Warning: Permanently added '[localhost]:49232' (ED25519) to the list of known hosts.
2024/04/25 15:14:39 ignoring optional flag "sandboxArg"="0"
2024/04/25 15:14:39 parsed 1 programs
[ 75.840000][ T38] kauditd_printk_skb: 73 callbacks suppressed
[ 75.840011][ T38] audit: type=1400 audit(1714058079.864:207): avc: denied { getattr } for pid=5400 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 75.887837][ T38] audit: type=1400 audit(1714058079.914:208): avc: denied { mounton } for pid=5408 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[ 75.897989][ T38] audit: type=1400 audit(1714058079.914:209): avc: denied { mount } for pid=5408 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[ 75.908065][ T38] audit: type=1400 audit(1714058079.934:210): avc: denied { read write } for pid=5408 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 75.917901][ T38] audit: type=1400 audit(1714058079.934:211): avc: denied { open } for pid=5408 comm="syz-executor" path="/swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 75.966573][ T38] audit: type=1400 audit(1714058079.994:212): avc: denied { unlink } for pid=5408 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 76.393364][ T38] audit: type=1400 audit(1714058080.414:213): avc: denied { relabelto } for pid=5411 comm="mkswap" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 76.980781][ T1357] ieee802154 phy0 wpan0: encryption failed: -22
[ 76.983965][ T1357] ieee802154 phy1 wpan1: encryption failed: -22
[ 77.472839][ T5408] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
2024/04/25 15:14:41 executed programs: 0
[ 77.517950][ T5194] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 77.521299][ T5194] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 77.525061][ T5194] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 77.529370][ T5194] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 77.533068][ T5194] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 77.536722][ T5194] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 77.542694][ T38] audit: type=1400 audit(1714058081.564:214): avc: denied { mounton } for pid=5417 comm="syz-executor.0" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[ 77.685047][ T5417] chnl_net:caif_netlink_parms(): no params data found
[ 77.808550][ T5417] bridge0: port 1(bridge_slave_0) entered blocking state
[ 77.811902][ T5417] bridge0: port 1(bridge_slave_0) entered disabled state
[ 77.818022][ T5417] bridge_slave_0: entered allmulticast mode
[ 77.821999][ T5417] bridge_slave_0: entered promiscuous mode
[ 77.828200][ T5417] bridge0: port 2(bridge_slave_1) entered blocking state
[ 77.831520][ T5417] bridge0: port 2(bridge_slave_1) entered disabled state
[ 77.834925][ T5417] bridge_slave_1: entered allmulticast mode
[ 77.838867][ T5417] bridge_slave_1: entered promiscuous mode
[ 77.898971][ T5417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 77.906618][ T5417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 77.974095][ T5417] team0: Port device team_slave_0 added
[ 77.980060][ T5417] team0: Port device team_slave_1 added
[ 77.984837][ T38] audit: type=1400 audit(1714058082.014:215): avc: denied { search } for pid=4664 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 78.037697][ T5417] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 78.040813][ T5417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 78.052243][ T5417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 78.062109][ T5417] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 78.065358][ T5417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 78.079267][ T5417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 78.141272][ T5417] hsr_slave_0: entered promiscuous mode
