Warning: Permanently added '10.128.1.35' (ED25519) to the list of known hosts. 2023/10/08 04:27:23 ignoring optional flag "sandboxArg"="0" 2023/10/08 04:27:23 parsed 1 programs 2023/10/08 04:27:23 executed programs: 0 [ 81.380047][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.389110][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.397091][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.404830][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.412632][ T50] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.420785][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.538408][ T5387] chnl_net:caif_netlink_parms(): no params data found [ 81.592409][ T5387] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.600366][ T5387] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.608115][ T5387] bridge_slave_0: entered allmulticast mode [ 81.615165][ T5387] bridge_slave_0: entered promiscuous mode [ 81.623741][ T5387] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.631302][ T5387] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.638707][ T5387] bridge_slave_1: entered allmulticast mode [ 81.645565][ T5387] bridge_slave_1: entered promiscuous mode [ 81.669545][ T5387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.680940][ T5387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.709195][ T5387] team0: Port device team_slave_0 added [ 81.718220][ T5387] team0: Port device team_slave_1 added [ 81.739936][ T5387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.747166][ T5387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.773708][ T5387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.786998][ T5387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.793978][ T5387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.820059][ T5387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.847826][ T779] cfg80211: failed to load regulatory.db [ 81.865402][ T5387] hsr_slave_0: entered promiscuous mode [ 81.871778][ T5387] hsr_slave_1: entered promiscuous mode [ 82.687459][ T5387] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.701621][ T5387] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.712382][ T5387] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.725123][ T5387] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.828909][ T5387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.854421][ T5387] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.869373][ T779] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.876881][ T779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.909901][ T779] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.917415][ T779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.100332][ T5387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.151408][ T5387] veth0_vlan: entered promiscuous mode [ 83.168771][ T5387] veth1_vlan: entered promiscuous mode [ 83.205570][ T5387] veth0_macvtap: entered promiscuous mode [ 83.219684][ T5387] veth1_macvtap: entered promiscuous mode [ 83.241390][ T5387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.259352][ T5387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.272360][ T5387] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.283472][ T5387] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.293711][ T5387] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.303657][ T5387] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.391804][ T779] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.414320][ T779] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.449078][ T4438] Bluetooth: hci0: command 0x0409 tx timeout [ 83.453175][ T779] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.465231][ T779] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.004639][ T5452] loop0: detected capacity change from 0 to 32768 [ 84.024780][ T5452] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 84.034591][ T5452] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 84.064002][ T5452] gfs2: fsid=syz:syz.0: journal 0 mapped with 4 extents in 0ms [ 84.077975][ T779] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 84.085130][ T779] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 84.202927][ T779] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 117ms [ 84.218143][ T779] gfs2: fsid=syz:syz.0: jid=0: Done [ 84.224504][ T5452] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 84.561575][ T5452] gfs2: fsid=syz:syz.0: found 1 quota changes [ 84.615032][ T5387] syz-executor.0: attempt to access beyond end of device [ 84.615032][ T5387] loop0: rw=1, sector=131324, nr_sectors = 4 limit=32768 [ 84.632700][ T5387] gfs2: fsid=syz:syz.0: Error 10 writing to journal, jid=0 [ 84.642373][ T5387] gfs2: fsid=syz:syz.0: fatal: I/O error(s) [ 84.649042][ T5387] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 84.657478][ T5387] BUG: sleeping function called from invalid context at fs/gfs2/util.c:159 [ 84.666957][ T5387] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5387, name: syz-executor.0 [ 84.676611][ T5387] preempt_count: 1, expected: 0 [ 84.681488][ T5387] RCU nest depth: 0, expected: 0 [ 84.686739][ T5387] 5 locks held by syz-executor.0/5387: [ 84.693622][ T5387] #0: ffff888028ee80e0 (&type->s_umount_key#54){+.+.}-{3:3}, at: deactivate_super+0xad/0xf0 [ 84.704801][ T5387] #1: ffff88802894cb78 (&sdp->sd_quota_sync_mutex){+.+.}-{3:3}, at: gfs2_quota_sync+0x1ba/0x590 [ 84.715798][ T5387] #2: ffff88802894d060 (&sdp->sd_log_flush_lock){++++}-{3:3}, at: gfs2_log_flush+0x105/0x25f0 [ 84.728626][ T5387] #3: ffff88802894ce88 (&sdp->sd_log_lock){+.+.}-{2:2}, at: gfs2_flush_revokes+0x53/0x90 [ 84.740464][ T5387] #4: ffff88802894d248 (&sdp->sd_freeze_mutex){+.+.}-{3:3}, at: gfs2_withdraw+0x498/0x1470 [ 84.751364][ T5387] Preemption disabled at: [ 84.751380][ T5387] [<0000000000000000>] 0x0 [ 84.760359][ T5387] CPU: 0 PID: 5387 Comm: syz-executor.0 Not tainted 6.6.0-rc4-syzkaller-00284-gb9ddbb0cde2a #0 [ 84.771061][ T5387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 84.781267][ T5387] Call Trace: [ 84.784682][ T5387] [ 84.787704][ T5387] dump_stack_lvl+0x1e7/0x2d0 [ 84.792388][ T5387] ? nf_tcp_handle_invalid+0x650/0x650 [ 84.797882][ T5387] ? panic+0x770/0x770 [ 84.801965][ T5387] __might_resched+0x5cf/0x780 [ 84.806820][ T5387] ? __might_sleep+0xc0/0xc0 [ 84.811588][ T5387] ? do_raw_spin_unlock+0x13b/0x8b0 [ 84.816921][ T5387] gfs2_withdraw+0x4e8/0x1470 [ 84.821872][ T5387] ? gfs2_lm+0x240/0x240 [ 84.826219][ T5387] ? gfs2_freeze_unlock+0x60/0x60 [ 84.831634][ T5387] ? do_raw_spin_unlock+0x13b/0x8b0 [ 84.837113][ T5387] ? read_lock_is_recursive+0x20/0x20 [ 84.842679][ T5387] gfs2_ail1_empty+0x7d0/0x860 [ 84.847714][ T5387] ? __rwlock_init+0x150/0x150 [ 84.852487][ T5387] ? gfs2_log_flush+0xc93/0x25f0 [ 84.857611][ T5387] ? __lock_acquire+0x7f70/0x7f70 [ 84.862810][ T5387] gfs2_flush_revokes+0x5e/0x90 [ 84.867653][ T5387] revoke_lo_before_commit+0x2c/0x5f0 [ 84.873172][ T5387] ? do_raw_spin_unlock+0x13b/0x8b0 [ 84.878665][ T5387] ? buf_lo_after_scan+0x1e0/0x1e0 [ 84.883972][ T5387] gfs2_log_flush+0xc93/0x25f0 [ 