[ 71.331052][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.337628][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 Warning: Permanently added '10.128.0.65' (ED25519) to the list of known hosts. 2024/12/14 05:59:30 ignoring optional flag "sandboxArg"="0" 2024/12/14 05:59:30 ignoring optional flag "type"="gce" 2024/12/14 05:59:30 parsed 1 programs 2024/12/14 05:59:32 executed programs: 0 [ 78.699523][ T4432] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 78.853858][ T4473] chnl_net:caif_netlink_parms(): no params data found [ 78.903156][ T4473] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.910746][ T4473] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.918735][ T4473] device bridge_slave_0 entered promiscuous mode [ 78.927153][ T4473] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.934368][ T4473] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.942360][ T4473] device bridge_slave_1 entered promiscuous mode [ 78.965240][ T4473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.976604][ T4473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.000346][ T4473] team0: Port device team_slave_0 added [ 79.007979][ T4473] team0: Port device team_slave_1 added [ 79.026928][ T4473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.034046][ T4473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.060089][ T4473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.072203][ T4473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.079242][ T4473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.105768][ T4473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.136556][ T4473] device hsr_slave_0 entered promiscuous mode [ 79.143640][ T4473] device hsr_slave_1 entered promiscuous mode [ 79.702949][ T4473] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.713086][ T4473] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.723839][ T4473] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.734177][ T4473] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.759878][ T4473] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.766980][ T4473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.774451][ T4473] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.781874][ T4473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.840783][ T4473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.856021][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.864955][ T3045] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.873252][ T3045] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.883007][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 79.899889][ T4473] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.912433][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.922397][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.931465][ T3045] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.938645][ T3045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.953372][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.963404][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.973864][ T3045] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.981014][ T3045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.996321][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.010339][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.028547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.040304][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.049887][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.061025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.070246][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.083157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.093766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.107216][ T4473] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.121948][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.132397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.142961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.247391][ T537] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.255209][ T537] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.270570][ T4473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.292881][ T537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.304624][ T537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.329713][ T537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.340822][ T537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.354839][ T4473] device veth0_vlan entered promiscuous mode [ 80.363760][ T537] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.372760][ T537] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.389548][ T4473] device veth1_vlan entered promiscuous mode [ 80.416071][ T537] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 80.426992][ T537] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 80.435789][ T537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 80.447044][ T537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.459310][ T4473] device veth0_macvtap entered promiscuous mode [ 80.470731][ T4473] device veth1_macvtap entered promiscuous mode [ 80.490908][ T4473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.500254][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 80.510316][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 80.520165][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.529485][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.543651][ T4473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.551289][ T537] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.561725][ T537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.575915][ T4473] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.586278][ T4473] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.595357][ T4473] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.604792][ T4473] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.676806][ T537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.699519][ T537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.707306][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.717343][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.722189][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.737105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.778710][ T4167] Bluetooth: hci0: command 0x0409 tx timeout [ 80.794699][ T4567] loop0: detected capacity change from 0 to 512 [ 80.834522][ T4567] EXT4-fs (loop0): 1 orphan inode deleted [ 80.842214][ T4567] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,sysvgroups,dioread_lock,grpquota,noauto_da_alloc,resgid=0x0000000000000000,barrier,init_itable=0x000000000000c202,usrquota,. Quota mode: writeback. [ 80.869663][ T4567] ext4 filesystem being mounted at /root/syzkaller-testdir3874679424/syzkaller.QEkxx2/0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.907239][ T26] audit: type=1800 audit(1734155974.641:2): pid=4567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=16 res=0 errno=0 [ 80.938798][ T26] audit: type=1800 audit(1734155974.671:3): pid=4567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=16 res=0 errno=0 [ 80.977250][ T4567] EXT4-fs (loop0): re-mounted. Opts: . Quota mode: writeback. [ 81.030232][ T4473] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 81.042599][ T4473] EXT4-fs (loop0): Remounting filesystem read-only [ 81.050837][ T4473] EXT4-fs error (device loop0): ext4_quota_off:6486: inode #3: comm syz-executor.0: mark_inode_dirty error [ 81.063019][ T4473] EXT4-fs (loop0): Remounting filesystem read-only [ 81.184320][ T4591] loop0: detected capacity change from 0 to 512 [ 81.205762][ T4591] EXT4-fs (loop0): 1 orphan inode deleted [ 81.212196][ T4591] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,sysvgroups,dioread_lock,grpquota,noauto_da_alloc,resgid=0x0000000000000000,barrier,init_itable=0x000000000000c202,usrquota,. Quota mode: writeback. [ 81.237971][ T4591] ext4 filesystem being mounted at /root/syzkaller-testdir3874679424/syzkaller.QEkxx2/1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.288014][ T26] audit: type=1800 audit(1734155975.021:4): pid=4591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 81.310895][ T4589] EXT4-fs error (device loop0): ext4_map_blocks:738: inode #18: block 3: comm syz-executor.0: lblock 3 mapped to illegal pblock 3 (length 1) [ 81.323986][ T26] audit: type=1800 audit(1734155975.031:5): pid=4591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 81.332450][ T4589] EXT4-fs (loop0): Remounting filesystem read-only [ 81.353369][ T4589] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #18: block 3: comm syz-executor.0: lblock 3 mapped to illegal pblock 3 (length 1) [ 81.369112][ T4589] EXT4-fs (loop0): Remounting filesystem read-only [ 81.375851][ T4589] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #18: block 3: comm syz-executor.0: lblock 3 mapped to illegal pblock 3 (length 1) [ 81.392673][ T4589] EXT4-fs (loop0): Remounting filesystem read-only [ 81.399532][ T4589] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #18: block 3: comm syz-executor.0: lblock 3 mapped to illegal pblock 3 (length 1) [ 81.419349][ T4589] EXT4-fs (loop0): Remounting filesystem read-only [ 81.426784][ T4589] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #18: block 3: comm syz-executor.0: lblock 3 mapped to illegal pblock 3 (length 1) [ 81.442261][ T4589] EXT4-fs (loop0): Remounting filesystem read-only [ 81.450153][ T4589] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #18: block 3: comm syz-executor.0: lblock 3 mapped to illegal pblock 3 (length 1) [ 81.466622][ T4589] EXT4-fs (loop0): Remounting filesystem read-only [ 81.474806][ T4589] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #18: block 3: comm syz-executor.0: lblock 3 mapped to illegal pblock 3 (length 1) [ 81.494985][ T4589] EXT4-fs (loop0): Remounting filesystem read-only [ 81.502089][ T4589] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #18: block 3: comm syz-executor.0: lblock 3 mapped to illegal pblock 3 (length 1) [ 81.517132][ T4589] EXT4-fs (loop0): Remounting filesystem read-only [ 81.524159][ T4589] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #18: block 3: comm syz-executor.0: lblock 3 mapped to illegal pblock 3 (length 1) [ 81.539663][ T4589] EXT4-fs (loop0): Remounting filesystem read-only [ 81.546284][ T4589] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #18: block 3: comm syz-executor.0: lblock 3 mapped to illegal pblock 3 (length 1) [ 81.564157][ T4589] EXT4-fs (loop0): Remounting filesystem read-only [ 81.583572][ T7] cfg80211: failed to load regulatory.db [ 81.822112][ T4619] loop0: detected capacity change from 0 to 512 [ 81.845114][ T4619] EXT4-fs (loop0): 1 orphan inode deleted [ 81.851714][ T4619] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,sysvgroups,dioread_lock,grpquota,noauto_da_alloc,resgid=0x0000000000000000,barrier,init_itable=0x000000000000c202,usrquota,. Quota mode: writeback. [ 81.874408][ T4619] ext4 filesystem being mounted at /root/syzkaller-testdir3874679424/syzkaller.QEkxx2/2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.901204][ T26] audit: type=1800 audit(1734155975.641:6): pid=4619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=16 res=0 errno=0 [ 81.951644][ T26] audit: type=1800 audit(1734155975.641:7): pid=4619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=16 res=0 errno=0 [ 81.986148][ T4618] EXT4-fs error (device loop0): ext4_map_blocks:738: inode #16: block 2596091197: comm syz-executor.0: lblock 3 mapped to illegal pblock 2596091197 (length 1) [ 82.019606][ T4618] EXT4-fs (loop0): Remounting filesystem