program: unshare(0x2000680) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x420401, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={'rose', 0x0}, 0x10000, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='comm\x00') r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r3 = socket(0x1d, 0x2, 0x6) bind$tipc(r3, &(0x7f0000000480)=@id, 0x10) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x1000) r4 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') lseek(r4, 0x2004, 0x4) syz_clone(0x411, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000f) syz_mount_image$jfs(&(0x7f0000005d40), &(0x7f0000005d80)='./file7\x00', 0x10810, &(0x7f0000000400)=ANY=[], 0x1, 0x5e1a, &(0x7f0000014780)="$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") r5 = open$dir(&(0x7f0000001240)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r5, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="020000000100040000000000040001000000000010000200000000002000000000000000fe826ef289b9f13e28adedfa294b1d6feab3442e19c38e1629f949283d200d5c6d87a4bcbd1ec276070c183905c5b487cd59b8c5db1cbdd8b3385c0a21ffa03c692fa181fbd5dcc67cc17c26053d353c10e76db59bc50c"], 0x24, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000240)=0x2) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r6, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r6, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r7 = syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x501180) ioctl$EVIOCSCLOCKID(r7, 0x40084504, &(0x7f0000ffcffc)) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file7\x00', r0, 0x4000, r0}, 0x18) [ 76.952223][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.955283][ T4666] Bluetooth: hci0: command tx timeout [ 76.971062][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.630643][ T5318] loop0: detected capacity change from 0 to 32768 [ 77.716201][ T5318] ================================================================== [ 77.719792][ T5318] BUG: KASAN: slab-use-after-free in release_metapage+0x760/0xac0 [ 77.723322][ T5318] Read of size 8 at addr ffff888019fb9ad0 by task syz.0.0/5318 [ 77.726458][ T5318] [ 77.727506][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 77.727521][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.727528][ T5318] Call Trace: [ 77.727535][ T5318] [ 77.727541][ T5318] dump_stack_lvl+0x189/0x250 [ 77.727562][ T5318] ? __virt_addr_valid+0x1c8/0x5c0 [ 77.727578][ T5318] ? rcu_is_watching+0x15/0xb0 [ 77.727593][ T5318] ? __kasan_check_byte+0x12/0x40 [ 77.727608][ T5318] ? __pfx_dump_stack_lvl+0x10/0x10 [ 77.727621][ T5318] ? rcu_is_watching+0x15/0xb0 [ 77.727635][ T5318] ? lock_release+0x4b/0x3e0 [ 77.727646][ T5318] ? __virt_addr_valid+0x1c8/0x5c0 [ 77.727659][ T5318] ? __virt_addr_valid+0x4a5/0x5c0 [ 77.727675][ T5318] print_report+0xca/0x240 [ 77.727689][ T5318] ? release_metapage+0x760/0xac0 [ 77.727704][ T5318] kasan_report+0x118/0x150 [ 77.727718][ T5318] ? rcu_is_watching+0x15/0xb0 [ 77.727730][ T5318] ? release_metapage+0x760/0xac0 [ 77.727747][ T5318] release_metapage+0x760/0xac0 [ 77.727762][ T5318] __jfs_setxattr+0xa6e/0x1120 [ 77.727775][ T5318] ? __pfx___jfs_setxattr+0x10/0x10 [ 77.727789][ T5318] ? posix_acl_to_xattr+0x359/0x3e0 [ 77.727803][ T5318] __jfs_set_acl+0x121/0x1c0 [ 77.727817][ T5318] jfs_set_acl+0x1d6/0x320 [ 77.727827][ T5318] ? __pfx_evm_inode_set_acl+0x10/0x10 [ 77.727838][ T5318] ? __pfx_jfs_set_acl+0x10/0x10 [ 77.727857][ T5318] ? down_write+0x162/0x1f0 [ 77.727914][ T5318] ? __pfx_down_write+0x10/0x10 [ 77.727932][ T5318] ? evm_revalidate_status+0x4f/0xb0 [ 77.727948][ T5318] ? posix_acl_valid+0x352/0x3e0 [ 77.727963][ T5318] vfs_set_acl+0x887/0xb00 [ 77.727980][ T5318] do_set_acl+0xf6/0x190 [ 77.727996][ T5318] file_setxattr+0x234/0x2b0 [ 77.728014][ T5318] path_setxattrat+0x327/0x3a0 [ 77.728029][ T5318] ? __pfx_path_setxattrat+0x10/0x10 [ 77.728048][ T5318] __x64_sys_fsetxattr+0xbc/0xe0 [ 77.728066][ T5318] do_syscall_64+0xfa/0xfa0 [ 77.728079][ T5318] ? lockdep_hardirqs_on+0x9c/0x150 [ 77.728094][ T5318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.728104][ T5318] ? clear_bhb_loop+0x60/0xb0 [ 77.728116][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.728128][ T5318] RIP: 0033:0x7f491638efc9 [ 77.728140][ T5318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.728149][ T5318] RSP: 002b:00007f491713f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 77.728163][ T5318] RAX: ffffffffffffffda RBX: 00007f49165e5fa0 RCX: 00007f491638efc9 [ 77.728171][ T5318] RDX: 0000200000000180 RSI: 0000200000000040 RDI: 0000000000000005 [ 77.728178][ T5318] RBP: 00007f4916411f91 R08: 0000000000000000 R09: 0000000000000000 [ 77.728185][ T5318] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000000 [ 77.728191][ T5318] R13: 00007f49165e6038 R14: 00007f49165e5fa0 R15: 00007ffde757fcd8 [ 77.728204][ T5318] [ 77.728208][ T5318] [ 77.850147][ T5318] Allocated by task 5318: [ 77.852048][ T5318] kasan_save_track+0x3e/0x80 [ 77.854077][ T5318] __kasan_slab_alloc+0x6c/0x80 [ 77.856155][ T5318] kmem_cache_alloc_noprof+0x367/0x6e0 [ 77.858424][ T5318] mempool_alloc_noprof+0x1a7/0x510 [ 77.860498][ T5318] __get_metapage+0x509/0xde0 [ 77.862408][ T5318] ea_get+0xb8e/0x1330 [ 77.864003][ T5318] __jfs_setxattr+0x57c/0x1120 [ 77.865953][ T5318] __jfs_set_acl+0x121/0x1c0 [ 77.867997][ T5318] jfs_set_acl+0x1d6/0x320 [ 77.869987][ T5318] vfs_set_acl+0x887/0xb00 [ 77.871915][ T5318] do_set_acl+0xf6/0x190 [ 77.873744][ T5318] file_setxattr+0x234/0x2b0 [ 77.875779][ T5318] path_setxattrat+0x327/0x3a0 [ 77.877786][ T5318] __x64_sys_fsetxattr+0xbc/0xe0 [ 77.879923][ T5318] do_syscall_64+0xfa/0xfa0 [ 77.881905][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.884499][ T5318] [ 77.885514][ T5318] Freed by task 77: [ 77.887122][ T5318] kasan_save_track+0x3e/0x80 [ 77.889077][ T5318] __kasan_save_free_info+0x46/0x50 [ 77.891348][ T5318] __kasan_slab_free+0x5c/0x80 [ 77.893356][ T5318] kmem_cache_free+0x19b/0x690 [ 77.895421][ T5318] metapage_release_folio+0x40e/0x540 [ 77.897653][ T5318] shrink_folio_list+0x20ac/0x4c70 [ 77.899845][ T5318] evict_folios+0x471e/0x57c0 [ 77.902490][ T5318] try_to_shrink_lruvec+0x8a3/0xb50 [ 77.904628][ T5318] shrink_one+0x21b/0x7c0 [ 77.906495][ T5318] shrink_node+0x315d/0x3780 [ 77.908535][ T5318] kswapd+0x147c/0x2800 [ 77.910334][ T5318] kthread+0x711/0x8a0 [ 77.912044][ T5318] ret_from_fork+0x4bc/0x870 [ 77.913959][ T5318] ret_from_fork_asm+0x1a/0x30 [ 77.916077][ T5318] [ 77.917133][ T5318] The buggy address belongs to the object at ffff888019fb9aa8 [ 77.917133][ T5318] which belongs to the cache jfs_mp of size 184 [ 77.922805][ T5318] The buggy address is located 40 bytes inside of [ 77.922805][ T5318] freed 184-byte region [ffff888019fb9aa8, ffff888019fb9b60) [ 77.928542][ T5318] [ 77.929545][ T5318] The buggy address belongs to the physical page: [ 77.932028][ T5318] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x19fb9 [ 77.935503][ T5318] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 77.938559][ T5318] page_type: f5(slab) [ 77.940334][ T5318] raw: 00fff00000000000 ffff88801fa12c80 dead000000000122 0000000000000000 [ 77.944095][ T5318] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 77.947690][ T5318] page dumped because: kasan: bad access detected [ 77.950435][ T5318] page_owner tracks the page as allocated [ 77.952848][ T5318] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5318, tgid 5317 (syz.0.0), ts 77664727289, free_ts 77482838893 [ 77.961099][ T5318] post_alloc_hook+0x240/0x2a0 [ 77.963203][ T5318] get_page_from_freelist+0x2365/0x2440 [ 77.965657][ T5318] __alloc_frozen_pages_noprof+0x181/0x370 [ 77.968176][ T5318] alloc_pages_mpol+0x232/0x4a0 [ 77.970362][ T5318] allocate_slab+0x96/0x350 [ 77.972369][ T5318] ___slab_alloc+0xe94/0x18a0 [ 77.974427][ T5318] __slab_alloc+0x65/0x100 [ 77.976441][ T5318] kmem_cache_alloc_noprof+0x3f9/0x6e0 [ 77.978808][ T5318] mempool_alloc_noprof+0x1a7/0x510 [ 77.981052][ T5318] __get_metapage+0x509/0xde0 [ 77.983113][ T5318] diReadSpecial+0x25b/0x710 [ 77.985085][ T5318] jfs_mount+0x73/0x870 [ 77.986936][ T5318] jfs_fill_super+0x6bc/0xd80 [ 77.988955][ T5318] get_tree_bdev_flags+0x40e/0x4d0 [ 77.991249][ T5318] vfs_get_tree+0x92/0x2b0 [ 77.993251][ T5318] do_new_mount+0x302/0xa10 [ 77.995333][ T5318] page last free pid 77 tgid 77 stack trace: [ 77.998010][ T5318] free_unref_folios+0xdb3/0x14f0 [ 78.000270][ T5318] shrink_folio_list+0x44ab/0x4c70 [ 78.002628][ T5318] evict_folios+0x471e/0x57c0 [ 78.004785][ T5318] try_to_shrink_lruvec+0x8a3/0xb50 [ 78.007117][ T5318] shrink_one+0x21b/0x7c0 [ 78.009062][ T5318] shrink_node+0x315d/0x3780 [ 78.011190][ T5318] kswapd+0x147c/0x2800 [ 78.012999][ T5318] kthread+0x711/0x8a0 [ 78.014859][ T5318] ret_from_fork+0x4bc/0x870 [ 78.016953][ T5318] ret_from_fork_asm+0x1a/0x30 [ 78.019049][ T5318] [ 78.020122][ T5318] Memory state around the buggy address: [ 78.022603][ T5318] ffff888019fb9980: fc fc fc fc fc fc 00 00 00 00 00 00 00 00 00 00 [ 78.025961][ T5318] ffff888019fb9a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc [ 78.029253][ T5318] >ffff888019fb9a80: fc fc fc fc fc fa fb fb fb fb fb fb fb fb fb fb [ 78.032856][ T5318] ^ [ 78.035761][ T5318] ffff888019fb9b00: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 78.039317][ T5318] ffff888019fb9b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 78.042812][ T5318] ================================================================== [ 78.201861][ T5318] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 78.205113][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 78.208951][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 78.213744][ T5318] Call Trace: [ 78.215313][ T5318] [ 78.216653][ T5318] dump_stack_lvl+0x99/0x250 [ 78.218736][ T5318] ? __asan_memcpy+0x40/0x70 [ 78.220828][ T5318] ? __pfx_dump_stack_lvl+0x10/0x10 [ 78.223173][ T5318] ? __pfx__printk+0x10/0x10 [ 78.225215][ T5318] vpanic+0x237/0x6d0 [ 78.227051][ T5318] ? __pfx_vpanic+0x10/0x10 [ 78.229073][ T5318] ? preempt_schedule_common+0x83/0xd0 [ 78.231451][ T5318] ? preempt_schedule+0xae/0xc0 [ 78.233665][ T5318] panic+0xb9/0xc0 [ 78.235387][ T5318] ? __pfx_panic+0x10/0x10 [ 78.237351][ T5318] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 78.240202][ T5318] ? release_metapage+0x760/0xac0 [ 78.242435][ T5318] check_panic_on_warn+0x89/0xb0 [ 78.244688][ T5318] ? release_metapage+0x760/0xac0 [ 78.246971][ T5318] end_report+0x78/0x160 [ 78.248873][ T5318] kasan_report+0x129/0x150 [ 78.250950][ T5318] ? rcu_is_watching+0x15/0xb0 [ 78.253088][ T5318] ? release_metapage+0x760/0xac0 [ 78.255254][ T5318] release_metapage+0x760/0xac0 [ 78.257460][ T5318] __jfs_setxattr+0xa6e/0x1120 [ 78.259610][ T5318] ? __pfx___jfs_setxattr+0x10/0x10 [ 78.261938][ T5318] ? posix_acl_to_xattr+0x359/0x3e0 [ 78.264272][ T5318] __jfs_set_acl+0x121/0x1c0 [ 78.266252][ T5318] jfs_set_acl+0x1d6/0x320 [ 78.268263][ T5318] ? __pfx_evm_inode_set_acl+0x10/0x10 [ 78.270702][ T5318] ? __pfx_jfs_set_acl+0x10/0x10 [ 78.272895][ T5318] ? down_write+0x162/0x1f0 [ 78.274899][ T5318] ? __pfx_down_write+0x10/0x10 [ 78.277048][ T5318] ? evm_revalidate_status+0x4f/0xb0 [ 78.279441][ T5318] ? posix_acl_valid+0x352/0x3e0 [ 78.281635][ T5318] vfs_set_acl+0x887/0xb00 [ 78.283579][ T5318] do_set_acl+0xf6/0x190 [ 78.285472][ T5318] file_setxattr+0x234/0x2b0 [ 78.287584][ T5318] path_setxattrat+0x327/0x3a0 [ 78.289728][ T5318] ? __pfx_path_setxattrat+0x10/0x10 [ 78.292087][ T5318] __x64_sys_fsetxattr+0xbc/0xe0 [ 78.294322][ T5318] do_syscall_64+0xfa/0xfa0 [ 78.296221][ T5318] ? lockdep_hardirqs_on+0x9c/0x150 [ 78.298479][ T5318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.301233][ T5318] ? clear_bhb_loop+0x60/0xb0 [ 78.303370][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.305918][ T5318] RIP: 0033:0x7f491638efc9 [ 78.307934][ T5318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.316445][ T5318] RSP: 002b:00007f491713f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 78.320134][ T5318] RAX: ffffffffffffffda RBX: 00007f49165e5fa0 RCX: 00007f491638efc9 [ 78.323622][ T5318] RDX: 0000200000000180 RSI: 0000200000000040 RDI: 0000000000000005 [ 78.327138][ T5318] RBP: 00007f4916411f91 R08: 0000000000000000 R09: 0000000000000000 [ 78.330637][ T5318] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000000 [ 78.334172][ T5318] R13: 00007f49165e6038 R14: 00007f49165e5fa0 R15: 00007ffde757fcd8 [ 78.337715][ T5318] [ 78.339451][ T5318] Kernel Offset: disabled [ 78.341387][ T5318] Rebooting in 86400 seconds..