Warning: Permanently added '[localhost]:1896' (ED25519) to the list of known hosts.
2024/09/12 16:13:28 ignoring optional flag "sandboxArg"="0"
2024/09/12 16:13:29 parsed 1 programs
[ 90.679881][ T40] audit: type=1400 audit(1726157609.116:134): avc: denied { getattr } for pid=5454 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 90.834319][ T40] audit: type=1400 audit(1726157609.266:135): avc: denied { unlink } for pid=5463 comm="syz-executor" name="swap-file" dev="sda1" ino=1931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 92.965701][ T834] cfg80211: failed to load regulatory.db
[ 93.085107][ T5463] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
2024/09/12 16:13:31 executed programs: 0
[ 93.152880][ T4770] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 93.157953][ T4770] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 93.171117][ T4770] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 93.175524][ T4770] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 93.180251][ T4770] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 93.183705][ T4770] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 93.421107][ T5474] chnl_net:caif_netlink_parms(): no params data found
[ 93.577352][ T5474] bridge0: port 1(bridge_slave_0) entered blocking state
[ 93.581291][ T5474] bridge0: port 1(bridge_slave_0) entered disabled state
[ 93.588305][ T5474] bridge_slave_0: entered allmulticast mode
[ 93.593602][ T5474] bridge_slave_0: entered promiscuous mode
[ 93.602313][ T5474] bridge0: port 2(bridge_slave_1) entered blocking state
[ 93.608330][ T5474] bridge0: port 2(bridge_slave_1) entered disabled state
[ 93.612662][ T5474] bridge_slave_1: entered allmulticast mode
[ 93.616862][ T5474] bridge_slave_1: entered promiscuous mode
[ 93.675253][ T5474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 93.690160][ T5474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 93.773248][ T5474] team0: Port device team_slave_0 added
[ 93.791570][ T5474] team0: Port device team_slave_1 added
[ 93.900945][ T5474] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 93.907619][ T5474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 93.920655][ T5474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 93.929077][ T5474] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 93.932176][ T5474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 93.945070][ T5474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 94.033304][ T5474] hsr_slave_0: entered promiscuous mode
[ 94.037761][ T5474] hsr_slave_1: entered promiscuous mode
[ 95.277193][ T4770] Bluetooth: hci0: command tx timeout
[ 95.286450][ T5474] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 95.321823][ T5474] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 95.346369][ T5474] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 95.355033][ T5474] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 95.501970][ T5474] 8021q: adding VLAN 0 to HW filter on device bond0
[ 95.537412][ T5474] 8021q: adding VLAN 0 to HW filter on device team0
[ 95.552880][ T60] bridge0: port 1(bridge_slave_0) entered blocking state
[ 95.556236][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 95.568907][ T60] bridge0: port 2(bridge_slave_1) entered blocking state
[ 95.573465][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 95.638810][ T5474] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 95.840558][ T5474] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 95.898566][ T5474] veth0_vlan: entered promiscuous mode
