program: syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x2000, &(0x7f0000000240), 0x1, 0x1a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000080)={@desc={0x1, 0x0, @desc4}}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}]}}}]}]}], {0x14}}, 0xe0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x400000000000003, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfbffffff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}}, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000080)={r1, 0x2}) [ 90.958319][ T5315] gfs2: fsid=syz:syz.0: file system withdrawn [ 90.971762][ T5319] ------------[ cut here ]------------ [ 90.974314][ T5319] kernel BUG at fs/gfs2/super.c:76! [ 90.977754][ T5319] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 90.980888][ T5319] CPU: 0 UID: 0 PID: 5319 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 90.985643][ T5319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 90.989857][ T5319] RIP: 0010:gfs2_jindex_free+0x44e/0x450 [ 90.992220][ T5319] Code: 18 5f 8d 07 cc 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c e2 fd ff ff e8 32 79 0c fe e9 d8 fd ff ff e8 b8 77 8a 07 e8 d3 ab a0 fd 90 <0f> 0b 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 [ 91.001081][ T5319] RSP: 0018:ffffc9000e42fbc0 EFLAGS: 00010293 [ 91.004764][ T5319] RAX: ffffffff8424f9ad RBX: dead000000000122 RCX: ffff8880009124c0 [ 91.008939][ T5319] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 00000000ffffffff [ 91.012407][ T5319] RBP: ffffc9000e42fc80 R08: ffff8880125ece37 R09: 1ffff110024bd9c6 [ 91.015687][ T5319] R10: dffffc0000000000 R11: ffffed10024bd9c7 R12: ffff8880125ec908 [ 91.019229][ T5319] R13: dffffc0000000000 R14: ffff888037632200 R15: ffff888037632278 [ 91.023479][ T5319] FS: 00007f7a98e076c0(0000) GS:ffff88808ca59000(0000) knlGS:0000000000000000 [ 91.028346][ T5319] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 91.031556][ T5319] CR2: 00005574b867f668 CR3: 0000000011ce1000 CR4: 0000000000352ef0 [ 91.035187][ T5319] Call Trace: [ 91.036749][ T5319] [ 91.038138][ T5319] ? __pfx_gfs2_jindex_free+0x10/0x10 [ 91.040668][ T5319] ? gfs2_clear_rgrpd+0x710/0x740 [ 91.043792][ T5319] gfs2_put_super+0x7d9/0x860 [ 91.046451][ T5319] ? __pfx_gfs2_put_super+0x10/0x10 [ 91.048995][ T5319] generic_shutdown_super+0x13d/0x2d0 [ 91.051541][ T5319] kill_block_super+0x44/0x90 [ 91.053698][ T5319] deactivate_locked_super+0xbc/0x130 [ 91.056171][ T5319] cleanup_mnt+0x437/0x4d0 [ 91.058329][ T5319] ? _raw_spin_unlock_irq+0x23/0x50 [ 91.061369][ T5319] task_work_run+0x1d9/0x270 [ 91.064035][ T5319] ? __pfx_task_work_run+0x10/0x10 [ 91.066881][ T5319] exit_to_user_mode_loop+0xed/0x480 [ 91.069620][ T5319] ? rcu_is_watching+0x15/0xb0 [ 91.072043][ T5319] do_syscall_64+0x32d/0xf80 [ 91.074146][ T5319] ? trace_irq_disable+0x3b/0x150 [ 91.076532][ T5319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.079435][ T5319] ? clear_bhb_loop+0x40/0x90 [ 91.082036][ T5319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.084722][ T5319] RIP: 0033:0x7f7a97f9c799 [ 91.086748][ T5319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.095756][ T5319] RSP: 002b:00007f7a98e06fe8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 91.099463][ T5319] RAX: 0000000000000000 RBX: 00007f7a98216090 RCX: 00007f7a97f9c799 [ 91.103013][ T5319] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 91.106838][ T5319] RBP: 00007f7a98032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 91.110704][ T5319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.114049][ T5319] R13: 00007f7a98216128 R14: 00007f7a98216090 R15: 00007fffe3bd94e8 [ 91.117537][ T5319] [ 91.118976][ T5319] Modules linked in: [ 91.121371][ T5319] ---[ end trace 0000000000000000 ]--- [ 91.130703][ T5319] RIP: 0010:gfs2_jindex_free+0x44e/0x450 [ 91.133319][ T5319] Code: 18 5f 8d 07 cc 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c e2 fd ff ff e8 32 79 0c fe e9 d8 fd ff ff e8 b8 77 8a 07 e8 d3 ab a0 fd 90 <0f> 0b 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 [ 91.142155][ T5319] RSP: 0018:ffffc9000e42fbc0 EFLAGS: 00010293 [ 91.145175][ T5319] RAX: ffffffff8424f9ad RBX: dead000000000122 RCX: ffff8880009124c0 [ 91.149628][ T5319] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 00000000ffffffff [ 91.153152][ T5319] RBP: ffffc9000e42fc80 R08: ffff8880125ece37 R09: 1ffff110024bd9c6 [ 91.157249][ T5319] R10: dffffc0000000000 R11: ffffed10024bd9c7 R12: ffff8880125ec908 [ 91.161376][ T5319] R13: dffffc0000000000 R14: ffff888037632200 R15: ffff888037632278 [ 91.165729][ T5319] FS: 00007f7a98e076c0(0000) GS:ffff88808ca59000(0000) knlGS:0000000000000000 [ 91.170401][ T5319] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 91.175337][ T5319] CR2: 00005574b867f668 CR3: 0000000011ce1000 CR4: 0000000000352ef0 [ 91.179227][ T5319] Kernel panic - not syncing: Fatal exception [ 91.182163][ T5319] Kernel Offset: disabled [ 91.184163][ T5319] Rebooting in 86400 seconds.. [ 83.750797][ T5297] Bluetooth: hci0: command tx timeout [ 83.860089][ T5317] loop0: detected capacity change from 0 to 8