program: syz_mount_image$bcachefs(&(0x7f00000058c0), &(0x7f0000005900)='./file0\x00', 0x0, &(0x7f0000005940), 0x1, 0x58ad, &(0x7f0000005980)="$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") [ 90.854874][ T5107] Bluetooth: hci0: command tx timeout [ 92.480179][ T5120] loop0: detected capacity change from 0 to 32768 [ 92.849890][ T5120] ================================================================== [ 92.852920][ T5120] BUG: KASAN: slab-out-of-bounds in bch2_dev_journal_init+0x7a1/0xb20 [ 92.855959][ T5120] Write of size 8 at addr ffff8880399af830 by task syz.0.0/5120 [ 92.858855][ T5120] [ 92.859976][ T5120] CPU: 0 UID: 0 PID: 5120 Comm: syz.0.0 Not tainted 6.11.0-rc3-syzkaller-00338-gc3f2d783a459 #0 [ 92.864377][ T5120] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 92.868425][ T5120] Call Trace: [ 92.869683][ T5120] [ 92.870818][ T5120] dump_stack_lvl+0x241/0x360 [ 92.872673][ T5120] ? __pfx_dump_stack_lvl+0x10/0x10 [ 92.874583][ T5120] ? __pfx__printk+0x10/0x10 [ 92.876244][ T5120] ? _printk+0xd5/0x120 [ 92.877734][ T5120] ? __virt_addr_valid+0x183/0x530 [ 92.879791][ T5120] ? __virt_addr_valid+0x183/0x530 [ 92.881665][ T5120] print_report+0x169/0x550 [ 92.883322][ T5120] ? __virt_addr_valid+0x183/0x530 [ 92.885246][ T5120] ? __virt_addr_valid+0x183/0x530 [ 92.887363][ T5120] ? __virt_addr_valid+0x45f/0x530 [ 92.889252][ T5120] ? __phys_addr+0xba/0x170 [ 92.890917][ T5120] ? bch2_dev_journal_init+0x7a1/0xb20 [ 92.893043][ T5120] kasan_report+0x143/0x180 [ 92.894799][ T5120] ? bch2_dev_journal_init+0x7a1/0xb20 [ 92.896800][ T5120] bch2_dev_journal_init+0x7a1/0xb20 [ 92.898847][ T5120] __bch2_dev_attach_bdev+0x217/0x340 [ 92.900889][ T5120] bch2_dev_attach_bdev+0x2a8/0x6f0 [ 92.902859][ T5120] ? __pfx_bch2_dev_attach_bdev+0x10/0x10 [ 92.905064][ T5120] ? down_write+0x18c/0x220 [ 92.906698][ T5120] ? __pfx_down_write+0x10/0x10 [ 92.908530][ T5120] ? bch2_fs_open+0x330/0xdf0 [ 92.910240][ T5120] bch2_fs_open+0x97c/0xdf0 [ 92.911941][ T5120] ? __pfx_bch2_fs_open+0x10/0x10 [ 92.913773][ T5120] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 92.916081][ T5120] ? __pfx_bch2_test_super+0x10/0x10 [ 92.918023][ T5120] ? sget+0x2b8/0x620 [ 92.919546][ T5120] ? __pfx_bch2_noset_super+0x10/0x10 [ 92.921660][ T5120] bch2_fs_get_tree+0x731/0x1700 [ 92.923447][ T5120] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 92.925490][ T5120] ? generic_parse_monolithic+0x387/0x400 [ 92.927665][ T5120] ? apparmor_capable+0x13b/0x1b0 [ 92.929526][ T5120] ? bpf_lsm_capable+0x9/0x10 [ 92.931366][ T5120] vfs_get_tree+0x90/0x2a0 [ 92.933193][ T5120] do_new_mount+0x2be/0xb40 [ 92.934952][ T5120] ? __pfx_do_new_mount+0x10/0x10 [ 92.936973][ T5120] __se_sys_mount+0x2d6/0x3c0 [ 92.938954][ T5120] ? __pfx___se_sys_mount+0x10/0x10 [ 92.940758][ T5120] ? exc_page_fault+0x590/0x8c0 [ 92.942514][ T5120] ? __x64_sys_mount+0x20/0xc0 [ 92.944252][ T5120] do_syscall_64+0xf3/0x230 [ 92.946006][ T5120] ? clear_bhb_loop+0x35/0x90 [ 92.948228][ T5120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.950846][ T5120] RIP: 