[ 76.702645][ T2106] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.187' (ED25519) to the list of known hosts. 2023/07/30 02:49:46 ignoring optional flag "sandboxArg"="0" 2023/07/30 02:49:46 parsed 1 programs 2023/07/30 02:49:46 executed programs: 0 [ 77.772706][ T5016] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.780999][ T5016] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.789433][ T5016] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.799784][ T5016] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.807292][ T5016] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.815327][ T5016] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.913160][ T5367] chnl_net:caif_netlink_parms(): no params data found [ 77.953056][ T5367] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.960333][ T5367] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.967625][ T5367] bridge_slave_0: entered allmulticast mode [ 77.974534][ T5367] bridge_slave_0: entered promiscuous mode [ 77.982551][ T5367] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.991020][ T5367] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.998215][ T5367] bridge_slave_1: entered allmulticast mode [ 78.005068][ T5367] bridge_slave_1: entered promiscuous mode [ 78.026318][ T5367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.037578][ T5367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.062040][ T5367] team0: Port device team_slave_0 added [ 78.069933][ T5367] team0: Port device team_slave_1 added [ 78.087330][ T5367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.094391][ T5367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.121255][ T5367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.133873][ T5367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.141293][ T5367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.167616][ T5367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.196611][ T5367] hsr_slave_0: entered promiscuous mode [ 78.203735][ T5367] hsr_slave_1: entered promiscuous mode [ 78.828051][ T5367] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.841602][ T5367] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.852085][ T5367] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.862628][ T5367] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.890846][ T5367] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.898092][ T5367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.906121][ T5367] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.913489][ T5367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.943157][ T5033] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.953035][ T5033] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.002131][ T5367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.023378][ T5367] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.034806][ T5033] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.042132][ T5033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.061171][ T5033] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.068405][ T5033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.108466][ T5367] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 79.123086][ T5367] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.306875][ T5367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.353523][ T5367] veth0_vlan: entered promiscuous mode [ 79.365952][ T5367] veth1_vlan: entered promiscuous mode [ 79.397366][ T5367] veth0_macvtap: entered promiscuous mode [ 79.409098][ T5367] veth1_macvtap: entered promiscuous mode [ 79.431976][ T5367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.451258][ T5367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.464117][ T5367] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.475238][ T5367] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.484423][ T5367] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.494296][ T5367] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.572838][ T917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.592362][ T917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.623733][ T5033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.632736][ T5033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.901238][ T5016] Bluetooth: hci0: command 0x0409 tx timeout [ 80.112747][ T5429] loop0: detected capacity change from 0 to 32768 [ 80.132026][ T5429] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 80.141696][ T5429] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 80.163429][ T5429] gfs2: fsid=syz:syz.0: journal 0 mapped with 4 extents in 0ms [ 80.175347][ T5033] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 80.183975][ T5033] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 80.301910][ T5033] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 117ms [ 80.313589][ T5033] gfs2: fsid=syz:syz.0: jid=0: Done [ 80.321328][ T5429] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 80.574688][ T5429] gfs2: fsid=syz:syz.0: found 1 quota changes [ 80.644968][ T5367] syz-executor.0: attempt to access beyond end of device [ 80.644968][ T5367] loop0: rw=1, sector=131324, nr_sectors = 4 limit=32768 [ 80.662110][ T5367] gfs2: fsid=syz:syz.0: Error 10 writing to journal, jid=0 [ 80.671568][ T5367] gfs2: fsid=syz:syz.0: fatal: I/O error(s) [ 80.677876][ T5367] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 80.686369][ T5367] BUG: sleeping function called from invalid context at kernel/sched/completion.c:101 [ 80.697664][ T5367] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5367, name: syz-executor.0 [ 80.707503][ T5367] preempt_count: 1, expected: 0 [ 80.712562][ T5367] RCU nest depth: 0, expected: 0 [ 80.717694][ T5367] 5 locks held by syz-executor.0/5367: [ 80.723349][ T5367] #0: ffff88814a75a0e0 (&type->s_umount_key#51){+.+.}-{3:3}, at: deactivate_super+0xad/0xf0 [ 80.733678][ T5367] #1: ffff88802403cb78 (&sdp->sd_quota_sync_mutex){+.+.}-{3:3}, at: gfs2_quota_sync+0xa1/0x700 [ 80.744378][ T5367] #2: ffff88802403d060 (&sdp->sd_log_flush_lock){++++}-{3:3}, at: gfs2_log_flush+0x105/0x25f0 [ 80.754886][ T5367] #3: ffff88802403ce88 (&sdp->sd_log_lock){+.+.}-{2:2}, at: gfs2_flush_revokes+0x53/0x90 [ 80.765313][ T5367] #4: ffff88802403d248 (&sdp->sd_freeze_mutex){+.+.}-{3:3}, at: gfs2_withdraw+0x477/0x11e0 [ 80.776159][ T5367] Preemption disabled at: [ 80.776174][ T5367] [<0000000000000000>] 0x0 [ 80.785367][ T5367] CPU: 0 PID: 5367 Comm: syz-executor.0 Not tainted 6.5.0-rc3-syzkaller-00283-g12214540ad87 #0 [ 80.795811][ T5367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 80.805892][ T5367] Call Trace: [ 80.809211][ T5367] [ 80.812260][ T5367] dump_stack_lvl+0x1e7/0x2d0 [ 80.816993][ T5367] ? nf_tcp_handle_invalid+0x650/0x650 [ 80.822500][ T5367] ? panic+0x770/0x770 [ 80.826929][ T5367] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 80.833045][ T5367] __might_resched+0x5cf/0x780 [ 80.837856][ T5367] ? __might_sleep+0xc0/0xc0 [ 80.842554][ T5367] ? cpu_curr_snapshot+0xd0/0xd0 [ 80.847507][ T5367] ? console_unlock+0x1ea/0x270 [ 80.852544][ T5367] wait_for_completion+0x1b/0x60 [ 80.857683][ T5367] kthread_stop+0x18e/0x5a0 [ 80.862220][ T5367] gfs2_make_fs_ro+0x183/0x680 [ 80.866990][ T5367] ? read_lock_is_recursive+0x20/0x20 [ 80.872631][ T5367] ? gfs2_dinode_out+0xaf0/0xaf0 [ 80.877728][ T5367] ? __mutex_trylock_common+0x182/0x2e0 [ 80.883288][ T5367] ? __lock_acquire+0x7f70/0x7f70 [ 80.888314][ T5367] ? trace_raw_output_contention_end+0xd0/0xd0 [ 80.894555][ T5367] ? do_raw_spin_unlock+0x13b/0x8b0 [ 80.899762][ T5367] gfs2_withdraw+0x48a/0x11e0 [ 80.904626][ T5367] gfs2_ail1_empty+0x7d0/0x860 [ 80.909476][ T5367] ? __rwlock_init+0x150/0x150 [ 80.914409][ T5367] ? gfs2_log_flush+0xc93/0x25f0 [ 80.919431][ T5367] ? __lock_acquire+0x7f70/0x7f70 [ 