[ 56.742177][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.759305][ T11] device veth1_macvtap left promiscuous mode [ 56.766805][ T11] device veth0_macvtap left promiscuous mode [ 56.774919][ T11] device veth1_vlan left promiscuous mode [ 56.780952][ T11] device veth0_vlan left promiscuous mode [ 57.018113][ T11] team0 (unregistering): Port device team_slave_1 removed [ 57.034681][ T11] team0 (unregistering): Port device team_slave_0 removed [ 57.049153][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 57.068638][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 57.151907][ T11] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.15.196' (ECDSA) to the list of known hosts. 2023/02/25 13:23:46 ignoring optional flag "sandboxArg"="0" 2023/02/25 13:23:46 parsed 1 programs 2023/02/25 13:23:46 executed programs: 0 [ 75.655826][ T5070] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.664005][ T5070] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.671767][ T5070] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.679962][ T5070] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.687589][ T5070] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.695329][ T5070] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.797779][ T5528] chnl_net:caif_netlink_parms(): no params data found [ 75.837644][ T5528] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.845005][ T5528] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.853433][ T5528] device bridge_slave_0 entered promiscuous mode [ 75.861392][ T5528] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.869070][ T5528] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.877221][ T5528] device bridge_slave_1 entered promiscuous mode [ 75.898692][ T5528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.910169][ T5528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.932871][ T5528] team0: Port device team_slave_0 added [ 75.940036][ T5528] team0: Port device team_slave_1 added [ 75.956832][ T5528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.964479][ T5528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.990508][ T5528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.004643][ T5528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.011610][ T5528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.037636][ T5528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.066631][ T5528] device hsr_slave_0 entered promiscuous mode [ 76.073446][ T5528] device hsr_slave_1 entered promiscuous mode [ 76.304865][ T898] cfg80211: failed to load regulatory.db [ 77.188846][ T5528] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.214729][ T5528] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.229903][ T5528] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.240408][ T5528] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.318260][ T5528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.336279][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.346500][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.357660][ T5528] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.370306][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.380641][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.390861][ T4767] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.398152][ T4767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.418105][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.427778][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.437866][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.448083][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.455261][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.464743][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.484722][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.494027][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.505233][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.514466][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.524740][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.539458][ T5528] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 77.553589][ T5528] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.570028][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.578926][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.590929][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.600154][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.610537][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.624732][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.743255][ T5070] Bluetooth: hci0: command 0x0409 tx timeout [ 77.840393][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.850503][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.861566][ T5528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.886723][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.896150][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.931078][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.939986][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.951019][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.959303][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.970744][ T5528] device veth0_vlan entered promiscuous mode [ 77.985558][ T5528] device veth1_vlan entered promiscuous mode [ 78.010177][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 78.019238][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 78.027710][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.037447][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.048282][ T5528] device veth0_macvtap entered promiscuous mode [ 78.059985][ T5528] device veth1_macvtap entered promiscuous mode [ 78.081513][ T5528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.089573][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.098750][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.107541][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.117726][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.129975][ T5528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.138648][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.148338][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.159963][ T5528] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.170523][ T5528] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.179599][ T5528] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.189008][ T5528] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.260488][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.273521][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.289076][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.299174][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.308772][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.319904][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.730196][ T5594] loop0: detected capacity change from 0 to 40427 [ 78.751504][ T5594] F2FS-fs (loop0): Found nat_bits in checkpoint [ 78.802072][ T5594] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 78.824139][ T27] audit: type=1804 audit(1677331429.965:2): pid=5594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3522501335/syzkaller.DkzmU9/0/file0/bus" dev="loop0" ino=10 res=1 errno=0 [ 78.879426][ T5612] ------------[ cut here ]------------ [ 78.879644][ T5594] syz-executor.0: attempt to access beyond end of device [ 78.879644][ T5594] loop0: rw=2049, sector=77824, nr_sectors = 2048 limit=40427 [ 78.903161][ T5612] kernel BUG at fs/f2fs/extent_cache.c:1199! [ 78.909189][ T5612] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 78.915355][ T5612] CPU: 0 PID: 5612 Comm: syz-executor.0 Not tainted 6.2.0-rc5-syzkaller-00047-g7c46948a6e9c-dirty #0 [ 78.926219][ T5612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 78.936292][ T5612] RIP: 0010:__destroy_extent_tree+0x5c2/0x740 [ 78.942467][ T5612] Code: dc 0a fe e9 ff fd ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 7b fb ff ff 48 89 ef e8 f8 db 0a fe e9 6e fb ff ff e8 8e 95 b6 fd <0f> 0b f3 0f 1e fa 65 8b 1d cd f7 2e 7c 48 c7 c0 78 9b 36 8e 48 c1 [ 78.962087][ T5612] RSP: 0018:ffffc900052bf7c0 EFLAGS: 00010293 [ 78.968173][ T5612] RAX: ffffffff83d4b072 RBX: 0000000000000001 RCX: ffff8880208057c0 [ 78.976198][ T5612] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 78.984191][ T5612] RBP: ffff888076788000 R08: ffffffff83d4ad67 R09: ffffed100e779229 [ 78.992183][ T5612] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff1100e72753a [ 79.000302][ T5612] R13: ffff88807393a9d0 R14: ffff888076788bf0 R15: ffff888073bc9140 [ 79.008296][ T5612] FS: 00007f70cd5da700(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 79.017241][ T5612] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 79.023827][ T5612] CR2: 00007f2022c4b690 CR3: 000000001d05c000 CR4: 00000000003506f0 [ 79.031800][ T5612] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 79.039763][ T5612] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 79.047740][ T5612] Call Trace: [ 79.051120][ T5612] [ 79.054044][ T5612] f2fs_destroy_extent_tree+0x17/0x30 [ 79.059414][ T5612] f2fs_evict_inode+0x467/0x1650 [ 79.064542][ T5612] ? _raw_spin_unlock+0x28/0x40 [ 79.069385][ T5612] ? f2fs_write_inode+0x550/0x550 [ 79.074404][ T5612] evict+0x2a4/0x620 [ 79.078290][ T5612] f2fs_abort_atomic_write+0xda/0x440 [ 79.083656][ T5612] __f2fs_ioctl+0x315c/0xb2b0 [ 79.088326][ T5612] ? rcu_lock_release+0x5/0x30 [ 79.093076][ T5612] ? rcu_read_lock_sched_held+0x8b/0x110 [ 79.098701][ T5612] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 79.104673][ T5612] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 79.110559][ T5612] ? do_vfs_ioctl+0x1b9f/0x2a40 [ 79.115502][ T5612] ? __x64_compat_sys_ioctl+0x90/0x90 [ 79.120862][ T5612] ? rcu_lock_release+0x5/0x30 [ 79.125700][ T5612] ? __lock_acquire+0x1f80/0x1f80 [ 79.130710][ T5612] ? lockdep_hardirqs_on+0x90/0x130 [ 79.135901][ T5612] ? __kmem_cache_free+0x264/0x3c0 [ 79.141022][ T5612] ? f2fs_ioctl+0x1d0/0x1d0 [ 79.145516][ T5612] ? tomoyo_path_number_perm+0x673/0x7d0 [ 79.151154][ T5612] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 79.156613][ T5612] ? __fget_files+0x3bb/0x420 [ 79.161286][ T5612] ? f2fs_ioctl+0x136/0x1d0 [ 79.165803][ T5612] ? f2fs_precache_extents+0x3b0/0x3b0 [ 79.171253][ T5612] __se_sys_ioctl+0xf1/0x160 [ 79.175840][ T5612] do_syscall_64+0x41/0xc0 [ 79.180274][ T5612] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 79.186173][ T5612] RIP: 0033:0x7f70cc88c0c9 [ 79.190576][ T5612] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 79.210256][ T5612] RSP: 002b:00007f70cd5da168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 79.218658][ T5612] RAX: ffffffffffffffda RBX: 00007f70cc9ac050 RCX: 00007f70cc88c0c9 [ 79.226706][ T5612] RDX: 0000000000000000 RSI: 000000000000f505 RDI: 0000000000000004 [ 79.234662][ T5612] RBP: 00007f70cc8e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 79.242628][ T5612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.250584][ T5612] R13: 00007ffed647f3cf R14: 00007f70cd5da300 R15: 0000000000022000 [ 79.258549][ T5612] [ 79.261571][ T5612] Modules linked in: [ 79.268790][ T5612] ---[ end trace 0000000000000000 ]--- [ 79.277032][ T5612] RIP: 0010:__destroy_extent_tree+0x5c2/0x740 [ 79.283326][ T5612] Code: dc 0a fe e9 ff fd ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 7b fb ff ff 48 89 ef e8 f8 db 0a fe e9 6e fb ff ff e8 8e 95 b6 fd <0f> 0b f3 0f 1e fa 65 8b 1d cd f7 2e 7c 48 c7 c0 78 9b 36 8e 48 c1 [ 79.304446][ T5612] RSP: 0018:ffffc900052bf7c0 EFLAGS: 00010293 [ 79.310668][ T5612] RAX: ffffffff83d4b072 RBX: 0000000000000001 RCX: ffff8880208057c0 [ 79.319966][ T5612] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 79.328146][ T5612] RBP: ffff888076788000 R08: ffffffff83d4ad67 R09: ffffed100e779229 [ 79.336719][ T5612] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff1100e72753a [ 79.345800][ T5612] R13: ffff88807393a9d0 R14: ffff888076788bf0 R15: ffff888073bc9140 [ 79.354206][ T5612] FS: 00007f70cd5da700(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 79.363282][ T5612] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 79.369948][ T5612] CR2: 00007efda0b52300 CR3: 000000001d05c000 CR4: 00000000003506f0 [ 79.378434][ T5612] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 79.386694][ T5612] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 79.395120][ T5612] Kernel panic - not syncing: Fatal exception [ 79.401354][ T5612] Kernel Offset: disabled [ 79.405674][ T5612] Rebooting in 86400 seconds..