Warning: Permanently added '10.128.1.91' (ECDSA) to the list of known hosts. 2023/03/27 11:45:28 ignoring optional flag "sandboxArg"="0" 2023/03/27 11:45:28 parsed 1 programs 2023/03/27 11:45:28 executed programs: 0 [ 65.648569][ T4389] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.657528][ T4389] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.665877][ T4389] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.673718][ T4389] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 65.681380][ T4389] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.775238][ T5533] chnl_net:caif_netlink_parms(): no params data found [ 65.817147][ T5533] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.824488][ T5533] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.832599][ T5533] device bridge_slave_0 entered promiscuous mode [ 65.840783][ T5533] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.847956][ T5533] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.855489][ T5533] device bridge_slave_1 entered promiscuous mode [ 65.870734][ T5533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.881088][ T5533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.898835][ T5533] team0: Port device team_slave_0 added [ 65.905712][ T5533] team0: Port device team_slave_1 added [ 65.919207][ T5533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.926193][ T5533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.952734][ T5533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.964857][ T5533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.972106][ T5533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.998182][ T5533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.020378][ T5533] device hsr_slave_0 entered promiscuous mode [ 66.026890][ T5533] device hsr_slave_1 entered promiscuous mode [ 66.903922][ T5533] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.913072][ T5533] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.922614][ T5533] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.931601][ T5533] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.985719][ T5533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.998439][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.009063][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.020347][ T5533] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.030952][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.040495][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.049264][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.056394][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.076625][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.085127][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.094118][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.102655][ T4394] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.109730][ T4394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.118030][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.126732][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.135825][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.144830][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.154295][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.163516][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.172790][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.185297][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.194935][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.204436][ T5533] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.352608][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.360006][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.371399][ T5533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.389559][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.399548][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.417350][ T5533] device veth0_vlan entered promiscuous mode [ 67.427232][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.436434][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.448983][ T5533] device veth1_vlan entered promiscuous mode [ 67.457375][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.466577][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.474702][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.495599][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.504639][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.513515][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.523698][ T5533] device veth0_macvtap entered promiscuous mode [ 67.534249][ T5533] device veth1_macvtap entered promiscuous mode [ 67.550177][ T5533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.557785][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.566729][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.575237][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.584667][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.597118][ T5533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.606715][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.616248][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.627106][ T5533] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.637121][ T5533] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.646384][ T5533] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.656133][ T5533] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.704289][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.714559][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.725999][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.727222][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.734545][ T4389] Bluetooth: hci0: command 0x0409 tx timeout [ 67.747967][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.756559][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.041597][ T5616] loop0: detected capacity change from 0 to 32768 [ 68.055262][ T5616] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 68.063708][ T5616] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 68.072701][ T5616] sdp->sd_max_height: 6 [ 68.083269][ T5616] ip->i_height: 2 [ 68.088025][ T5616] ip->i_height: 2 [ 68.091825][ T5616] ip->i_height: 2 [ 68.096146][ T5616] ip->i_height: 2 [ 68.099954][ T5616] ip->i_height: 2 [ 68.106275][ T5616] ip->i_height: 2 [ 68.109947][ T5616] ip->i_height: 2 [ 68.114521][ T5616] ip->i_height: 2 [ 68.118177][ T5616] ip->i_height: 2 [ 68.123047][ T5616] ip->i_height: 2 [ 68.126702][ T5616] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 20ms [ 68.138660][ T4394] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 68.146844][ T4394] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 68.154080][ T4394] ip->i_height: 2 [ 68.157894][ T4394] ip->i_height: 2 [ 68.161551][ T4394] ip->i_height: 2 [ 68.166507][ T4394] ip->i_height: 2 [ 68.171218][ T4394] ip->i_height: 2 [ 68.211505][ T4394] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 64ms [ 68.223813][ T4394] gfs2: fsid=syz:syz.0: jid=0: Done [ 68.229678][ T5616] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 68.322763][ T5616] ip->i_height: 1 [ 68.331437][ T5616] ip->i_height: 1 [ 68.341494][ T5616] ip->i_height: 1 [ 68.350825][ T5616] ip->i_height: 1 [ 68.361389][ T5616] ip->i_height: 1 [ 68.370159][ T5616] ip->i_height: 1 [ 68.383096][ T5616] ip->i_height: 1 [ 68.393548][ T5616] ip->i_height: 1 [ 68.402478][ T5616] gfs2: fsid=syz:syz.0: found 1 quota changes, i_ino:2078 [ 68.438841][ T5533] ip->i_height: 1 [ 68.445065][ T5533] buf->di_height: 768 [ 68.449195][ T5533] buf->di_depth: 0 [ 68.457634][ T5533] inode->i_size: 176 [ 68.461592][ T5533] ip->i_height: 9 [ 68.466549][ T5533] lblock:0, height:9, sb_bsize: 4096, heightsize:0,pos:0,size:176 [ 68.475434][ T5533] lblock:0, height:10, sb_bsize: 4096, heightsize:0,pos:0,size:176 [ 68.483554][ T5533] ================================================================================ [ 68.493916][ T5533] UBSAN: array-index-out-of-bounds in fs/gfs2/bmap.c:900:64 [ 68.501211][ T5533] index 11 is out of range for type 'u64 [11]' [ 68.508126][ T5533] CPU: 1 PID: 5533 Comm: syz-executor.0 Not tainted 6.2.0-rc1-syzkaller-dirty #0 [ 68.517248][ T5533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 68.527316][ T5533] Call Trace: [ 68.530601][ T5533] [ 68.533540][ T5533] dump_stack_lvl+0xd1/0x138 [ 68.538146][ T5533] ubsan_epilogue+0xa/0x31 [ 68.542577][ T5533] __ubsan_handle_out_of_bounds.cold+0x62/0x6c [ 68.548750][ T5533] __gfs2_iomap_get.cold+0x32a/0x1259 [ 68.554148][ T5533] ? trunc_start+0x9d0/0x9d0 [ 68.558939][ T5533] ? prb_read_valid+0x79/0xa0 [ 68.563624][ T5533] ? prb_final_commit+0xb0/0xb0 [ 68.568487][ T5533] gfs2_iomap_get+0xb1/0x1e0 [ 68.573093][ T5533] ? gfs2_iomap_begin+0x1750/0x1750 [ 68.578309][ T5533] ? console_unlock+0x19e/0x1f0 [ 68.583185][ T5533] gfs2_block_map+0x232/0xc20 [ 68.587893][ T5533] ? gfs2_iomap_alloc+0x270/0x270 [ 68.592948][ T5533] ? __wait_on_freeing_inode+0x140/0x140 [ 68.598600][ T5533] ? gfs2_inode_refresh+0xb1/0x1070 [ 68.603816][ T5533] gfs2_write_alloc_required+0x3f1/0x510 [ 68.609480][ T5533] ? gfs2_map_journal_extents+0x7e0/0x7e0 [ 68.615221][ T5533] ? from_kgid+0x8b/0xd0 [ 68.619477][ T5533] ? from_kuid_munged+0x130/0x130 [ 68.624519][ T5533] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 68.630430][ T5533] ? from_kqid+0xf6/0x1d0 [ 68.634764][ T5533] ? qid_valid+0x130/0x130 [ 68.639198][ T5533] do_sync+0x707/0xcf0 [ 68.643290][ T5533] ? gfs2_qa_put+0x160/0x160 [ 68.647899][ T5533] ? gfs2_quota_sync+0x3f5/0x660 [ 68.652862][ T5533] ? gfs2_quota_sync+0x2e6/0x660 [ 68.657897][ T5533] ? rwlock_bug.part.0+0x90/0x90 [ 68.662854][ T5533] gfs2_quota_sync+0x2e6/0x660 [ 68.667648][ T5533] gfs2_sync_fs+0x44/0xb0 [ 68.671998][ T5533] ? rgrp_unlock_local+0x20/0x20 [ 68.676949][ T5533] sync_filesystem.part.0+0x75/0x1d0 [ 68.682249][ T5533] sync_filesystem+0x8f/0xc0 [ 68.686852][ T5533] generic_shutdown_super+0x74/0x410 [ 68.692164][ T5533] kill_block_super+0x9b/0xf0 [ 68.696862][ T5533] gfs2_kill_sb+0x108/0x170 [ 68.701379][ T5533] deactivate_locked_super+0x98/0x160 [ 68.706780][ T5533] deactivate_super+0xb1/0xd0 [ 68.711480][ T5533] cleanup_mnt+0x2ae/0x3d0 [ 68.715926][ T5533] task_work_run+0x16f/0x270 [ 68.720543][ T5533] ? task_work_cancel+0x30/0x30 [ 68.725423][ T5533] exit_to_user_mode_prepare+0x23c/0x250 [ 68.731073][ T5533] syscall_exit_to_user_mode+0x1d/0x50 [ 68.736545][ T5533] do_syscall_64+0x46/0xb0 [ 68.740979][ T5533] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 68.746984][ T5533] RIP: 0033:0x7f4b2148d567 [ 68.751415][ T5533] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 68.771051][ T5533] RSP: 002b:00007fff0a9a64f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 68.779489][ T5533] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f4b2148d567 [ 68.787490][ T5533] RDX: 00007fff0a9a65c9 RSI: 000000000000000a RDI: 00007fff0a9a65c0 [ 68.795483][ T5533] RBP: 00007fff0a9a65c0 R08: 00000000ffffffff R09: 00007fff0a9a6390 [ 68.803559][ T5533] R10: 0000555555efb8b3 R11: 0000000000000246 R12: 00007f4b214e6b24 [ 68.811547][ T5533] R13: 00007fff0a9a7680 R14: 0000555555efb810 R15: 00007fff0a9a76c0 [ 68.819556][ T5533] [ 68.840411][ T5533] ================================================================================ [ 68.850702][ T5533] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 68.857918][ T5533] CPU: 1 PID: 5533 Comm: syz-executor.0 Not tainted 6.2.0-rc1-syzkaller-dirty #0 [ 68.867123][ T5533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 68.877190][ T5533] Call Trace: [ 68.880481][ T5533] [ 68.883425][ T5533] dump_stack_lvl+0xd1/0x138 [ 68.888038][ T5533] panic+0x2cc/0x626 [ 68.891949][ T5533] ? panic_print_sys_info.part.0+0x110/0x110 [ 68.897953][ T5533] ? record_print_text.cold+0x16/0x16 [ 68.903361][ T5533] check_panic_on_warn.cold+0x19/0x35 [ 68.908840][ T5533] __ubsan_handle_out_of_bounds.cold+0x62/0x6c [ 68.915015][ T5533] __gfs2_iomap_get.cold+0x32a/0x1259 [ 68.920425][ T5533] ? trunc_start+0x9d0/0x9d0 [ 68.925042][ T5533] ? prb_read_valid+0x79/0xa0 [ 68.929736][ T5533] ? prb_final_commit+0xb0/0xb0 [ 68.934606][ T5533] gfs2_iomap_get+0xb1/0x1e0 [ 68.939218][ T5533] ? gfs2_iomap_begin+0x1750/0x1750 [ 68.944439][ T5533] ? console_unlock+0x19e/0x1f0 [ 68.949327][ T5533] gfs2_block_map+0x232/0xc20 [ 68.954044][ T5533] ? gfs2_iomap_alloc+0x270/0x270 [ 68.959103][ T5533] ? __wait_on_freeing_inode+0x140/0x140 [ 68.964759][ T5533] ? gfs2_inode_refresh+0xb1/0x1070 [ 68.969987][ T5533] gfs2_write_alloc_required+0x3f1/0x510 [ 68.975652][ T5533] ? gfs2_map_journal_extents+0x7e0/0x7e0 [ 68.981405][ T5533] ? from_kgid+0x8b/0xd0 [ 68.985670][ T5533] ? from_kuid_munged+0x130/0x130 [ 68.990719][ T5533] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 68.996640][ T5533] ? from_kqid+0xf6/0x1d0 [ 69.000986][ T5533] ? qid_valid+0x130/0x130 [ 69.005421][ T5533] do_sync+0x707/0xcf0 [ 69.009519][ T5533] ? gfs2_qa_put+0x160/0x160 [ 69.014135][ T5533] ? gfs2_quota_sync+0x3f5/0x660 [ 69.019094][ T5533] ? gfs2_quota_sync+0x2e6/0x660 [ 69.024050][ T5533] ? rwlock_bug.part.0+0x90/0x90 [ 69.029016][ T5533] gfs2_quota_sync+0x2e6/0x660 [ 69.033847][ T5533] gfs2_sync_fs+0x44/0xb0 [ 69.038200][ T5533] ? rgrp_unlock_local+0x20/0x20 [ 69.043162][ T5533] sync_filesystem.part.0+0x75/0x1d0 [ 69.048470][ T5533] sync_filesystem+0x8f/0xc0 [ 69.053086][ T5533] generic_shutdown_super+0x74/0x410 [ 69.058488][ T5533] kill_block_super+0x9b/0xf0 [ 69.063191][ T5533] gfs2_kill_sb+0x108/0x170 [ 69.067802][ T5533] deactivate_locked_super+0x98/0x160 [ 69.073203][ T5533] deactivate_super+0xb1/0xd0 [ 69.077906][ T5533] cleanup_mnt+0x2ae/0x3d0 [ 69.082348][ T5533] task_work_run+0x16f/0x270 [ 69.087055][ T5533] ? task_work_cancel+0x30/0x30 [ 69.091936][ T5533] exit_to_user_mode_prepare+0x23c/0x250 [ 69.097587][ T5533] syscall_exit_to_user_mode+0x1d/0x50 [ 69.103066][ T5533] do_syscall_64+0x46/0xb0 [ 69.107504][ T5533] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 69.113427][ T5533] RIP: 0033:0x7f4b2148d567 [ 69.117859][ T5533] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 69.137494][ T5533] RSP: 002b:00007fff0a9a64f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 69.145931][ T5533] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f4b2148d567 [ 69.153921][ T5533] RDX: 00007fff0a9a65c9 RSI: 000000000000000a RDI: 00007fff0a9a65c0 [ 69.161903][ T5533] RBP: 00007fff0a9a65c0 R08: 00000000ffffffff R09: 00007fff0a9a6390 [ 69.169883][ T5533] R10: 0000555555efb8b3 R11: 0000000000000246 R12: 00007f4b214e6b24 [ 69.177871][ T5533] R13: 00007fff0a9a7680 R14: 0000555555efb810 R15: 00007fff0a9a76c0 [ 69.185866][ T5533] [ 69.189797][ T5533] Kernel Offset: disabled [ 69.194224][ T5533] Rebooting in 86400 seconds..