[ 95.912429][ T5474] veth1_vlan: entered promiscuous mode
[ 95.958149][ T5474] veth0_macvtap: entered promiscuous mode
[ 95.981745][ T5474] veth1_macvtap: entered promiscuous mode
[ 96.018945][ T5474] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 96.043852][ T5474] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 96.050415][ T5474] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.071193][ T5474] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.075715][ T5474] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.079918][ T5474] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.193315][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 96.198023][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 96.249919][ T1131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 96.253163][ T1131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 96.700855][ T5537] loop0: detected capacity change from 0 to 32768
[ 96.719715][ T40] audit: type=1400 audit(1726157615.136:136): avc: denied { mounton } for pid=5535 comm="syz-executor.0" path="/syzkaller-testdir2058617987/syzkaller.U7c2eg/0/file0" dev="sda1" ino=1939 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 96.761573][ T5537] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 96.781715][ T5537] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 96.800271][ T5537] gfs2: fsid=syz:syz.0: journal 0 mapped with 4 extents in 0ms
[ 96.824754][ T25] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 96.829244][ T25] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 96.908671][ T25] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 79ms
[ 96.913690][ T25] gfs2: fsid=syz:syz.0: jid=0: Done
[ 96.919406][ T5537] gfs2: fsid=syz:syz.0: first mount done, others may mount
[ 97.265478][ T5537] gfs2: fsid=syz:syz.0: found 1 quota changes
[ 97.277604][ T40] audit: type=1400 audit(1726157615.706:137): avc: denied { mount } for pid=5535 comm="syz-executor.0" name="/" dev="loop0" ino=4674 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 97.304416][ T40] audit: type=1400 audit(1726157615.716:138): avc: denied { unmount } for pid=5474 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 97.328268][ T5474] syz-executor.0: attempt to access beyond end of device
[ 97.328268][ T5474] loop0: rw=1, sector=131324, nr_sectors = 4 limit=32768
[ 97.336507][ T5474] gfs2: fsid=syz:syz.0: Error 10 writing to journal, jid=0
[ 97.340779][ T5557] gfs2: fsid=syz:syz.0: about to withdraw this file system
[ 97.354400][ T4770] Bluetooth: hci0: command tx timeout
[ 99.436447][ T4770] Bluetooth: hci0: command tx timeout
[ 101.514983][ T4770] Bluetooth: hci0: command tx timeout
[ 102.396994][ T5557] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[ 102.400727][ T5557] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[ 102.405218][ T5557] gfs2: fsid=syz:syz.0: File system withdrawn
[ 102.407812][ T5557] CPU: 3 UID: 0 PID: 5557 Comm: gfs2_logd/syz:s Not tainted 6.11.0-rc7-syzkaller-g77f587896757 #0
[ 102.412168][ T5557] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 102.417261][ T5557] Call Trace:
[ 102.418705][ T5557]
[ 102.420090][ T5557] dump_stack_lvl+0x16c/0x1f0
[ 102.422317][ T5557] gfs2_withdraw+0xaa3/0x1280
[ 102.424363][ T5557] ? __pfx_gfs2_withdraw+0x10/0x10
[ 102.426429][ T5557] ? gfs2_logd+0xc74/0xfe0
[ 102.428383][ T5557] ? __pfx_lock_release+0x10/0x10
