Warning: Permanently added '10.128.0.46' (ED25519) to the list of known hosts. 2023/12/13 11:55:18 ignoring optional flag "sandboxArg"="0" 2023/12/13 11:55:18 parsed 1 programs 2023/12/13 11:55:19 executed programs: 0 [ 65.070200][ T5342] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 65.113724][ T4404] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.121276][ T4404] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.129725][ T4404] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.137543][ T4404] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.145511][ T4404] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 65.153987][ T4404] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.219505][ T5349] chnl_net:caif_netlink_parms(): no params data found [ 65.247083][ T5349] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.254675][ T5349] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.262139][ T5349] bridge_slave_0: entered allmulticast mode [ 65.269080][ T5349] bridge_slave_0: entered promiscuous mode [ 65.276659][ T5349] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.283857][ T5349] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.291280][ T5349] bridge_slave_1: entered allmulticast mode [ 65.297646][ T5349] bridge_slave_1: entered promiscuous mode [ 65.312512][ T5349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.323110][ T5349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.340987][ T5349] team0: Port device team_slave_0 added [ 65.347823][ T5349] team0: Port device team_slave_1 added [ 65.361359][ T5349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.368305][ T5349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.394284][ T5349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.406739][ T5349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.413779][ T5349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.439809][ T5349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.461569][ T5349] hsr_slave_0: entered promiscuous mode [ 65.467738][ T5349] hsr_slave_1: entered promiscuous mode [ 66.075727][ T5349] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.090795][ T5349] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.099642][ T5349] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.108261][ T5349] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.129558][ T5349] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.136646][ T5349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.144006][ T5349] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.151112][ T5349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.189342][ T5349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.201944][ T5010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.211426][ T5010] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.225010][ T5010] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.234835][ T5010] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 66.246991][ T5349] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.257220][ T5010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.266697][ T5010] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.276003][ T5010] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.283116][ T5010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.301293][ T5393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.310128][ T5393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.318704][ T5393] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.325767][ T5393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.333603][ T5393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.342930][ T5393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.351733][ T5393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.360534][ T5393] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.376361][ T5349] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.392414][ T5349] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.407746][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.416834][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.427367][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.436903][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.445748][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.455383][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.465218][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.477003][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.588275][ T5349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.597486][ T5010] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.606239][ T5010] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.630221][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.639095][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.647837][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.656111][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.664882][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.673008][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.687956][ T5349] veth0_vlan: entered promiscuous mode [ 66.699385][ T5349] veth1_vlan: entered promiscuous mode [ 66.716565][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.726020][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.735530][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.745654][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.756265][ T5349] veth0_macvtap: entered promiscuous mode [ 66.767055][ T5349] veth1_macvtap: entered promiscuous mode [ 66.780421][ T5349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.787688][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.796080][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.805004][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.813660][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.824458][ T5349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.833611][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.842711][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.853583][ T5349] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.863200][ T5349] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.872111][ T5349] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.881424][ T5349] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.934042][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.953055][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.971845][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.981591][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.990999][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.001958][ T5010] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.048021][ T5431] loop0: detected capacity change from 0 to 2048 [ 67.103709][ T5431] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.121242][ T26] audit: type=1804 audit(1702468521.453:2): pid=5431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2651994735/syzkaller.AazMce/0/bus/bus" dev="loop0" ino=18 res=1 errno=0 [ 67.121864][ T5431] len: 0, iis: 60, ext4_create_inline_data [ 67.154841][ T5431] iis: 60, ext4_find_inline_data_nolock [ 67.162004][ T5431] pos: 0, len: 1, iis: 60, ext4_write_inline_data [ 67.170742][ T5431] iis: 60, ext4_find_inline_data_nolock [ 67.176493][ T5431] pos: 1, len: 1, iis: 60, ext4_write_inline_data [ 67.182607][ T26] audit: type=1804 audit(1702468521.453:3): pid=5431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2651994735/syzkaller.AazMce/0/bus/bus" dev="loop0" ino=18 res=1 errno=0 [ 67.184597][ T5431] iis: 60, ext4_find_inline_data_nolock [ 67.209179][ T4997] Bluetooth: hci0: command 0x0409 tx timeout [ 67.224065][ T5431] pos: 2, len: 1, iis: 60, ext4_write_inline_data [ 67.233345][ T5431] iis: 60, ext4_find_inline_data_nolock [ 67.238469][ T26] audit: type=1804 audit(1702468521.563:4): pid=5443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2651994735/syzkaller.AazMce/0/bus/bus" dev="loop0" ino=18 res=1 errno=0 [ 67.241175][ T5431] pos: 3, len: 1, iis: 60, ext4_write_inline_data [ 67.272580][ T5443] iis: 0, ext4_destroy_inline_data_nolock [ 67.279938][ T5443] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 67.300045][ T5431] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 67.312936][ T5443] len: 0, iis: 60, ext4_create_inline_data [ 67.318830][ T5443] pos: 0, len: 60, iis: 60, ext4_write_inline_data [ 67.325450][ T5443] iis: 0, ext4_destroy_inline_data_nolock [ 67.328472][ T5431] EXT4-fs (loop0): This should not happen!! Data will be lost [ 67.328472][ T5431] [ 67.341037][ T5443] len: 0, iis: 60, ext4_create_inline_data [ 67.341071][ T5443] pos: 0, len: 60, iis: 60, ext4_write_inline_data [ 67.354966][ T5431] EXT4-fs (loop0): Total free blocks count 0 [ 67.361804][ T5431] EXT4-fs (loop0): Free/Dirty block details [ 67.367751][ T5431] EXT4-fs (loop0): free_blocks=2415919104 [ 67.373612][ T5431] EXT4-fs (loop0): dirty_blocks=16 [ 67.378888][ T5431] EXT4-fs (loop0): Block reservation details [ 67.384920][ T5431] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 67.400587][ T10] ------------[ cut here ]------------ [ 67.406172][ T10] kernel BUG at fs/ext4/inode.c:2587! [ 