84.889031][ T5387] ? gfs2_ail_empty_tr+0x310/0x310 [ 84.894165][ T5387] ? __kmem_cache_free+0x25f/0x3b0 [ 84.899269][ T5387] ? do_sync+0x9d6/0xec0 [ 84.903682][ T5387] do_sync+0xa30/0xec0 [ 84.907755][ T5387] ? qd_check_sync+0x3f0/0x3f0 [ 84.912788][ T5387] ? do_raw_spin_lock+0x14d/0x3a0 [ 84.917824][ T5387] ? do_raw_spin_unlock+0x13b/0x8b0 [ 84.923065][ T5387] ? qd_check_sync+0xba/0x3f0 [ 84.927903][ T5387] gfs2_quota_sync+0x3c8/0x590 [ 84.932731][ T5387] gfs2_sync_fs+0x4d/0xb0 [ 84.937070][ T5387] sync_filesystem+0xec/0x220 [ 84.941831][ T5387] generic_shutdown_super+0x72/0x2c0 [ 84.947120][ T5387] kill_block_super+0x41/0x70 [ 84.951966][ T5387] deactivate_locked_super+0xa4/0x110 [ 84.957334][ T5387] cleanup_mnt+0x426/0x4c0 [ 84.961832][ T5387] ? _raw_spin_unlock_irq+0x23/0x50 [ 84.967131][ T5387] task_work_run+0x24a/0x300 [ 84.971720][ T5387] ? task_work_cancel+0x2b0/0x2b0 [ 84.976830][ T5387] ? exit_to_user_mode_loop+0x39/0x100 [ 84.982400][ T5387] exit_to_user_mode_loop+0xde/0x100 [ 84.988029][ T5387] exit_to_user_mode_prepare+0xb1/0x140 [ 84.993570][ T5387] syscall_exit_to_user_mode+0x64/0x280 [ 84.999118][ T5387] do_syscall_64+0x4d/0xc0 [ 85.003553][ T5387] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 85.010231][ T5387] RIP: 0033:0x7f0357c7dbc7 [ 85.014738][ T5387] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 85.034517][ T5387] RSP: 002b:00007ffe07e60a78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 85.043369][ T5387] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f0357c7dbc7 [ 85.051418][ T5387] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffe07e60b30 [ 85.059556][ T5387] RBP: 00007ffe07e60b30 R08: 0000000000000000 R09: 0000000000000000 [ 85.067615][ T5387] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe07e61bf0 [ 85.075873][ T5387] R13: 00007f0357cd7aa2 R14: 0000000000014613 R15: 0000000000000001 [ 85.084130][ T5387] [ 85.089865][ T5387] BUG: scheduling while atomic: syz-executor.0/5387/0x00000002 [ 85.097856][ T5387] 5 locks held by syz-executor.0/5387: [ 85.103419][ T5387] #0: ffff888028ee80e0 (&type->s_umount_key#54){+.+.}-{3:3}, at: deactivate_super+0xad/0xf0 [ 85.113881][ T5387] #1: ffff88802894cb78 (&sdp->sd_quota_sync_mutex){+.+.}-{3:3}, at: gfs2_quota_sync+0x1ba/0x590 [ 85.124739][ T5387] #2: ffff88802894d060 (&sdp->sd_log_flush_lock){++++}-{3:3}, at: gfs2_log_flush+0x105/0x25f0 [ 85.136080][ T5387] #3: ffff88802894ce88 (&sdp->sd_log_lock){+.+.}-{2:2}, at: gfs2_flush_revokes+0x53/0x90 [ 85.146565][ T5387] #4: ffff88802894d248 (&sdp->sd_freeze_mutex){+.+.}-{3:3}, at: gfs2_withdraw+0x498/0x1470 [ 85.156873][ T5387] Modules linked in: [ 85.160802][ T5387] Preemption disabled at: [ 85.160817][ T5387] [<0000000000000000>] 0x0 [ 85.169668][ T5387] Kernel panic - not syncing: scheduling while atomic: panic_on_warn set ... [ 85.178974][ T5387] CPU: 0 PID: 5387 Comm: syz-executor.0 Tainted: G W 6.6.0-rc4-syzkaller-00284-gb9ddbb0cde2a #0 [ 85.190978][ T5387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 85.201159][ T5387] Call Trace: [ 85.204471][ T5387] [ 85.207594][ T5387] dump_stack_lvl+0x1e7/0x2d0 [ 85.212389][ T5387] ? nf_tcp_handle_invalid+0x650/0x650 [ 85.218070][ T5387] ? panic+0x770/0x770 [ 85.222187][ T5387] ? vscnprintf+0x5d/0x80 [ 85.226566][ T5387] panic+0x30f/0x770 [ 85.230487][ T5387] ? check_panic_on_warn+0x21/0xa0 [ 85.235600][ T5387] ? __memcpy_flushcache+0x2b0/0x2b0 [ 85.241230][ T5387] ? __wake_up_klogd+0xcc/0x100 [ 85.246084][ T5387] check_panic_on_warn+0x82/0xa0 [ 85.251022][ T5387] __schedule_bug+0x1be/0x220 [ 