[ 102.430589][ T5557] ? __pfx_autoremove_wake_function+0x10/0x10
[ 102.433236][ T5557] ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 102.435791][ T5557] gfs2_logd+0xdad/0xfe0
[ 102.437696][ T5557] ? __pfx_gfs2_logd+0x10/0x10
[ 102.439787][ T5557] ? __pfx_autoremove_wake_function+0x10/0x10
[ 102.442113][ T5557] ? lockdep_hardirqs_on+0x7c/0x110
[ 102.444112][ T5557] ? __kthread_parkme+0x148/0x220
[ 102.446034][ T5557] ? __pfx_gfs2_logd+0x10/0x10
[ 102.447819][ T5557] kthread+0x2c1/0x3a0
[ 102.449385][ T5557] ? _raw_spin_unlock_irq+0x23/0x50
[ 102.451400][ T5557] ? __pfx_kthread+0x10/0x10
[ 102.453701][ T5557] ret_from_fork+0x45/0x80
[ 102.455782][ T5557] ? __pfx_kthread+0x10/0x10
[ 102.457920][ T5557] ret_from_fork_asm+0x1a/0x30
[ 102.460303][ T5557]
[ 102.464272][ T5474] ==================================================================
[ 102.467831][ T5474] BUG: KASAN: slab-use-after-free in gfs2_invalidate_folio+0x718/0x820
[ 102.471408][ T5474] Read of size 8 at addr ffff888032a37168 by task syz-executor.0/5474
[ 102.477545][ T5474]
[ 102.478622][ T5474] CPU: 2 UID: 0 PID: 5474 Comm: syz-executor.0 Not tainted 6.11.0-rc7-syzkaller-g77f587896757 #0
[ 102.483399][ T5474] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 102.488411][ T5474] Call Trace:
[ 102.505188][ T5474]
[ 102.506411][ T5474] dump_stack_lvl+0x116/0x1f0
[ 102.508552][ T5474] print_report+0xc3/0x620
[ 102.510503][ T5474] ? __virt_addr_valid+0x5e/0x590
[ 102.512704][ T5474] ? __phys_addr+0xc6/0x150
[ 102.515021][ T5474] kasan_report+0xd9/0x110
[ 102.517716][ T5474] ? gfs2_invalidate_folio+0x718/0x820
[ 102.520262][ T5474] ? gfs2_invalidate_folio+0x718/0x820
[ 102.522787][ T5474] gfs2_invalidate_folio+0x718/0x820
[ 102.525247][ T5474] ? const_folio_flags.constprop.0+0x56/0x150
[ 102.528047][ T5474] ? __pfx_gfs2_invalidate_folio+0x10/0x10
[ 102.530911][ T5474] truncate_cleanup_folio+0x3dc/0x4b0
[ 102.533457][ T5474] truncate_inode_pages_range+0x271/0xe80
[ 102.536051][ T5474] ? __pfx_truncate_inode_pages_range+0x10/0x10
[ 102.538478][ T5474] ? mark_lock+0xb5/0xc60
[ 102.540228][ T5474] ? __pfx___lock_acquire+0x10/0x10
[ 102.542739][ T5474] ? __pfx_mark_lock+0x10/0x10
[ 102.545123][ T5474] ? mark_held_locks+0x9f/0xe0
[ 102.546978][ T5474] ? _raw_spin_unlock_irq+0x23/0x50
[ 102.549122][ T5474] ? lockdep_hardirqs_on+0x7c/0x110
[ 102.551023][ T5474] gfs2_evict_inode+0x75b/0x1430
[ 102.553672][ T5474] ? __pfx_gfs2_evict_inode+0x10/0x10
[ 102.556069][ T5474] ? find_held_lock+0x2d/0x110
[ 102.558015][ T5474] ? evict+0x361/0x8c0
[ 102.559575][ T5474] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 102.561577][ T5474] ? do_raw_spin_unlock+0x172/0x230
[ 102.563602][ T5474] ? __pfx_gfs2_evict_inode+0x10/0x10
[ 102.565757][ T5474] evict+0x398/0x8c0
[ 102.567310][ T5474] ? __pfx_evict+0x10/0x10
[ 102.569500][ T5474] ? __pfx_lock_release+0x10/0x10
[ 102.571794][ T5474] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 102.575146][ T5474] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 102.578319][ T5474] iput.part.0+0x5a8/0x7f0
[ 102.580423][ T5474] ? __pfx_gfs2_drop_inode+0x10/0x10
[ 102.582984][ T5474] iput+0x5c/0x80
[ 102.584596][ T5474] gfs2_put_super+0x2b8/0x750
[ 102.586556][ T5474] ? __pfx_gfs2_put_super+0x10/0x10
[ 102.588842][ T5474] generic_shutdown_super+0x159/0x3d0
[ 102.591491][ T5474] kill_block_super+0x3b/0x90
[ 102.593745][ T5474] gfs2_kill_sb+0x360/0x410