[ 78.145461][ T5417] hsr_slave_1: entered promiscuous mode
[ 78.749823][ T5417] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 78.756085][ T5417] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 78.760360][ T5417] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 78.765033][ T5417] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 78.827722][ T5417] 8021q: adding VLAN 0 to HW filter on device bond0
[ 78.840874][ T5417] 8021q: adding VLAN 0 to HW filter on device team0
[ 78.856398][ T5204] bridge0: port 1(bridge_slave_0) entered blocking state
[ 78.859939][ T5204] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 78.865920][ T5204] bridge0: port 2(bridge_slave_1) entered blocking state
[ 78.869177][ T5204] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 78.892734][ T5417] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 78.924142][ T38] audit: type=1400 audit(1714058082.944:216): avc: denied { sys_module } for pid=5417 comm="syz-executor.0" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[ 79.002891][ T5417] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 79.029992][ T5417] veth0_vlan: entered promiscuous mode
[ 79.039558][ T5417] veth1_vlan: entered promiscuous mode
[ 79.058920][ T5417] veth0_macvtap: entered promiscuous mode
[ 79.065343][ T5417] veth1_macvtap: entered promiscuous mode
[ 79.083136][ T5417] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 79.091191][ T5417] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 79.099677][ T5417] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 79.103589][ T5417] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 79.107552][ T5417] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 79.111411][ T5417] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 79.174436][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 79.177902][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 79.205578][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 79.209130][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 79.484733][ T5464] loop0: detected capacity change from 0 to 32768
[ 79.495320][ T5464] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 79.498718][ T5464] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 79.514656][ T5464] gfs2: fsid=syz:syz.0: journal 0 mapped with 4 extents in 0ms
[ 79.519896][ T827] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 79.523080][ T827] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 79.615431][ T5194] Bluetooth: hci0: command tx timeout
[ 79.627182][ T827] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 104ms
[ 79.633253][ T827] gfs2: fsid=syz:syz.0: jid=0: Done
[ 79.635958][ T5464] gfs2: fsid=syz:syz.0: first mount done, others may mount
[ 79.867926][ T5464] gfs2: fsid=syz:syz.0: found 1 quota changes
[ 79.902991][ T5417] syz-executor.0: attempt to access beyond end of device
[ 79.902991][ T5417] loop0: rw=1, sector=131324, nr_sectors = 4 limit=32768
[ 79.908700][ T5417] gfs2: fsid=syz:syz.0: Error 10 writing to journal, jid=0
[ 79.911910][ T5481] gfs2: fsid=syz:syz.0: about to withdraw this file system
[ 79.916587][ T5481] gfs2: fsid=syz:syz.0: File system withdrawn