85.255703][ T5387] ? raw_spin_rq_unlock_irq+0x90/0x90 [ 85.261171][ T5387] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 85.267153][ T5387] __schedule+0x1a36/0x4af0 [ 85.271740][ T5387] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 85.277905][ T5387] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 85.283791][ T5387] ? _raw_spin_unlock+0x40/0x40 [ 85.288873][ T5387] ? release_firmware_map_entry+0x190/0x190 [ 85.294884][ T5387] ? __asan_memset+0x23/0x40 [ 85.299579][ T5387] ? mod_timer_pending+0x30/0x30 [ 85.304529][ T5387] ? _raw_spin_unlock+0x40/0x40 [ 85.309484][ T5387] schedule+0xc3/0x180 [ 85.313551][ T5387] schedule_timeout+0x1bd/0x300 [ 85.318658][ T5387] ? console_conditional_schedule+0x40/0x40 [ 85.324732][ T5387] ? update_process_times+0x1b0/0x1b0 [ 85.330284][ T5387] ? prepare_to_wait_event+0x3b9/0x3f0 [ 85.335741][ T5387] gfs2_withdraw+0x566/0x1470 [ 85.340775][ T5387] ? gfs2_lm+0x240/0x240 [ 85.345561][ T5387] ? wake_bit_function+0x220/0x220 [ 85.350688][ T5387] ? do_raw_spin_unlock+0x13b/0x8b0 [ 85.356773][ T5387] ? read_lock_is_recursive+0x20/0x20 [ 85.362243][ T5387] gfs2_ail1_empty+0x7d0/0x860 [ 85.367095][ T5387] ? __rwlock_init+0x150/0x150 [ 85.371862][ T5387] ? gfs2_log_flush+0xc93/0x25f0 [ 85.376877][ T5387] ? __lock_acquire+0x7f70/0x7f70 [ 85.381997][ T5387] gfs2_flush_revokes+0x5e/0x90 [ 85.386941][ T5387] revoke_lo_before_commit+0x2c/0x5f0 [ 85.392308][ T5387] ? do_raw_spin_unlock+0x13b/0x8b0 [ 85.397778][ T5387] ? buf_lo_after_scan+0x1e0/0x1e0 [ 85.402885][ T5387] gfs2_log_flush+0xc93/0x25f0 [ 85.407743][ T5387] ? gfs2_ail_empty_tr+0x310/0x310 [ 85.412937][ T5387] ? __kmem_cache_free+0x25f/0x3b0 [ 85.418126][ T5387] ? do_sync+0x9d6/0xec0 [ 85.422464][ T5387] do_sync+0xa30/0xec0 [ 85.426731][ T5387] ? qd_check_sync+0x3f0/0x3f0 [ 85.431544][ T5387] ? do_raw_spin_lock+0x14d/0x3a0 [ 85.436760][ T5387] ? do_raw_spin_unlock+0x13b/0x8b0 [ 85.441953][ T5387] ? qd_check_sync+0xba/0x3f0 [ 85.446717][ T5387] gfs2_quota_sync+0x3c8/0x590 [ 85.451902][ T5387] gfs2_sync_fs+0x4d/0xb0 [ 85.456254][ T5387] sync_filesystem+0xec/0x220 [ 85.461025][ T5387] generic_shutdown_super+0x72/0x2c0 [ 85.466317][ T5387] kill_block_super+0x41/0x70 [ 85.471096][ T5387] deactivate_locked_super+0xa4/0x110 [ 85.476512][ T5387] cleanup_mnt+0x426/0x4c0 [ 85.481378][ T5387] ? _raw_spin_unlock_irq+0x23/0x50 [ 85.486671][ T5387] task_work_run+0x24a/0x300 [ 85.491268][ T5387] ? task_work_cancel+0x2b0/0x2b0 [ 85.496387][ T5387] ? exit_to_user_mode_loop+0x39/0x100 [ 85.502029][ T5387] exit_to_user_mode_loop+0xde/0x100 [ 85.507401][ T5387] exit_to_user_mode_prepare+0xb1/0x140 [ 85.513238][ T5387] syscall_exit_to_user_mode+0x64/0x280 [ 85.518828][ T5387] do_syscall_64+0x4d/0xc0 [ 85.523259][ T5387] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 85.529154][ T5387] RIP: 0033:0x7f0357c7dbc7 [ 85.533571][ T5387] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 85.554048][ T5387] RSP: 002b:00007ffe07e60a78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 85.562549][ T5387] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f0357c7dbc7 [ 85.570784][ T5387] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffe07e60b30 [ 85.578870][ T5387] RBP: 00007ffe07e60b30 R08: 0000000000000000 R09: 0000000000000000 [ 85.587120][ T5387] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe07e61bf0 [ 85.595128][ T5387] R13: 00007f0357cd7aa2 R14: 0000000000014613 R15: 0000000000000001 [ 85.603322][ T5387] [ 85.606680][ T5387] Kernel Offset: disabled [ 85.611194][ T5387] Rebooting in 86400 seconds..