[ 102.595736][ T5474] deactivate_locked_super+0xbe/0x1a0
[ 102.598282][ T5474] deactivate_super+0xde/0x100
[ 102.600457][ T5474] cleanup_mnt+0x222/0x450
[ 102.602581][ T5474] task_work_run+0x14e/0x250
[ 102.604520][ T5474] ? __pfx_task_work_run+0x10/0x10
[ 102.607045][ T5474] syscall_exit_to_user_mode+0x27b/0x2a0
[ 102.609617][ T5474] do_syscall_64+0xda/0x250
[ 102.611765][ T5474] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 102.614451][ T5474] RIP: 0033:0x7fa82dc7f197
[ 102.616390][ T5474] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8
[ 102.625345][ T5474] RSP: 002b:00007ffe33de5c98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 102.629485][ T5474] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fa82dc7f197
[ 102.634033][ T5474] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe33de5d50
[ 102.638024][ T5474] RBP: 00007ffe33de5d50 R08: 0000000000000000 R09: 0000000000000000
[ 102.642541][ T5474] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe33de6e10
[ 102.647099][ T5474] R13: 00007fa82dcc93b9 R14: 00000000000177a7 R15: 0000000000000001
[ 102.651381][ T5474]
[ 102.653178][ T5474]
[ 102.654568][ T5474] Allocated by task 5474:
[ 102.657101][ T5474] kasan_save_stack+0x33/0x60
[ 102.659797][ T5474] kasan_save_track+0x14/0x30
[ 102.662308][ T5474] __kasan_slab_alloc+0x89/0x90
[ 102.665146][ T5474] kmem_cache_alloc_noprof+0x121/0x2f0
[ 102.668175][ T5474] gfs2_trans_add_data+0x4b3/0x7f0
[ 102.670316][ T5474] gfs2_unstuff_dinode+0xad9/0x1460
[ 102.672944][ T5474] gfs2_adjust_quota+0x122/0xbe0
[ 102.675673][ T5474] do_sync+0xa99/0xd30
[ 102.678061][ T5474] gfs2_quota_sync+0x326/0x570
[ 102.680535][ T5474] gfs2_sync_fs+0x44/0xb0
[ 102.682641][ T5474] sync_filesystem+0x10d/0x290
[ 102.685441][ T5474] generic_shutdown_super+0x7e/0x3d0
[ 102.687785][ T5474] kill_block_super+0x3b/0x90
[ 102.689882][ T5474] gfs2_kill_sb+0x360/0x410
[ 102.691980][ T5474] deactivate_locked_super+0xbe/0x1a0
[ 102.694676][ T5474] deactivate_super+0xde/0x100
[ 102.697154][ T5474] cleanup_mnt+0x222/0x450
[ 102.699128][ T5474] task_work_run+0x14e/0x250
[ 102.701276][ T5474] syscall_exit_to_user_mode+0x27b/0x2a0
[ 102.703684][ T5474] do_syscall_64+0xda/0x250
[ 102.705635][ T5474] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 102.708222][ T5474]
[ 102.709250][ T5474] Freed by task 5474:
[ 102.710949][ T5474] kasan_save_stack+0x33/0x60
[ 102.713098][ T5474] kasan_save_track+0x14/0x30
[ 102.715324][ T5474] kasan_save_free_info+0x3b/0x60
[ 102.717476][ T5474] poison_slab_object+0xf7/0x160
[ 102.719678][ T5474] __kasan_slab_free+0x32/0x50
[ 102.721955][ T5474] kmem_cache_free+0x12f/0x3a0
[ 102.724296][ T5474] gfs2_log_flush+0x1545/0x29a0
[ 102.726592][ T5474] do_sync+0x555/0xd30
[ 102.728313][ T5474] gfs2_quota_sync+0x326/0x570
[ 102.730412][ T5474] gfs2_sync_fs+0x44/0xb0
[ 102.732629][ T5474] sync_filesystem+0x10d/0x290
[ 102.734656][ T5474] generic_shutdown_super+0x7e/0x3d0
[ 102.737200][ T5474] kill_block_super+0x3b/0x90
[ 102.739387][ T5474] gfs2_kill_sb+0x360/0x410
[ 102.742052][ T5474] deactivate_locked_super+0xbe/0x1a0
[ 102.745190][ T5474] deactivate_super+0xde/0x100
[ 102.747996][ T5474] cleanup_mnt+0x222/0x450
[ 102.750115][ T5474] task_work_run+0x14e/0x250
[ 102.752312][ T5474] syscall_exit_to_user_mode+0x27b/0x2a0
[ 102.754681][ T5474] do_syscall_64+0xda/0x250
[ 102.756879][ T5474] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 102.759561][ T5474]
[ 102.760683][ T5474] The buggy address belongs to the object at ffff888032a37150