[ 79.919213][ T5481] CPU: 0 PID: 5481 Comm: gfs2_logd/syz:s Not tainted 6.9.0-rc5-syzkaller-ge88c4cfcb7b8 #0
[ 79.922862][ T5481] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 79.926649][ T5481] Call Trace:
[ 79.927886][ T5481]
[ 79.928955][ T5481] dump_stack_lvl+0x16c/0x1f0
[ 79.930726][ T5481] gfs2_withdraw+0xab8/0x1290
[ 79.932391][ T5481] ? find_held_lock+0x2d/0x110
[ 79.934288][ T5481] ? __pfx_gfs2_withdraw+0x10/0x10
[ 79.936413][ T5481] ? gfs2_logd+0xc74/0xfe0
[ 79.938470][ T5481] ? __pfx_lock_release+0x10/0x10
[ 79.940771][ T5481] ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 79.943422][ T5481] gfs2_logd+0xdad/0xfe0
[ 79.945368][ T5481] ? __pfx_gfs2_logd+0x10/0x10
[ 79.947145][ T5481] ? __pfx_autoremove_wake_function+0x10/0x10
[ 79.949282][ T5481] ? lockdep_hardirqs_on+0x7c/0x110
[ 79.951489][ T5481] ? __kthread_parkme+0x148/0x220
[ 79.953710][ T5481] ? __pfx_gfs2_logd+0x10/0x10
[ 79.955812][ T5481] kthread+0x2c1/0x3a0
[ 79.957657][ T5481] ? _raw_spin_unlock_irq+0x23/0x50
[ 79.960009][ T5481] ? __pfx_kthread+0x10/0x10
[ 79.962107][ T5481] ret_from_fork+0x45/0x80
[ 79.964149][ T5481] ? __pfx_kthread+0x10/0x10
[ 79.966237][ T5481] ret_from_fork_asm+0x1a/0x30
[ 79.968439][ T5481]
[ 79.975099][ T5417] ==================================================================
[ 79.978238][ T5417] BUG: KASAN: slab-use-after-free in gfs2_invalidate_folio+0x718/0x820
[ 79.981187][ T5417] Read of size 8 at addr ffff88803c929168 by task syz-executor.0/5417
[ 79.985553][ T5417]
[ 79.986423][ T5417] CPU: 3 PID: 5417 Comm: syz-executor.0 Not tainted 6.9.0-rc5-syzkaller-ge88c4cfcb7b8 #0
[ 79.989999][ T5417] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 79.993920][ T5417] Call Trace:
[ 79.995360][ T5417]
[ 79.996392][ T5417] dump_stack_lvl+0x116/0x1f0
[ 79.998047][ T5417] print_report+0xc3/0x620
[ 79.999809][ T5417] ? __virt_addr_valid+0x5e/0x580
[ 80.002004][ T5417] ? __phys_addr+0xc6/0x150
[ 80.003997][ T5417] kasan_report+0xd9/0x110
[ 80.006002][ T5417] ? gfs2_invalidate_folio+0x718/0x820
[ 80.008472][ T5417] ? gfs2_invalidate_folio+0x718/0x820
[ 80.010867][ T5417] gfs2_invalidate_folio+0x718/0x820
[ 80.013335][ T5417] ? hlock_class+0x4e/0x130
[ 80.015423][ T5417] ? __pfx_gfs2_invalidate_folio+0x10/0x10
[ 80.018056][ T5417] truncate_cleanup_folio+0x2ac/0x3e0
[ 80.020543][ T5417] truncate_inode_pages_range+0x271/0xe90
[ 80.023111][ T5417] ? __pfx_truncate_inode_pages_range+0x10/0x10
[ 80.025733][ T5417] ? mark_lock+0xb5/0xc60
[ 80.027270][ T5417] ? __pfx___lock_acquire+0x10/0x10
[ 80.029073][ T5417] ? __pfx_mark_lock+0x10/0x10
[ 80.030952][ T5417] ? __pfx_mark_lock+0x10/0x10
[ 80.032627][ T5417] ? mark_held_locks+0x9f/0xe0
[ 80.034336][ T5417] ? _raw_spin_unlock_irq+0x23/0x50
[ 80.036501][ T5417] ? lockdep_hardirqs_on+0x7c/0x110
[ 80.038770][ T5417] gfs2_evict_inode+0x75b/0x1460
[ 80.040676][ T5417] ? __pfx___lock_acquire+0x10/0x10
[ 80.042466][ T5417] ? __pfx_gfs2_evict_inode+0x10/0x10
[ 80.044394][ T5417] ? find_held_lock+0x2d/0x110
[ 80.046143][ T5417] ? evict+0x2b7/0x6c0
[ 80.047657][ T5417] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 80.049669][ T5417] ? do_raw_spin_unlock+0x172/0x230
[ 80.051911][ T5417] ? __pfx_gfs2_evict_inode+0x10/0x10
[ 80.054299][ T5417] evict+0x2ed/0x6c0
[ 80.056099][ T5417] iput.part.0+0x5a8/0x7f0
[ 80.058475][ T5417] ? __pfx_gfs2_drop_inode+0x10/0x10
[ 80.060788][ T5417] iput+0x5c/0x80
[ 80.062405][ T5417] gfs2_put_super+0x2bd/0x760
[ 80.064520][ T5417] ? __pfx_gfs2_put_super+0x10/0x10