80.924716][ T5367] gfs2_flush_revokes+0x5e/0x90 [ 80.929563][ T5367] revoke_lo_before_commit+0x2c/0x5f0 [ 80.935022][ T5367] ? do_raw_spin_unlock+0x13b/0x8b0 [ 80.940226][ T5367] ? buf_lo_after_scan+0x1e0/0x1e0 [ 80.945337][ T5367] gfs2_log_flush+0xc93/0x25f0 [ 80.950373][ T5367] ? gfs2_ail_empty_tr+0x310/0x310 [ 80.955532][ T5367] ? __kmem_cache_free+0x25f/0x3b0 [ 80.960746][ T5367] ? do_sync+0x9e8/0xc80 [ 80.964997][ T5367] do_sync+0xa35/0xc80 [ 80.969073][ T5367] ? slot_put+0x210/0x210 [ 80.973601][ T5367] ? do_raw_spin_lock+0x14d/0x3a0 [ 80.978631][ T5367] ? do_raw_spin_unlock+0x13b/0x8b0 [ 80.983827][ T5367] ? qd_check_sync+0xba/0x3f0 [ 80.988499][ T5367] gfs2_quota_sync+0x30e/0x700 [ 80.993271][ T5367] ? get_nr_dirty_inodes+0x1c7/0x210 [ 80.998642][ T5367] gfs2_sync_fs+0x4d/0xb0 [ 81.002978][ T5367] sync_filesystem+0xec/0x220 [ 81.007829][ T5367] generic_shutdown_super+0x6f/0x340 [ 81.013112][ T5367] kill_block_super+0x68/0xa0 [ 81.017872][ T5367] deactivate_locked_super+0xa4/0x110 [ 81.023357][ T5367] cleanup_mnt+0x426/0x4c0 [ 81.027770][ T5367] ? _raw_spin_unlock_irq+0x23/0x50 [ 81.033054][ T5367] task_work_run+0x24a/0x300 [ 81.037823][ T5367] ? task_work_cancel+0x2b0/0x2b0 [ 81.043050][ T5367] ? exit_to_user_mode_loop+0x39/0x100 [ 81.048594][ T5367] exit_to_user_mode_loop+0xd9/0x100 [ 81.053958][ T5367] exit_to_user_mode_prepare+0xb1/0x140 [ 81.059809][ T5367] syscall_exit_to_user_mode+0x64/0x280 [ 81.065369][ T5367] do_syscall_64+0x4d/0xc0 [ 81.070006][ T5367] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 81.075996][ T5367] RIP: 0033:0x7f5eeb07dbc7 [ 81.080755][ T5367] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 81.101938][ T5367] RSP: 002b:00007ffcd752b2f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 81.111502][ T5367] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f5eeb07dbc7 [ 81.120035][ T5367] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffcd752b3b0 [ 81.128026][ T5367] RBP: 00007ffcd752b3b0 R08: 0000000000000000 R09: 0000000000000000 [ 81.136455][ T5367] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcd752c470 [ 81.144648][ T5367] R13: 00007f5eeb0d7aa2 R14: 0000000000013735 R15: 0000000000000001 [ 81.152713][ T5367] [ 81.156675][ T5367] BUG: scheduling while atomic: syz-executor.0/5367/0x00000002 [ 81.164548][ T5367] 5 locks held by syz-executor.0/5367: [ 81.170102][ T5367] #0: ffff88814a75a0e0 (&type->s_umount_key#51){+.+.}-{3:3}, at: deactivate_super+0xad/0xf0 [ 81.180929][ T5367] #1: ffff88802403cb78 (&sdp->sd_quota_sync_mutex){+.+.}-{3:3}, at: gfs2_quota_sync+0xa1/0x700 [ 81.191620][ T5367] #2: ffff88802403d060 (&sdp->sd_log_flush_lock){++++}-{3:3}, at: gfs2_log_flush+0x105/0x25f0 [ 81.202475][ T5367] #3: ffff88802403ce88 (&sdp->sd_log_lock){+.+.}-{2:2}, at: gfs2_flush_revokes+0x53/0x90 [ 81.212626][ T5367] #4: ffff88802403d248 (&sdp->sd_freeze_mutex){+.+.}-{3:3}, at: gfs2_withdraw+0x477/0x11e0 [ 81.222856][ T5367] Modules linked in: [ 81.226781][ T5367] Preemption disabled at: [ 81.226796][ T5367] [<0000000000000000>] 0x0 [ 81.235754][ T5367] Kernel panic - not syncing: scheduling while atomic: panic_on_warn set ... [ 81.244713][ T5367] CPU: 0 PID: 5367 Comm: syz-executor.0 Tainted: G W 6.5.0-rc3-syzkaller-00283-g12214540ad87 #0 [ 81.256970][ T5367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 81.267140][ T5367] Call Trace: [ 81.270446][ T5367] [ 81.273505][ T5367] dump_stack_lvl+0x1e7/0x2d0 [ 81.278214][ T5367] ? nf_tcp_handle_invalid+0x650/0x650 [ 81.283791][ T5367] ? panic+0x770/0x770 [ 81.287998][ T5367] ? vscnprintf+0x5d/0x80 [ 81.292451][ T5367] panic+0x30f/0x770 [ 81.296355][ T5367] ? check_panic_on_warn+0x21/0xa0 [ 81.301551][ T5367] ? __memcpy_flushcache+0x2b0/0x2b0 [ 81.306923][ T5367] ? __wake_up_klogd+0xcc/0x100 [ 81.311781][ T5367] check_panic_on_warn+0x82/0xa0 [ 81.316711][ T5367] __schedule_bug+0x1be/0x220 [ 81.321393][ T5367] ? raw_spin_rq_unlock_irq+0x90/0x90 [ 81.326849][ T5367] __schedule+0x193e/0x48f0 [ 81.331382][ T5367] ? trace_pelt_se_tp+0x3d/0x110 [ 81.336624][ T5367] ? verify_lock_unused+0x140/0x140 [ 81.341847][ T5367] ? release_firmware_map_entry+0x190/0x190 [ 81.347773][ T5367] ? enqueue_entity+0xb31/0x1790 [ 81.352723][ T5367] schedule+0xc3/0x180 [ 81.356786][ T5367] schedule_timeout+0xb0/0x310 [ 81.361744][ T5367] ? console_conditional_schedule+0x40/0x40 [ 81.367745][ T5367] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 81.373929][ T5367] ? _raw_spin_unlock_irq+0x23/0x50 [ 81.379126][ T5367] ? lockdep_hardirqs_on+0x98/0x140 [ 81.384324][ T5367] do_wait_for_common+0x449/0x5f0 [ 81.389391][ T5367] ? console_conditional_schedule+0x40/0x40 [ 81.395280][ T5367] ? bit_wait_io_timeout+0x120/0x120 [ 81.400733][ T5367] ? _raw_spin_lock_irq+0xdf/0x120 [ 81.405938][ T5367] ? console_unlock+0x1ea/0x270 [ 81.410881][ T5367] wait_for_completion+0x4a/0x60 [ 81.415816][ T5367] kthread_stop+0x18e/0x5a0 [ 81.420317][ T5367] gfs2_make_fs_ro+0x3b4/0x680 [ 81.425121][ T5367] ? read_lock_is_recursive+0x20/0x20 [ 81.430495][ T5367] ? gfs2_dinode_out+0xaf0/0xaf0 [ 81.435443][ T5367] ? __mutex_trylock_common+0x182/0x2e0 [ 81.441190][ T5367] ? __lock_acquire+0x7f70/0x7f70 [ 81.446305][ T5367] ? trace_raw_output_contention_end+0xd0/0xd0 [ 81.452562][ T5367] ? do_raw_spin_unlock+0x13b/0x8b0 [ 81.457961][ T5367] gfs2_withdraw+0x48a/0x11e0 [ 81.462742][ T5367] gfs2_ail1_empty+0x7d0/0x860 [ 81.467519][ T5367] ? __rwlock_init+0x150/0x150 [ 81.472370][ T5367] ? gfs2_log_flush+0xc93/0x25f0 [ 81.477390][ T5367] ? __lock_acquire+0x7f70/0x7f70 [ 81.482411][ T5367] gfs2_flush_revokes+0x5e/0x90 [ 81.487461][ T5367] revoke_lo_before_commit+0x2c/0x5f0 [ 81.493035][ T5367] ? do_raw_spin_unlock+0x13b/0x8b0 [ 81.498353][ T5367] ? buf_lo_after_scan+0x1e0/0x1e0 [ 81.503473][ T5367] gfs2_log_flush+0xc93/0x25f0 [ 81.508342][ T5367] ? gfs2_ail_empty_tr+0x310/0x310 [ 81.513824][ T5367] ? __kmem_cache_free+0x25f/0x3b0 [ 81.518952][ T5367] ? do_sync+0x9e8/0xc80 [ 81.523288][ T5367] do_sync+0xa35/0xc80 [ 81.527649][ T5367] ? slot_put+0x210/0x210 [ 81.532236][ T5367] ? do_raw_spin_lock+0x14d/0x3a0 [ 81.537266][ T5367] ? do_raw_spin_unlock+0x13b/0x8b0 [ 81.542466][ T5367] ? qd_check_sync+0xba/0x3f0 [ 81.547632][ T5367] gfs2_quota_sync+0x30e/0x700 [ 81.552394][ T5367] ? get_nr_dirty_inodes+0x1c7/0x210 [ 81.557681][ T5367] gfs2_sync_fs+0x4d/0xb0 [ 81.562008][ T5367] sync_filesystem+0xec/0x220 [ 81.566685][ T5367] generic_shutdown_super+0x6f/0x340 [ 81.571970][ T5367] kill_block_super+0x68/0xa0 [ 81.576647][ T5367] deactivate_locked_super+0xa4/0x110 [ 81.582024][ T5367] cleanup_mnt+0x426/0x4c0 [ 81.586441][ T5367] ? _raw_spin_unlock_irq+0x23/0x50 [ 81.591640][ T5367] task_work_run+0x24a/0x300 [ 81.596231][ T5367] ? task_work_cancel+0x2b0/0x2b0 [ 81.601343][ T5367] ? exit_to_user_mode_loop+0x39/0x100 [ 81.606795][ T5367] exit_to_user_mode_loop+0xd9/0x100 [ 81.612336][ T5367] exit_to_user_mode_prepare+0xb1/0x140 [ 81.618139][ T5367] syscall_exit_to_user_mode+0x64/0x280 [ 81.624127][ T5367] do_syscall_64+0x4d/0xc0 [ 81.628543][ T5367] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 81.634693][ T5367] RIP: 0033:0x7f5eeb07dbc7 [ 81.639123][ T5367] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 81.659524][ T5367] RSP: 002b:00007ffcd752b2f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 81.668122][ T5367] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f5eeb07dbc7 [ 81.676361][ T5367] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffcd752b3b0 [ 81.684597][ T5367] RBP: 00007ffcd752b3b0 R08: 0000000000000000 R09: 0000000000000000 [ 81.692822][ T5367] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcd752c470 [ 81.700788][ T5367] R13: 00007f5eeb0d7aa2 R14: 0000000000013735 R15: 0000000000000001 [ 81.710068][ T5367] [ 81.713298][ T5367] Kernel Offset: disabled [ 81.717734][ T5367] Rebooting in 86400 seconds..