read-only [ 82.036145][ T4618] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #16: block 2596091197: comm syz-executor.0: lblock 3 mapped to illegal pblock 2596091197 (length 1) [ 82.078367][ T4618] EXT4-fs (loop0): Remounting filesystem read-only [ 82.098716][ T4618] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #16: block 2596091197: comm syz-executor.0: lblock 3 mapped to illegal pblock 2596091197 (length 1) [ 82.118199][ T4618] EXT4-fs (loop0): Remounting filesystem read-only [ 82.124849][ T4618] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #16: block 2596091197: comm syz-executor.0: lblock 3 mapped to illegal pblock 2596091197 (length 1) [ 82.151222][ T4618] EXT4-fs (loop0): Remounting filesystem read-only [ 82.159039][ T4618] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #16: block 2596091197: comm syz-executor.0: lblock 3 mapped to illegal pblock 2596091197 (length 1) [ 82.177733][ T4618] EXT4-fs (loop0): Remounting filesystem read-only [ 82.184376][ T4618] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #16: block 2596091197: comm syz-executor.0: lblock 3 mapped to illegal pblock 2596091197 (length 1) [ 82.225017][ T4618] EXT4-fs (loop0): Remounting filesystem read-only [ 82.232110][ T4618] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #16: block 2596091197: comm syz-executor.0: lblock 3 mapped to illegal pblock 2596091197 (length 1) [ 82.258065][ T4618] EXT4-fs (loop0): Remounting filesystem read-only [ 82.264718][ T4618] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 82.292769][ T4618] EXT4-fs (loop0): Remounting filesystem read-only [ 82.305045][ T4618] EXT4-fs error (device loop0): ext4_dirty_inode:6010: inode #16: comm syz-executor.0: mark_inode_dirty error [ 82.317927][ T4618] EXT4-fs (loop0): Remounting filesystem read-only [ 82.324483][ T4618] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #16: block 2596091197: comm syz-executor.0: lblock 3 mapped to illegal pblock 2596091197 (length 1) [ 82.343118][ T4618] EXT4-fs (loop0): Remounting filesystem read-only [ 82.461271][ T4644] loop0: detected capacity change from 0 to 512 [ 82.484417][ T4644] EXT4-fs (loop0): 1 orphan inode deleted [ 82.491545][ T4644] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,sysvgroups,dioread_lock,grpquota,noauto_da_alloc,resgid=0x0000000000000000,barrier,init_itable=0x000000000000c202,usrquota,. Quota mode: writeback. [ 82.516232][ T4644] ext4 filesystem being mounted at /root/syzkaller-testdir3874679424/syzkaller.QEkxx2/3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.546175][ T26] audit: type=1800 audit(1734155976.281:8): pid=4644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=16 res=0 errno=0 [ 82.573007][ T26] audit: type=1800 audit(1734155976.301:9): pid=4644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=16 res=0 errno=0 [ 82.610372][ T4643] EXT4-fs error (device loop0): ext4_map_blocks:738: inode #16: block 2787245459: comm syz-executor.0: lblock 3 mapped to illegal pblock 2787245459 (length 1) [ 82.627132][ T4643] EXT4-fs (loop0): Remounting filesystem read-only [ 82.635196][ T4643] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #16: block 2787245459: comm syz-executor.0: lblock 3 mapped to illegal pblock 2787245459 (length 1) [ 82.653027][ T4643] EXT4-fs (loop0): Remounting filesystem read-only [ 82.660291][ T4643] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #16: block 2787245459: comm syz-executor.0: lblock 3 mapped to illegal pblock 2787245459 (length 1) [ 82.677958][ T4643] EXT4-fs (loop0): Remounting filesystem read-only [ 82.684865][ T4643] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #16: block 2787245459: comm syz-executor.0: lblock 3 mapped to illegal pblock 2787245459 (length 1) [ 82.702623][ T4643] EXT4-fs (loop0): Remounting filesystem read-only [ 82.709415][ T4643] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #16: block 