[ 80.066887][ T5417] generic_shutdown_super+0x159/0x3d0
[ 80.069028][ T5417] kill_block_super+0x3b/0x90
[ 80.070914][ T5417] gfs2_kill_sb+0x360/0x410
[ 80.072499][ T5417] deactivate_locked_super+0xbe/0x1a0
[ 80.074382][ T5417] deactivate_super+0xde/0x100
[ 80.076047][ T5417] cleanup_mnt+0x222/0x450
[ 80.077644][ T5417] task_work_run+0x14e/0x250
[ 80.079337][ T5417] ? __pfx_task_work_run+0x10/0x10
[ 80.081575][ T5417] syscall_exit_to_user_mode+0x278/0x2a0
[ 80.083541][ T5417] do_syscall_64+0xdc/0x260
[ 80.085223][ T5417] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 80.087453][ T5417] RIP: 0033:0x7fbabdc7f197
[ 80.089127][ T5417] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8
[ 80.096800][ T5417] RSP: 002b:00007fff0016dd38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 80.100368][ T5417] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fbabdc7f197
[ 80.103927][ T5417] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff0016ddf0
[ 80.107493][ T5417] RBP: 00007fff0016ddf0 R08: 0000000000000000 R09: 0000000000000000
[ 80.110947][ T5417] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff0016eeb0
[ 80.113752][ T5417] R13: 00007fbabdcc93b9 R14: 00000000000134ec R15: 0000000000000001
[ 80.116596][ T5417]
[ 80.117702][ T5417]
[ 80.118578][ T5417] Allocated by task 5417:
[ 80.120307][ T5417] kasan_save_stack+0x33/0x60
[ 80.122068][ T5417] kasan_save_track+0x14/0x30
[ 80.123759][ T5417] __kasan_slab_alloc+0x89/0x90
[ 80.125552][ T5417] kmem_cache_alloc+0x136/0x320
[ 80.127411][ T5417] gfs2_trans_add_data+0x4b3/0x7f0
[ 80.129212][ T5417] gfs2_unstuff_dinode+0xad9/0x1460
[ 80.131286][ T5417] gfs2_adjust_quota+0x124/0xb10
[ 80.133213][ T5417] do_sync+0xa73/0xd30
[ 80.134765][ T5417] gfs2_quota_sync+0x419/0x630
[ 80.136429][ T5417] gfs2_sync_fs+0x44/0xb0
[ 80.138037][ T5417] sync_filesystem+0x10d/0x290
[ 80.140061][ T5417] generic_shutdown_super+0x7e/0x3d0
[ 80.142472][ T5417] kill_block_super+0x3b/0x90
[ 80.144656][ T5417] gfs2_kill_sb+0x360/0x410
[ 80.146752][ T5417] deactivate_locked_super+0xbe/0x1a0
[ 80.149204][ T5417] deactivate_super+0xde/0x100
[ 80.151176][ T5417] cleanup_mnt+0x222/0x450
[ 80.152875][ T5417] task_work_run+0x14e/0x250
[ 80.154536][ T5417] syscall_exit_to_user_mode+0x278/0x2a0
[ 80.156536][ T5417] do_syscall_64+0xdc/0x260
[ 80.158118][ T5417] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 80.160189][ T5417]
[ 80.161031][ T5417] Freed by task 5417:
[ 80.162448][ T5417] kasan_save_stack+0x33/0x60
[ 80.164511][ T5417] kasan_save_track+0x14/0x30
[ 80.166176][ T5417] kasan_save_free_info+0x3b/0x60
[ 80.168001][ T5417] __kasan_slab_free+0x11d/0x1a0
[ 80.170188][ T5417] kmem_cache_free+0x12e/0x380
[ 80.172377][ T5417] gfs2_log_flush+0x1486/0x29b0
[ 80.174531][ T5417] do_sync+0x550/0xd30
[ 80.176335][ T5417] gfs2_quota_sync+0x419/0x630
[ 80.178451][ T5417] gfs2_sync_fs+0x44/0xb0
[ 80.180385][ T5417] sync_filesystem+0x10d/0x290
[ 80.182494][ T5417] generic_shutdown_super+0x7e/0x3d0
[ 80.184851][ T5417] kill_block_super+0x3b/0x90
[ 80.186988][ T5417] gfs2_kill_sb+0x360/0x410
[ 80.189029][ T5417] deactivate_locked_super+0xbe/0x1a0
[ 80.191436][ T5417] deactivate_super+0xde/0x100
[ 80.193568][ T5417] cleanup_mnt+0x222/0x450
[ 80.195197][ T5417] task_work_run+0x14e/0x250
[ 80.197076][ T5417] syscall_exit_to_user_mode+0x278/0x2a0
[ 80.199596][ T5417] do_syscall_64+0xdc/0x260
[ 80.201652][ T5417] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 80.204307][ T5417]
