin+0x16/0x60
[   61.207697][ T5077]  jfs_write_begin+0x2d/0x60
[   61.212293][ T5077]  generic_perform_write+0x2e4/0x5e0
[   61.217603][ T5077]  ? jfs_write_begin+0x60/0x60
[   61.222473][ T5077]  ? generic_file_direct_write+0x610/0x610
[   61.228301][ T5077]  ? __file_remove_privs+0x610/0x610
[   61.233597][ T5077]  ? generic_write_checks+0x15c/0x1c0
[   61.239070][ T5077]  __generic_file_write_iter+0x176/0x400
[   61.244730][ T5077]  generic_file_write_iter+0xab/0x310
[   61.250122][ T5077]  do_iter_write+0x6c2/0xc20
[   61.254728][ T5077]  ? rcu_read_lock_sched_held+0x87/0x110
[   61.260403][ T5077]  ? vfs_iter_write+0xa0/0xa0
[   61.265114][ T5077]  ? PageUptodate+0xe7/0x2b0
[   61.269720][ T5077]  ? vfs_iter_write+0x69/0xa0
[   61.274415][ T5077]  iter_file_splice_write+0x7fc/0xfc0
[   61.279828][ T5077]  ? splice_from_pipe+0x200/0x200
[   61.284867][ T5077]  ? __fsnotify_parent+0x4fa/0x710
[   61.289982][ T5077]  ? splice_shrink_spd+0xb0/0xb0
[   61.294936][ T5077]  ? __fsnotify_update_child_dentry_flags+0x2d0/0x2d0
[   61.301709][ T5077]  ? splice_from_pipe+0x200/0x200
[   61.306746][ T5077]  direct_splice_actor+0xe6/0x1c0
[   61.311821][ T5077]  splice_direct_to_actor+0x4e4/0xc00
[   61.317217][ T5077]  ? do_splice_direct+0x3d0/0x3d0
[   61.322246][ T5077]  ? pipe_to_sendpage+0x340/0x340
[   61.327286][ T5077]  ? bpf_lsm_file_permission+0x5/0x10
[   61.332664][ T5077]  ? security_file_permission+0xe0/0x5c0
[   61.338311][ T5077]  do_splice_direct+0x279/0x3d0
[   61.343176][ T5077]  ? splice_direct_to_actor+0xc00/0xc00
[   61.348735][ T5077]  ? rcu_read_lock_any_held+0xb1/0x130
[   61.354204][ T5077]  ? apparmor_file_permission+0x240/0x310
[   61.360981][ T5077]  do_sendfile+0x5fb/0xf80
[   61.365415][ T5077]  ? do_pwritev+0x350/0x350
[   61.369923][ T5077]  ? lockdep_hardirqs_on_prepare+0x428/0x790
[   61.375903][ T5077]  __se_sys_sendfile64+0x14f/0x1b0
[   61.381109][ T5077]  ? __x64_sys_sendfile64+0xa0/0xa0
[   61.386310][ T5077]  ? syscall_enter_from_user_mode+0x2e/0x1d0
[   61.392290][ T5077]  ? lockdep_hardirqs_on+0x8d/0x130
[   61.397503][ T5077]  ? syscall_enter_from_user_mode+0x2e/0x1d0
[   61.403495][ T5077]  do_syscall_64+0x3d/0xb0
[   61.407924][ T5077]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   61.413988][ T5077] RIP: 0033:0x7f10bbe42b19
[   61.418514][ T5077] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 91 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[   61.438218][ T5077] RSP: 002b:00007f10bb5e4208 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[   61.446656][ T5077] RAX: ffffffffffffffda RBX: 00007f10bbec67a8 RCX: 00007f10bbe42b19
[   61.454628][ T5077] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005
[   61.462604][ T5077] RBP: 00007f10bbec67a0 R08: 0000000000000000 R09: 0000000000000000
[   61.470583][ T5077] R10: 0000000080000000 R11: 0000000000000246 R12: 00007f10bbec67ac