2787245459: comm syz-executor.0: lblock 3 mapped to illegal pblock 2787245459 (length 1) [ 82.727092][ T4643] EXT4-fs (loop0): Remounting filesystem read-only [ 82.734243][ T4643] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #16: block 2787245459: comm syz-executor.0: lblock 3 mapped to illegal pblock 2787245459 (length 1) [ 82.752422][ T4643] EXT4-fs (loop0): Remounting filesystem read-only [ 82.760361][ T4643] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #16: block 2787245459: comm syz-executor.0: lblock 3 mapped to illegal pblock 2787245459 (length 1) [ 82.777570][ T4643] EXT4-fs (loop0): Remounting filesystem read-only [ 82.785763][ T4643] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #16: block 2787245459: comm syz-executor.0: lblock 3 mapped to illegal pblock 2787245459 (length 1) [ 82.804080][ T4643] EXT4-fs (loop0): Remounting filesystem read-only [ 82.810909][ T4643] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #16: block 2787245459: comm syz-executor.0: lblock 3 mapped to illegal pblock 2787245459 (length 1) [ 82.834182][ T4643] EXT4-fs (loop0): Remounting filesystem read-only [ 82.843117][ T4643] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #16: block 2787245459: comm syz-executor.0: lblock 3 mapped to illegal pblock 2787245459 (length 1) [ 82.861588][ T4186] Bluetooth: hci0: command 0x041b tx timeout [ 82.870634][ T4643] EXT4-fs (loop0): Remounting filesystem read-only [ 82.991722][ T4672] loop0: detected capacity change from 0 to 512 [ 83.025242][ T4672] EXT4-fs (loop0): 1 orphan inode deleted [ 83.031670][ T4672] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,sysvgroups,dioread_lock,grpquota,noauto_da_alloc,resgid=0x0000000000000000,barrier,init_itable=0x000000000000c202,usrquota,. Quota mode: writeback. [ 83.054461][ T4672] ext4 filesystem being mounted at /root/syzkaller-testdir3874679424/syzkaller.QEkxx2/4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.080380][ T26] audit: type=1800 audit(1734155976.821:10): pid=4672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=16 res=0 errno=0 [ 83.103632][ T26] audit: type=1800 audit(1734155976.821:11): pid=4672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=16 res=0 errno=0 [ 83.141815][ T4671] ================================================================== [ 83.150387][ T4671] BUG: KASAN: out-of-bounds in ext4_find_extent+0xbe7/0xe20 [ 83.157726][ T4671] Read of size 4 at addr ffff88806eafc944 by task syz-executor.0/4671 [ 83.165895][ T4671] [ 83.168245][ T4671] CPU: 0 PID: 4671 Comm: syz-executor.0 Not tainted 5.15.173-syzkaller #0 [ 83.176771][ T4671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 83.186898][ T4671] Call Trace: [ 83.190198][ T4671] [ 83.193156][ T4671] dump_stack_lvl+0x1e3/0x2d0 [ 83.197880][ T4671] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 83.203584][ T4671] ? _printk+0xd1/0x120 [ 83.207773][ T4671] ? __wake_up_klogd+0xcc/0x100 [ 83.212743][ T4671] ? panic+0x860/0x860 [ 83.216846][ T4671] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 83.222340][ T4671] print_address_description+0x63/0x3b0 [ 83.227950][ T4671] ? ext4_find_extent+0xbe7/0xe20 [ 83.233040][ T4671] kasan_report+0x16b/0x1c0 [ 83.237570][ T4671] ? ext4_find_extent+0xbe7/0xe20 [ 83.242627][ T4671] ext4_find_extent+0xbe7/0xe20 [ 83.247559][ T4671] ext4_ext_map_blocks+0x2da/0x7630 [ 83.252798][ T4671] ? mark_lock+0x98/0x340 [ 83.257157][ T4671] ? __lock_acquire+0x1295/0x1ff0 [ 83.262362][ T4671] ? ext4_ext_release+0x10/0x10 [ 83.267281][ T4671] ? ext4_es_lookup_extent+0x621/0xa40 [ 83.272784][ T4671] ext4_map_blocks+0xa66/0x1c70 [ 83.277809][ T4671] ? ext4_issue_zeroout+0x250/0x250 [ 83.283057][ T4671] ? create_page_buffers+0x1d4/0x330 [ 83.288384][ T4671] _ext4_get_block+0x23b/0x660 [ 83.293232][ T4671] ? ext4_get_block+0x40/0x40 [ 83.297956][ T4671] ? create_page_buffers+0x24b/0x330 [ 83.303282][ T4671] __block_write_begin_int+0x60b/0x1650 [ 83.308877][ T4671] ? ext4_es_is_delayed+0x40/0x40 [ 83.313928][ T4671] ? page_zero_new_buffers+0x510/0x510 [ 83.319416][ T4671] ? __might_sleep+0xc0/0xc0 [ 83.324033][ T4671] ? file_update_time+0x34e/0x460 [ 83.329084][ T4671] ? ext4_journal_check_start+0x17b/0x240 [ 83.334839][ T4671] block_page_mkwrite+0x210/0x280 [ 83.339891][ T4671] ? ext4_es_is_delayed+0x40/0x40 [ 83.344949][ T4671] ext4_page_mkwrite+0x3e9/0x1290 [ 83.350007][ T4671] ? ext4_es_is_delayed+0x40/0x40 [ 83.355073][ T4671] ? wp_page_shared+0x171/0x690 [ 83.360038][ T4671] ? ext4_change_inode_journal_flag+0x6e0/0x6e0 [ 83.366405][ T4671] ? do_raw_spin_lock+0x14a/0x370 [ 83.371461][ T4671] do_page_mkwrite+0x1a9/0x440 [ 83.376363][ T4671] wp_page_shared+0x179/0x690 [ 83.381085][ T4671] handle_mm_fault+0x2a3d/0x5960 [ 83.386085][ T4671] ? numa_migrate_prep+0x1a0/0x1a0 [ 83.391254][ T4671] ? vmacache_find+0x23c/0x590 [ 83.396139][ T4671] exc_page_fault+0x271/0x700 [ 83.400851][ T4671] asm_exc_page_fault+0x22/0x30 [ 83.405832][ T4671] RIP: 0033:0x7f6194d6acc7 [ 83.410288][ T4671] Code: ce 48 ff c7 48 01 fe 48 8d 54 11 80 0f 1f 80 00 00 00 00 c5 fe 6f 0e c5 fe 6f 56 20 c5 fe 6f 5e 40 c5 fe 6f 66 60 48 83 ee 80 fd 7f 0f c5 fd 7f 57 20 c5 fd 7f 5f 40 c5 fd 7f 67 60 48 83 ef [ 83.429914][ T4671] RSP: 002b:00007ffe42e254c8 EFLAGS: 00010203 [ 83.436098][ T4671] RAX: 0000000020003600 RBX: 00007ffe42e255d8 RCX: 0000000020003600 [ 83.444092][ T4671] RDX: 00000000200036a9 RSI: 00007f619492d7b0 RDI: 0000000020003620 [ 83.452085][ T4671] RBP: 0000000000000001 R08: 0000000000000000 R09: 00007f6194ea8f8c [ 83.460083][ T4671] R10: 00007ffe42e25600 R11: 0000000000000246 R12: 00007f619492d6f0 [ 83.468082][ T4671] R13: fffffffffffffffe R14: 00007f619490d000 R15: 00007f619492d6f8 [ 83.476100][ T4671] [ 83.479137][ T4671] [ 83.481472][ T4671] The buggy address belongs to the page: [ 83.487132][ T4671] page:ffffea0001babf00 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x6eafc [ 83.497312][ T4671] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 83.504497][ T4671] raw: 00fff00000000000 ffffea0001ba5bc8 ffffea0001ba5c88 0000000000000000 [ 83.513105][ T4671] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 83.521706][ T4671] page dumped because: kasan: bad access detected [ 83.528140][ T4671] page_owner tracks the page as freed [ 83.533520][ T4671] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100cca(GFP_HIGHUSER_MOVABLE), pid 4699, ts 83514631597, free_ts 83522342997 [ 83.548131][ T4671] get_page_from_freelist+0x3b78/0x3d40 [ 83.553711][ T4671] __alloc_pages+0x272/0x700 [ 83.558332][ T4671] alloc_pages_vma+0x39a/0x800 [ 83.563121][ T4671] wp_page_copy+0x24e/0x2070 [ 83.567737][ T4671] handle_mm_fault+0x2a3d/0x5960 [ 83.572706][ T4671] exc_page_fault+0x271/0x700 [ 83.577447][ T4671] asm_exc_page_fault+0x22/0x30 [ 83.582418][ T4671] page last free stack trace: [ 83.587113][ T4671] free_unref_page_prepare+0xc34/0xcf0 [ 83.592781][ T4671] free_unref_page_list+0x1f7/0x8e0 [ 83.598095][ T4671] release_pages+0x1bb9/0x1f40 [ 83.602894][ T4671] tlb_finish_mmu+0x177/0x320 [ 83.607687][ T4671] exit_mmap+0x3cd/0x670 [ 83.611964][ T4671] __mmput+0x112/0x3b0 [ 83.616057][ T4671] exit_mm+0x688/0x7f0 [ 83.620154][ T4671] do_exit+0x626/0x2480 [ 83.624336][ T4671] do_group_exit+0x144/0x310 [ 83.628949][ T4671] __x64_sys_exit_group+0x3b/0x40 [ 83.634000][ T4671] do_syscall_64+0x3b/0xb0 [ 83.638435][ T4671] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.644357][ T4671] [ 83.646692][ T4671] Memory state around the buggy address: [ 83.652336][ T4671] ffff88806eafc800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 83.660451][ T4671] ffff88806eafc880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 83.668533][ T4671] >ffff88806eafc900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 83.676611][ T4671] ^ [ 83.682785][ T4671] ffff88806eafc980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 83.690876][ T4671] ffff88806eafca00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 83.698946][ T4671] ================================================================== [ 83.707026][ T4671] Disabling lock debugging due to kernel taint [ 83.722165][ T4671] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 83.729387][ T4671] CPU: 0 PID: 4671 Comm: syz-executor.0 Tainted: G B 5.15.173-syzkaller #0 [ 83.739297][ T4671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 83.749364][ T4671] Call Trace: [ 83.752656][ T4671] [ 83.755606][ T4671] dump_stack_lvl+0x1e3/0x2d0 [ 83.760320][ T4671] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 83.765977][ T4671] ? panic+0x860/0x860 [ 83.770072][ T4671] ? preempt_schedule_common+0xa6/0xd0 [ 83.775554][ T4671] ? preempt_schedule+0xd9/0xe0 [ 83.780461][ T4671] panic+0x318/0x860 [ 83.784378][ T4671] ? check_panic_on_warn+0x1d/0xa0 [ 83.789512][ T4671] ? fb_is_primary_device+0xd0/0xd0 [ 83.794740][ T4671] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 83.800779][ T4671] ? _raw_spin_unlock+0x40/0x40 [ 83.805664][ T4671] check_panic_on_warn+0x7e/0xa0 [ 83.810627][ T4671] ? ext4_find_extent+0xbe7/0xe20 [ 83.815681][ T4671] end_report+0x6d/0xf0 [ 83.819864][ T4671] kasan_report+0x18e/0x1c0 [ 83.824394][ T4671] ? ext4_find_extent+0xbe7/0xe20 [ 83.829442][ T4671] ext4_find_extent+0xbe7/0xe20 [ 83.834318][ T4671] ext4_ext_map_blocks+0x2da/0x7630 [ 83.839572][ T4671] ? mark_lock+0x98/0x340 [ 83.843922][ T4671] ? __lock_acquire+0x1295/0x1ff0 [ 83.848969][ T4671] ? ext4_ext_release+0x10/0x10 [ 83.853849][ T4671] ? ext4_es_lookup_extent+0x621/0xa40 [ 83.859334][ T4671] ext4_map_blocks+0xa66/0x1c70 [ 83.864232][ T4671] ? ext4_issue_zeroout+0x250/0x250 [ 83.869463][ T4671] ? create_page_buffers+0x1d4/0x330 [ 83.874770][ T4671] _ext4_get_block+0x23b/0x660 [ 83.879556][ T4671] ? ext4_get_block+0x40/0x40 [ 83.884264][ T4671] ? create_page_buffers+0x24b/0x330 [ 83.889570][ T4671] __block_write_begin_int+0x60b/0x1650 [ 83.895183][ T4671] ? ext4_es_is_delayed+0x40/0x40 [ 83.900246][ T4671] ? page_zero_new_buffers+0x510/0x510 [ 83.905729][ T4671] ? __might_sleep+0xc0/0xc0 [ 83.910344][ T4671] ? file_update_time+0x34e/0x460 [ 83.915481][ T4671] ? ext4_journal_check_start+0x17b/0x240 [ 83.921323][ T4671] block_page_mkwrite+0x210/0x280 [ 83.926369][ T4671] ? ext4_es_is_delayed+0x40/0x40 [ 83.931414][ T4671] ext4_page_mkwrite+0x3e9/0x1290 [ 83.936459][ T4671] ? ext4_es_is_delayed+0x40/0x40 [ 83.941506][ T4671] ? wp_page_shared+0x171/0x690 [ 83.946383][ T4671] ? ext4_change_inode_journal_flag+0x6e0/0x6e0 [ 83.952732][ T4671] ? do_raw_spin_lock+0x14a/0x370 [ 83.957781][ T4671] do_page_mkwrite+0x1a9/0x440 [ 83.962575][ T4671] wp_page_shared+0x179/0x690 [ 83.967285][ T4671] handle_mm_fault+0x2a3d/0x5960 [ 83.972259][ T4671] ? numa_migrate_prep+0x1a0/0x1a0 [ 83.977404][ T4671] ? vmacache_find+0x23c/0x590 [ 83.982201][ T4671] exc_page_fault+0x271/0x700 [ 83.986933][ T4671] asm_exc_page_fault+0x22/0x30 [ 83.991816][ T4671] RIP: 0033:0x7f6194d6acc7 [ 83.996245][ T4671] Code: ce 48 ff c7 48 01 fe 48 8d 54 11 80 0f 1f 80 00 00 00 00 c5 fe 6f 0e c5 fe 6f 56 20 c5 fe 6f 5e 40 c5 fe 6f 66 60 48 83 ee 80 fd 7f 0f c5 fd 7f 57 20 c5 fd 7f 5f 40 c5 fd 7f 67 60 48 83 ef [ 84.015868][ T4671] RSP: 002b:00007ffe42e254c8 EFLAGS: 00010203 [ 84.022219][ T4671] RAX: 0000000020003600 RBX: 00007ffe42e255d8 RCX: 0000000020003600 [ 84.030307][ T4671] RDX: 00000000200036a9 RSI: 00007f619492d7b0 RDI: 0000000020003620 [ 84.038650][ T4671] RBP: 0000000000000001 R08: 0000000000000000 R09: 00007f6194ea8f8c [ 84.046648][ T4671] R10: 00007ffe42e25600 R11: 0000000000000246 R12: 00007f619492d6f0 [ 84.054726][ T4671] R13: fffffffffffffffe R14: 00007f619490d000 R15: 00007f619492d6f8 [ 84.062727][ T4671] [ 84.065980][ T4671] Kernel Offset: disabled [ 84.070314][ T4671] Rebooting in 86400 seconds..