0033:0x7f21d537b0ba [ 92.952747][ T5120] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 7e 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.959892][ T5120] RSP: 002b:00007f21d61b0e68 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 92.963012][ T5120] RAX: ffffffffffffffda RBX: 00007f21d61b0ef0 RCX: 00007f21d537b0ba [ 92.966122][ T5120] RDX: 00000000200058c0 RSI: 0000000020005900 RDI: 00007f21d61b0eb0 [ 92.969116][ T5120] RBP: 00000000200058c0 R08: 00007f21d61b0ef0 R09: 0000000000000000 [ 92.972256][ T5120] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020005900 [ 92.975298][ T5120] R13: 00007f21d61b0eb0 R14: 00000000000058ad R15: 0000000020005940 [ 92.978421][ T5120] [ 92.979567][ T5120] [ 92.980434][ T5120] Allocated by task 5120: [ 92.982077][ T5120] kasan_save_track+0x3f/0x80 [ 92.983862][ T5120] __kasan_kmalloc+0x98/0xb0 [ 92.985682][ T5120] __kmalloc_noprof+0x1fc/0x400 [ 92.987567][ T5120] bch2_dev_journal_init+0x647/0xb20 [ 92.989639][ T5120] __bch2_dev_attach_bdev+0x217/0x340 [ 92.991608][ T5120] bch2_dev_attach_bdev+0x2a8/0x6f0 [ 92.993544][ T5120] bch2_fs_open+0x97c/0xdf0 [ 92.995226][ T5120] bch2_fs_get_tree+0x731/0x1700 [ 92.997176][ T5120] vfs_get_tree+0x90/0x2a0 [ 92.998871][ T5120] do_new_mount+0x2be/0xb40 [ 93.000476][ T5120] __se_sys_mount+0x2d6/0x3c0 [ 93.002084][ T5120] do_syscall_64+0xf3/0x230 [ 93.003643][ T5120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.010336][ T5120] [ 93.011241][ T5120] The buggy address belongs to the object at ffff8880399af800 [ 93.011241][ T5120] which belongs to the cache kmalloc-64 of size 64 [ 93.016022][ T5120] The buggy address is located 0 bytes to the right of [ 93.016022][ T5120] allocated 48-byte region [ffff8880399af800, ffff8880399af830) [ 93.021189][ T5120] [ 93.022110][ T5120] The buggy address belongs to the physical page: [ 93.024447][ T5120] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x399af [ 93.027586][ T5120] ksm flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 93.030333][ T5120] page_type: 0xfdffffff(slab) [ 93.032145][ T5120] raw: 04fff00000000000 ffff8880158418c0 ffffea0000d90e80 dead000000000003 [ 93.035261][ T5120] raw: 0000000000000000 0000000080200020 00000001fdffffff 0000000000000000 [ 93.038439][ T5120] page dumped because: kasan: bad access detected [ 93.040881][ T5120] page_owner tracks the page as allocated [ 93.042908][ T5120] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 4821, tgid 4821 (rm), ts 48209169341, free_ts 48191663352 [ 93.049697][ T5120] post_alloc_hook+0x1f3/0x230 [ 93.051581][ T5120] get_page_from_freelist+0x2e4c/0x2f10 [ 93.053620][ T5120] __alloc_pages_noprof+0x256/0x6c0 [ 93.055584][ T5120] alloc_slab_page+0x5f/0x120 [ 93.057390][ T5120] allocate_slab+0x5a/0x2f0 [ 93.059074][ T5120] ___slab_alloc+0xcd1/0x14b0 [ 93.060917][ T5120] __slab_alloc+0x58/0xa0 [ 93.062521][ T5120] __kmalloc_noprof+0x25a/0x400 [ 93.064336][ T5120] tomoyo_encode+0x26f/0x540 [ 93.066115][ T5120] tomoyo_realpath_from_path+0x59e/0x5e0 [ 93.068223][ T5120] tomoyo_check_open_permission+0x255/0x500 [ 