[ 102.760683][ T5474] which belongs to the cache gfs2_bufdata of size 80
[ 102.767390][ T5474] The buggy address is located 24 bytes inside of
[ 102.767390][ T5474] freed 80-byte region [ffff888032a37150, ffff888032a371a0)
[ 102.772587][ T5474]
[ 102.773562][ T5474] The buggy address belongs to the physical page:
[ 102.776071][ T5474] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x32a37
[ 102.779660][ T5474] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 102.782794][ T5474] page_type: 0xfdffffff(slab)
[ 102.784831][ T5474] raw: 00fff00000000000 ffff888022c97180 dead000000000122 0000000000000000
[ 102.788025][ T5474] raw: 0000000000000000 0000000080240024 00000001fdffffff 0000000000000000
[ 102.791204][ T5474] page dumped because: kasan: bad access detected
[ 102.794412][ T5474] page_owner tracks the page as allocated
[ 102.797513][ T5474] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5474, tgid 5474 (syz-executor.0), ts 97325360401, free_ts 97303827222
[ 102.807370][ T5474] post_alloc_hook+0x2d1/0x350
[ 102.809760][ T5474] get_page_from_freelist+0x1351/0x2e50
[ 102.812432][ T5474] __alloc_pages_noprof+0x22b/0x2460
[ 102.815048][ T5474] alloc_slab_page+0x4e/0xf0
[ 102.817050][ T5474] new_slab+0x84/0x260
[ 102.818792][ T5474] ___slab_alloc+0xdac/0x1870
[ 102.820909][ T5474] __slab_alloc.constprop.0+0x56/0xb0
[ 102.824014][ T5474] kmem_cache_alloc_noprof+0x2a7/0x2f0
[ 102.826524][ T5474] gfs2_trans_add_meta+0xade/0xf50
[ 102.829042][ T5474] gfs2_alloc_blocks+0x46c/0x19c0
[ 102.831382][ T5474] gfs2_unstuff_dinode+0x499/0x1460
[ 102.833793][ T5474] gfs2_adjust_quota+0x122/0xbe0
[ 102.836129][ T5474] do_sync+0xa99/0xd30
[ 102.838620][ T5474] gfs2_quota_sync+0x326/0x570
[ 102.841529][ T5474] gfs2_sync_fs+0x44/0xb0
[ 102.844399][ T5474] sync_filesystem+0x10d/0x290
[ 102.846548][ T5474] page last free pid 40 tgid 40 stack trace:
[ 102.849298][ T5474] free_unref_page+0x64a/0xe40
[ 102.851608][ T5474] __folio_put+0x31c/0x3e0
[ 102.854015][ T5474] free_page_and_swap_cache+0x249/0x2c0
[ 102.856494][ T5474] tlb_remove_table_rcu+0x89/0xe0
[ 102.858699][ T5474] rcu_core+0x828/0x16b0
[ 102.860552][ T5474] handle_softirqs+0x216/0x8f0
[ 102.862678][ T5474] irq_exit_rcu+0xbb/0x120
[ 102.864940][ T5474] sysvec_apic_timer_interrupt+0x95/0xb0
[ 102.867989][ T5474] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 102.870740][ T5474]
[ 102.871811][ T5474] Memory state around the buggy address:
[ 102.875009][ T5474] ffff888032a37000: fa fb fb fb fb fb fb fb fb fb fc fc fc fc fa fb
[ 102.879697][ T5474] ffff888032a37080: fb fb fb fb fb fb fb fb fc fc fc fc fa fb fb fb
[ 102.883834][ T5474] >ffff888032a37100: fb fb fb fb fb fb fc fc fc fc fa fb fb fb fb fb
[ 102.888247][ T5474] ^
[ 102.891538][ T5474] ffff888032a37180: fb fb fb fb fc fc fc fc fa fb fb fb fb fb fb fb
[ 102.895223][ T5474] ffff888032a37200: fb fb fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 102.898413][ T5474] ==================================================================
[ 102.902536][ T5474] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 102.906251][ T5474] CPU: 2 UID: 0 PID: 5474 Comm: syz-executor.0 Not tainted 6.11.0-rc7-syzkaller-g77f587896757 #0
[ 102.911330][ T5474] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 102.917273][ T5474] Call Trace:
[ 102.918798][ T5474]
[ 102.920249][ T5474] dump_stack_lvl+0x3d/0x1f0
[ 102.922430][ T5474] panic+0x6dc/0x7c0