[   61.478574][ T5077] R13: 00007ffe95898c1f R14: 00007f10bb5e4300 R15: 0000000000022000
[   61.486578][ T5077]  
[   61.495402][ T5077] ================================================================================
[   61.501287][ T5078] ================================================================================
[   61.505242][ T5077] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[   61.505253][ T5077] CPU: 0 PID: 5077 Comm: syz-executor296 Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0
[   61.505271][ T5077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[   61.505280][ T5077] Call Trace:
[   61.505287][ T5077]  
[   61.505295][ T5077]  dump_stack_lvl+0x1b1/0x290
[   61.505324][ T5077]  ? nf_tcp_handle_invalid+0x630/0x630
[   61.505346][ T5077]  ? panic+0x710/0x710
[   61.505359][ T5077]  ? tick_nohz_tick_stopped+0x76/0xb0
[   61.505383][ T5077]  ? __irq_work_queue_local+0x121/0x180
[   61.505406][ T5077]  ? vscnprintf+0x59/0x80
[   61.505426][ T5077]  panic+0x2d6/0x710
[   61.505444][ T5077]  ? check_panic_on_warn+0x1d/0xa0
[   61.505463][ T5077]  ? memcpy_page_flushcache+0x100/0x100
[   61.505480][ T5077]  ? dump_stack_lvl+0x20b/0x290
[   61.505501][ T5077]  ? do_read_cache_folio+0x6f7/0x790
[   61.505532][ T5077]  check_panic_on_warn+0x80/0xa0
[   61.505551][ T5077]  __ubsan_handle_out_of_bounds+0x102/0x110
[   61.505579][ T5077]  xtSearch+0x1114/0x1cb0
[   61.505610][ T5077]  ? stack_trace_save+0x104/0x1e0
[   61.505638][ T5077]  xtLookup+0x235/0x880
[   61.505663][ T5077]  ? jfs_umount_rw+0x130/0x130
[   61.505704][ T5077]  ? read_lock_is_recursive+0x10/0x10
[   61.505725][ T5077]  ? __might_sleep+0xc0/0xc0
[   61.505751][ T5077]  extHint+0x204/0x630
[   61.505770][ T5077]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[   61.505797][ T5077]  ? extAlloc+0xff0/0xff0
[   61.505815][ T5077]  ? down_read_non_owner+0xa0/0xa0
[   61.505843][ T5077]  jfs_get_block+0x2e3/0xce0
[   61.505868][ T5077]  ? jfs_dirty_inode+0x240/0x240
[   61.505883][ T5077]  ? do_raw_spin_unlock+0x134/0x8a0
[   61.505903][ T5077]  ? folio_alloc+0x47/0x50
[   61.505927][ T5077]  ? create_page_buffers+0x244/0x4b0
[   61.505952][ T5077]  __block_write_begin_int+0x54c/0x1a80
[   61.505994][ T5077]  ? __mark_inode_dirty+0x24a/0x600
[   61.506010][ T5077]  ? jfs_dirty_inode+0x240/0x240
[   61.506025][ T5077]  ? page_zero_new_buffers+0x940/0x940
[   61.506045][ T5077]  ? PageHeadHuge+0x8a/0x1d0
[   61.506065][ T5077]  ? jfs_dirty_inode+0x240/0x240
[   61.506079][ T5077]  block_write_begin+0x93/0x1e0
[   61.506097][ T5077]  ? jfs_write_begin+0x16/0x60
[   61.506115][ T5077]  jfs_write_begin+0x2d/0x60
[   61.506132][ T5077]  generic_perform_write+0x2e4/0x5e0
[   61.506163][ T5077]  ? jfs_write_begin+0x60/0x60
[   61.506179][ T5077]  ? generic_file_direct_write+0x610/0x610