67.412822][ T10] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 67.418897][ T10] CPU: 0 PID: 10 Comm: kworker/u4:0 Not tainted 6.4.0-rc3-syzkaller-dirty #0 [ 67.427672][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 67.437828][ T10] Workqueue: writeback wb_workfn (flush-7:0) [ 67.443805][ T10] RIP: 0010:ext4_do_writepages+0x27a1/0x34a0 [ 67.449774][ T10] Code: fc ff df 44 89 64 24 18 48 c1 ea 03 80 3c 02 00 0f 84 bc ed ff ff 48 8b 7c 24 08 e8 49 aa a8 ff e9 ad ed ff ff e8 ef 2f 55 ff <0f> 0b e8 e8 2f 55 ff 48 8b 84 24 b0 00 00 00 48 8d 78 40 48 b8 00 [ 67.469375][ T10] RSP: 0018:ffffc900000f73e8 EFLAGS: 00010293 [ 67.475529][ T10] RAX: 0000000000000000 RBX: ffff88807592bc50 RCX: 0000000000000000 [ 67.483500][ T10] RDX: ffff888016a41dc0 RSI: ffffffff82306c61 RDI: 0000000000000007 [ 67.491549][ T10] RBP: ffffc900000f75f0 R08: 0000000000000007 R09: 0000000000000000 [ 67.499511][ T10] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 67.507476][ T10] R13: ffff88802aede678 R14: ffff88807592beb0 R15: 7fffffffffffffff [ 67.515440][ T10] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 67.524362][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 67.530933][ T10] CR2: 0000561e569a2950 CR3: 000000002a00e000 CR4: 0000000000350ef0 [ 67.538894][ T10] Call Trace: [ 67.542195][ T10] [ 67.545119][ T10] ? __bfs+0x2f8/0x660 [ 67.549188][ T10] ? save_trace+0xb30/0xb30 [ 67.553690][ T10] ? __ext4_mark_inode_dirty+0x800/0x800 [ 67.559318][ T10] ext4_writepages+0x30b/0x780 [ 67.564077][ T10] ? ext4_normal_submit_inode_data_buffers+0x1a0/0x1a0 [ 67.570917][ T10] ? __lock_acquire+0x239b/0x5cf0 [ 67.575964][ T10] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 67.581977][ T10] ? ext4_normal_submit_inode_data_buffers+0x1a0/0x1a0 [ 67.588824][ T10] do_writepages+0x1b4/0x690 [ 67.593408][ T10] ? writeback_set_ratelimit+0x140/0x140 [ 67.599026][ T10] ? writeback_sb_inodes+0x344/0x1010 [ 67.604390][ T10] ? find_held_lock+0x2d/0x110 [ 67.609143][ T10] ? wbc_attach_and_unlock_inode+0x568/0x910 [ 67.615115][ T10] ? reacquire_held_locks+0x4b0/0x4b0 [ 67.620479][ T10] __writeback_single_inode+0x158/0xe70 [ 67.626018][ T10] ? __mark_inode_dirty+0xd50/0xd50 [ 67.631208][ T10] ? _raw_spin_unlock+0x28/0x40 [ 67.636050][ T10] ? wbc_attach_and_unlock_inode+0x568/0x910 [ 67.642048][ T10] writeback_sb_inodes+0x599/0x1010 [ 67.647253][ T10] ? _raw_spin_unlock+0x28/0x40 [ 67.652100][ T10] ? sync_inode_metadata+0xe0/0xe0 [ 67.657211][ T10] ? rcu_is_watching+0x12/0xb0 [ 67.661969][ T10] ? queue_io+0x3ed/0x4e0 [ 67.666297][ T10] wb_writeback+0x2ca/0xa90 [ 67.670794][ T10] ? __writeback_inodes_wb+0x2d0/0x2d0 [ 67.676245][ T10] ? reacquire_held_locks+0x4b0/0x4b0 [ 67.681612][ T10] ? mark_held_locks+0x9f/0xe0 [ 67.686366][ T10] wb_workfn+0x29c/0xfd0 [ 67.690604][ T10] ? inode_wait_for_writeback+0x30/0x30 [ 67.696142][ T10] ? lock_sync+0x190/0x190 [ 67.700550][ T10] ? reacquire_held_locks+0x4b0/0x4b0 [ 67.705924][ T10] ? spin_bug+0x1d0/0x1d0 [ 67.710260][ T10] process_one_work+0x9f9/0x15f0 [ 67.715202][ T10] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 67.720569][ T10] ? spin_bug+0x1d0/0x1d0 [ 67.724895][ T10] worker_thread+0x687/0x1110 [ 67.729574][ T10] ? process_one_work+0x15f0/0x15f0 [ 67.734764][ T10] kthread+0x33a/0x430 [ 67.738821][ T10] ? kthread_complete_and_exit+0x40/0x40 [ 67.744446][ T10] ret_from_fork+0x1f/0x30 [ 67.748859][ T10] [ 67.751862][ T10] Modules linked in: [ 67.765642][ T10] ---[ end trace 0000000000000000 ]--- [ 67.771383][ T10] RIP: 0010:ext4_do_writepages+0x27a1/0x34a0 [ 67.777389][ T10] Code: fc ff df 44 89 64 24 18 48 c1 ea 03 80 3c 02 00 0f 84 bc ed ff ff 48 8b 7c 24 08 e8 49 aa a8 ff e9 ad ed ff ff e8 ef 2f 55 ff <0f> 0b e8 e8 2f 55 ff 48 8b 84 24 b0 00 00 00 48 8d 78 40 48 b8 00 [ 67.797434][ T10] RSP: 0018:ffffc900000f73e8 EFLAGS: 00010293 [ 67.803859][ T10] RAX: 0000000000000000 RBX: ffff88807592bc50 RCX: 0000000000000000 [ 67.812139][ T10] RDX: ffff888016a41dc0 RSI: ffffffff82306c61 RDI: 0000000000000007 [ 67.821074][ T10] RBP: ffffc900000f75f0 R08: 0000000000000007 R09: 0000000000000000 [ 67.829320][ T10] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 67.837302][ T10] R13: ffff88802aede678 R14: ffff88807592beb0 R15: 7fffffffffffffff [ 67.845350][ T10] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 67.855094][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 67.862091][ T10] CR2: 00007f629e29e378 CR3: 000000000c772000 CR4: 0000000000350ef0 [ 67.870363][ T10] Kernel panic - not syncing: Fatal exception [ 67.876656][ T10] Kernel Offset: disabled [ 67.880970][ T10] Rebooting in 86400 seconds..