[ 102.924100][ T5474] ? mark_held_locks+0x9f/0xe0
[ 102.925901][ T5474] ? __pfx_panic+0x10/0x10
[ 102.928255][ T5474] ? irqentry_exit+0x3b/0x90
[ 102.930439][ T5474] ? lockdep_hardirqs_on+0x7c/0x110
[ 102.932819][ T5474] ? check_panic_on_warn+0x1f/0xb0
[ 102.935118][ T5474] check_panic_on_warn+0xab/0xb0
[ 102.937530][ T5474] end_report+0x117/0x180
[ 102.939912][ T5474] kasan_report+0xe9/0x110
[ 102.941911][ T5474] ? gfs2_invalidate_folio+0x718/0x820
[ 102.944547][ T5474] ? gfs2_invalidate_folio+0x718/0x820
[ 102.947284][ T5474] gfs2_invalidate_folio+0x718/0x820
[ 102.950131][ T5474] ? const_folio_flags.constprop.0+0x56/0x150
[ 102.953844][ T5474] ? __pfx_gfs2_invalidate_folio+0x10/0x10
[ 102.956573][ T5474] truncate_cleanup_folio+0x3dc/0x4b0
[ 102.958879][ T5474] truncate_inode_pages_range+0x271/0xe80
[ 102.961369][ T5474] ? __pfx_truncate_inode_pages_range+0x10/0x10
[ 102.964640][ T5474] ? mark_lock+0xb5/0xc60
[ 102.966497][ T5474] ? __pfx___lock_acquire+0x10/0x10
[ 102.968721][ T5474] ? __pfx_mark_lock+0x10/0x10
[ 102.970806][ T5474] ? mark_held_locks+0x9f/0xe0
[ 102.972910][ T5474] ? _raw_spin_unlock_irq+0x23/0x50
[ 102.975187][ T5474] ? lockdep_hardirqs_on+0x7c/0x110
[ 102.977433][ T5474] gfs2_evict_inode+0x75b/0x1430
[ 102.979861][ T5474] ? __pfx_gfs2_evict_inode+0x10/0x10
[ 102.982215][ T5474] ? find_held_lock+0x2d/0x110
[ 102.984301][ T5474] ? evict+0x361/0x8c0
[ 102.986168][ T5474] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 102.988744][ T5474] ? do_raw_spin_unlock+0x172/0x230
[ 102.991006][ T5474] ? __pfx_gfs2_evict_inode+0x10/0x10
[ 102.993194][ T5474] evict+0x398/0x8c0
[ 102.994715][ T5474] ? __pfx_evict+0x10/0x10
[ 102.996353][ T5474] ? __pfx_lock_release+0x10/0x10
[ 102.998338][ T5474] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 103.000564][ T5474] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 103.002948][ T5474] iput.part.0+0x5a8/0x7f0
[ 103.004863][ T5474] ? __pfx_gfs2_drop_inode+0x10/0x10
[ 103.006765][ T5474] iput+0x5c/0x80
[ 103.008286][ T5474] gfs2_put_super+0x2b8/0x750
[ 103.010267][ T5474] ? __pfx_gfs2_put_super+0x10/0x10
[ 103.012514][ T5474] generic_shutdown_super+0x159/0x3d0
[ 103.015006][ T5474] kill_block_super+0x3b/0x90
[ 103.016885][ T5474] gfs2_kill_sb+0x360/0x410
[ 103.018552][ T5474] deactivate_locked_super+0xbe/0x1a0
[ 103.020567][ T5474] deactivate_super+0xde/0x100
[ 103.022344][ T5474] cleanup_mnt+0x222/0x450
[ 103.024308][ T5474] task_work_run+0x14e/0x250
[ 103.026396][ T5474] ? __pfx_task_work_run+0x10/0x10
[ 103.028646][ T5474] syscall_exit_to_user_mode+0x27b/0x2a0
[ 103.031097][ T5474] do_syscall_64+0xda/0x250
[ 103.033244][ T5474] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 103.036466][ T5474] RIP: 0033:0x7fa82dc7f197
[ 103.038887][ T5474] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8
[ 103.048030][ T5474] RSP: 002b:00007ffe33de5c98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 103.052670][ T5474] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fa82dc7f197
[ 103.056702][ T5474] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe33de5d50
[ 103.061473][ T5474] RBP: 00007ffe33de5d50 R08: 0000000000000000 R09: 0000000000000000
[ 103.066057][ T5474] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe33de6e10
[ 103.069879][ T5474] R13: 00007fa82dcc93b9 R14: 00000000000177a7 R15: 0000000000000001
[ 103.073374][ T5474]
[ 103.075370][ T5474] Kernel Offset: disabled
[ 103.077610][ T5474] Rebooting in 86400 seconds..