[ 80.205406][ T5417] The buggy address belongs to the object at ffff88803c929150
[ 80.205406][ T5417] which belongs to the cache gfs2_bufdata of size 80
[ 80.211393][ T5417] The buggy address is located 24 bytes inside of
[ 80.211393][ T5417] freed 80-byte region [ffff88803c929150, ffff88803c9291a0)
[ 80.217268][ T5417]
[ 80.218349][ T5417] The buggy address belongs to the physical page:
[ 80.221223][ T5417] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3c929
[ 80.224798][ T5417] flags: 0xfff80000000800(slab|node=0|zone=1|lastcpupid=0xfff)
[ 80.227527][ T5417] page_type: 0xffffffff()
[ 80.229037][ T5417] raw: 00fff80000000800 ffff888016381cc0 dead000000000122 0000000000000000
[ 80.232042][ T5417] raw: 0000000000000000 0000000080240024 00000001ffffffff 0000000000000000
[ 80.235068][ T5417] page dumped because: kasan: bad access detected
[ 80.237364][ T5417] page_owner tracks the page as allocated
[ 80.239351][ T5417] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 5417, tgid -1703121402 (syz-executor.0), ts 5417, free_ts 79887214436
[ 80.246850][ T5417] post_alloc_hook+0x2d4/0x350
[ 80.248866][ T5417] get_page_from_freelist+0xa28/0x3780
[ 80.251069][ T5417] __alloc_pages+0x22b/0x2460
[ 80.253103][ T5417] new_slab+0xcc/0x3a0
[ 80.254927][ T5417] ___slab_alloc+0x66d/0x1790
[ 80.257038][ T5417] __slab_alloc.constprop.0+0x56/0xb0
[ 80.259425][ T5417] kmem_cache_alloc+0x2e9/0x320
[ 80.261594][ T5417] gfs2_trans_add_meta+0xade/0xf50
[ 80.263885][ T5417] gfs2_alloc_blocks+0x46c/0x19c0
[ 80.266132][ T5417] gfs2_unstuff_dinode+0x499/0x1460
[ 80.268199][ T5417] gfs2_adjust_quota+0x124/0xb10
[ 80.269904][ T5417] do_sync+0xa73/0xd30
[ 80.271354][ T5417] gfs2_quota_sync+0x419/0x630
[ 80.273179][ T5417] gfs2_sync_fs+0x44/0xb0
[ 80.274766][ T5417] sync_filesystem+0x10d/0x290
[ 80.276485][ T5417] generic_shutdown_super+0x7e/0x3d0
[ 80.278387][ T5417] page last free pid 54 tgid 54 stack trace:
[ 80.280488][ T5417] free_unref_page_prepare+0x527/0xb10
[ 80.282491][ T5417] free_unref_page+0x33/0x3c0
[ 80.284187][ T5417] kasan_depopulate_vmalloc_pte+0x63/0x80
[ 80.286272][ T5417] __apply_to_page_range+0x57b/0xdc0
[ 80.288170][ T5417] kasan_release_vmalloc+0xac/0xc0
[ 80.290022][ T5417] purge_vmap_node+0x3fc/0x920
[ 80.291792][ T5417] __purge_vmap_area_lazy+0x9ca/0xc10
[ 80.293834][ T5417] _vm_unmap_aliases+0x29c/0xbd0
[ 80.295587][ T5417] vfree+0x533/0x7a0
[ 80.296978][ T5417] bpf_prog_free_deferred+0x466/0x630
[ 80.298947][ T5417] process_one_work+0x9a9/0x1ac0
[ 80.300829][ T5417] worker_thread+0x6c8/0xf70
[ 80.302539][ T5417] kthread+0x2c1/0x3a0
[ 80.303946][ T5417] ret_from_fork+0x45/0x80
[ 80.305480][ T5417] ret_from_fork_asm+0x1a/0x30
[ 80.307198][ T5417]
[ 80.308018][ T5417] Memory state around the buggy address:
[ 80.309933][ T5417] ffff88803c929000: fa fb fb fb fb fb fb fb fb fb fc fc fc fc fa fb
[ 80.312830][ T5417] ffff88803c929080: fb fb fb fb fb fb fb fb fc fc fc fc fa fb fb fb
[ 80.315727][ T5417] >ffff88803c929100: fb fb fb fb fb fb fc fc fc fc fa fb fb fb fb fb
[ 80.318512][ T5417] ^
[ 80.321457][ T5417] ffff88803c929180: fb fb fb fb fc fc fc fc fa fb fb fb fb fb fb fb
[ 80.324761][ T5417] ffff88803c929200: fb fb fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 80.327937][ T5417] ==================================================================
[ 80.331646][ T5417] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 80.334644][ T5417] CPU: 3 PID: 5417 Comm: syz-executor.0 Not tainted 6.9.0-rc5-syzkaller-ge88c4cfcb7b8 #0