[   61.506201][ T5077]  ? __file_remove_privs+0x610/0x610
[   61.506225][ T5077]  ? generic_write_checks+0x15c/0x1c0
[   61.506252][ T5077]  __generic_file_write_iter+0x176/0x400
[   61.506281][ T5077]  generic_file_write_iter+0xab/0x310
[   61.506306][ T5077]  do_iter_write+0x6c2/0xc20
[   61.506334][ T5077]  ? rcu_read_lock_sched_held+0x87/0x110
[   61.506352][ T5077]  ? vfs_iter_write+0xa0/0xa0
[   61.506379][ T5077]  ? PageUptodate+0xe7/0x2b0
[   61.506399][ T5077]  ? vfs_iter_write+0x69/0xa0
[   61.506419][ T5077]  iter_file_splice_write+0x7fc/0xfc0
[   61.506466][ T5077]  ? splice_from_pipe+0x200/0x200
[   61.506490][ T5077]  ? __fsnotify_parent+0x4fa/0x710
[   61.506504][ T5077]  ? splice_shrink_spd+0xb0/0xb0
[   61.506527][ T5077]  ? __fsnotify_update_child_dentry_flags+0x2d0/0x2d0
[   61.506550][ T5077]  ? splice_from_pipe+0x200/0x200
[   61.506571][ T5077]  direct_splice_actor+0xe6/0x1c0
[   61.506594][ T5077]  splice_direct_to_actor+0x4e4/0xc00
[   61.506631][ T5077]  ? do_splice_direct+0x3d0/0x3d0
[   61.506650][ T5077]  ? pipe_to_sendpage+0x340/0x340
[   61.506672][ T5077]  ? bpf_lsm_file_permission+0x5/0x10
[   61.506692][ T5077]  ? security_file_permission+0xe0/0x5c0
[   61.506718][ T5077]  do_splice_direct+0x279/0x3d0
[   61.506743][ T5077]  ? splice_direct_to_actor+0xc00/0xc00
[   61.506761][ T5077]  ? rcu_read_lock_any_held+0xb1/0x130
[   61.506781][ T5077]  ? apparmor_file_permission+0x240/0x310
[   61.506811][ T5077]  do_sendfile+0x5fb/0xf80
[   61.506844][ T5077]  ? do_pwritev+0x350/0x350
[   61.506870][ T5077]  ? lockdep_hardirqs_on_prepare+0x428/0x790
[   61.506892][ T5077]  __se_sys_sendfile64+0x14f/0x1b0
[   61.506915][ T5077]  ? __x64_sys_sendfile64+0xa0/0xa0
[   61.506935][ T5077]  ? syscall_enter_from_user_mode+0x2e/0x1d0
[   61.506950][ T5077]  ? lockdep_hardirqs_on+0x8d/0x130
[   61.506966][ T5077]  ? syscall_enter_from_user_mode+0x2e/0x1d0
[   61.506985][ T5077]  do_syscall_64+0x3d/0xb0
[   61.507006][ T5077]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   61.507025][ T5077] RIP: 0033:0x7f10bbe42b19
[   61.507040][ T5077] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 91 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[   61.507052][ T5077] RSP: 002b:00007f10bb5e4208 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[   61.507071][ T5077] RAX: ffffffffffffffda RBX: 00007f10bbec67a8 RCX: 00007f10bbe42b19
[   61.507083][ T5077] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005
[   61.507092][ T5077] RBP: 00007f10bbec67a0 R08: 0000000000000000 R09: 0000000000000000
[   61.507101][ T5077] R10: 0000000080000000 R11: 0000000000000246 R12: 00007f10bbec67ac
[   61.507111][ T5077] R13: 00007ffe95898c1f R14: 00007f10bb5e4300 R15: 0000000000022000
[   61.507140][ T5077]  
[   61.514136][ T5077] Kernel Offset: disabled
[   62.008245][ T5077] Rebooting in 86400 seconds..