[ 80.337958][ T5417] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 80.341668][ T5417] Call Trace:
[ 80.342977][ T5417]
[ 80.344011][ T5417] dump_stack_lvl+0x3d/0x1f0
[ 80.345841][ T5417] panic+0x6f5/0x7a0
[ 80.347472][ T5417] ? mark_held_locks+0x9f/0xe0
[ 80.349396][ T5417] ? __pfx_panic+0x10/0x10
[ 80.351305][ T5417] ? irqentry_exit+0x3b/0x90
[ 80.353253][ T5417] ? lockdep_hardirqs_on+0x7c/0x110
[ 80.355410][ T5417] ? check_panic_on_warn+0x1f/0xb0
[ 80.357307][ T5417] check_panic_on_warn+0xab/0xb0
[ 80.359059][ T5417] end_report+0x117/0x180
[ 80.360556][ T5417] kasan_report+0xe9/0x110
[ 80.362095][ T5417] ? gfs2_invalidate_folio+0x718/0x820
[ 80.363999][ T5417] ? gfs2_invalidate_folio+0x718/0x820
[ 80.365902][ T5417] gfs2_invalidate_folio+0x718/0x820
[ 80.367752][ T5417] ? hlock_class+0x4e/0x130
[ 80.369364][ T5417] ? __pfx_gfs2_invalidate_folio+0x10/0x10
[ 80.371832][ T5417] truncate_cleanup_folio+0x2ac/0x3e0
[ 80.374095][ T5417] truncate_inode_pages_range+0x271/0xe90
[ 80.376533][ T5417] ? __pfx_truncate_inode_pages_range+0x10/0x10
[ 80.379129][ T5417] ? mark_lock+0xb5/0xc60
[ 80.380896][ T5417] ? __pfx___lock_acquire+0x10/0x10
[ 80.383123][ T5417] ? __pfx_mark_lock+0x10/0x10
[ 80.385180][ T5417] ? __pfx_mark_lock+0x10/0x10
[ 80.386864][ T5417] ? mark_held_locks+0x9f/0xe0
[ 80.388556][ T5417] ? _raw_spin_unlock_irq+0x23/0x50
[ 80.390457][ T5417] ? lockdep_hardirqs_on+0x7c/0x110
[ 80.392237][ T5417] gfs2_evict_inode+0x75b/0x1460
[ 80.393984][ T5417] ? __pfx___lock_acquire+0x10/0x10
[ 80.396173][ T5417] ? __pfx_gfs2_evict_inode+0x10/0x10
[ 80.398094][ T5417] ? find_held_lock+0x2d/0x110
[ 80.400072][ T5417] ? evict+0x2b7/0x6c0
[ 80.401472][ T5417] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 80.403372][ T5417] ? do_raw_spin_unlock+0x172/0x230
[ 80.405139][ T5417] ? __pfx_gfs2_evict_inode+0x10/0x10
[ 80.406989][ T5417] evict+0x2ed/0x6c0
[ 80.408341][ T5417] iput.part.0+0x5a8/0x7f0
[ 80.410218][ T5417] ? __pfx_gfs2_drop_inode+0x10/0x10
[ 80.412442][ T5417] iput+0x5c/0x80
[ 80.413733][ T5417] gfs2_put_super+0x2bd/0x760
[ 80.415368][ T5417] ? __pfx_gfs2_put_super+0x10/0x10
[ 80.417374][ T5417] generic_shutdown_super+0x159/0x3d0
[ 80.419643][ T5417] kill_block_super+0x3b/0x90
[ 80.421588][ T5417] gfs2_kill_sb+0x360/0x410
[ 80.423554][ T5417] deactivate_locked_super+0xbe/0x1a0
[ 80.425678][ T5417] deactivate_super+0xde/0x100
[ 80.427709][ T5417] cleanup_mnt+0x222/0x450
[ 80.429351][ T5417] task_work_run+0x14e/0x250
[ 80.431220][ T5417] ? __pfx_task_work_run+0x10/0x10
[ 80.433229][ T5417] syscall_exit_to_user_mode+0x278/0x2a0
[ 80.435491][ T5417] do_syscall_64+0xdc/0x260
[ 80.437330][ T5417] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 80.439613][ T5417] RIP: 0033:0x7fbabdc7f197
[ 80.441157][ T5417] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8
[ 80.447967][ T5417] RSP: 002b:00007fff0016dd38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 80.450990][ T5417] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fbabdc7f197
[ 80.454069][ T5417] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff0016ddf0
[ 80.457187][ T5417] RBP: 00007fff0016ddf0 R08: 0000000000000000 R09: 0000000000000000
[ 80.459864][ T5417] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff0016eeb0
[ 80.462539][ T5417] R13: 00007fbabdcc93b9 R14: 00000000000134ec R15: 0000000000000001
[ 80.465573][ T5417]
[ 80.467470][ T5417] Kernel Offset: disabled
[ 80.468982][ T5417] Rebooting in 86400 seconds..