93.070558][ T5120] security_file_open+0x6a/0x750 [ 93.072616][ T5120] do_dentry_open+0x38e/0x1440 [ 93.074349][ T5120] vfs_open+0x3e/0x330 [ 93.075849][ T5120] path_openat+0x2b3e/0x3470 [ 93.077567][ T5120] do_filp_open+0x235/0x490 [ 93.079179][ T5120] page last free pid 4821 tgid 4821 stack trace: [ 93.081362][ T5120] free_unref_folios+0x103a/0x1b00 [ 93.083117][ T5120] folios_put_refs+0x76e/0x860 [ 93.084817][ T5120] free_pages_and_swap_cache+0x2ea/0x690 [ 93.086804][ T5120] tlb_flush_mmu+0x3a3/0x680 [ 93.088449][ T5120] tlb_finish_mmu+0xd4/0x200 [ 93.090033][ T5120] exit_mmap+0x44f/0xc80 [ 93.091311][ T5120] __mmput+0x115/0x390 [ 93.092754][ T5120] exec_mmap+0x680/0x710 [ 93.094364][ T5120] begin_new_exec+0x12c6/0x2050 [ 93.096264][ T5120] load_elf_binary+0x969/0x2680 [ 93.098109][ T5120] bprm_execve+0xaf8/0x1770 [ 93.099847][ T5120] do_execveat_common+0x55f/0x6f0 [ 93.101774][ T5120] __x64_sys_execve+0x92/0xb0 [ 93.103504][ T5120] do_syscall_64+0xf3/0x230 [ 93.105256][ T5120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.107436][ T5120] [ 93.108366][ T5120] Memory state around the buggy address: [ 93.110418][ T5120] ffff8880399af700: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 93.113328][ T5120] ffff8880399af780: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 93.116307][ T5120] >ffff8880399af800: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 93.119316][ T5120] ^ [ 93.121540][ T5120] ffff8880399af880: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 93.124609][ T5120] ffff8880399af900: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 93.127743][ T5120] ================================================================== [ 93.277533][ T5107] Bluetooth: hci0: command tx timeout [ 93.455575][ T5120] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 93.458279][ T5120] CPU: 0 UID: 0 PID: 5120 Comm: syz.0.0 Not tainted 6.11.0-rc3-syzkaller-00338-gc3f2d783a459 #0 [ 93.461839][ T5120] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 93.465564][ T5120] Call Trace: [ 93.466836][ T5120] [ 93.467981][ T5120] dump_stack_lvl+0x241/0x360 [ 93.469789][ T5120] ? __pfx_dump_stack_lvl+0x10/0x10 [ 93.471747][ T5120] ? __pfx__printk+0x10/0x10 [ 93.473362][ T5120] ? preempt_schedule+0xe1/0xf0 [ 93.474906][ T5120] ? vscnprintf+0x5d/0x90 [ 93.476268][ T5120] panic+0x349/0x860 [ 93.477604][ T5120] ? check_panic_on_warn+0x21/0xb0 [ 93.479371][ T5120] ? __pfx_panic+0x10/0x10 [ 93.480982][ T5120] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 93.483073][ T5120] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 93.485253][ T5120] ? print_report+0x502/0x550 [ 93.486896][ T5120] check_panic_on_warn+0x86/0xb0 [ 93.488656][ T5120] ? bch2_dev_journal_init+0x7a1/0xb20 [ 93.490558][ T5120] end_report+0x77/0x160 [ 93.491959][ T5120] kasan_report+0x154/0x180 [ 93.493574][ T5120] ? bch2_dev_journal_init+0x7a1/0xb20 [ 93.495534][ T5120] bch2_dev_journal_init+0x7a1/0xb20 [ 93.497559][ T5120] __bch2_dev_attach_bdev+0x217/0x340 [ 93.499636][ T5120] bch2_dev_attach_bdev+0x2a8/0x6f0 [ 93.501671][ T5120] ? __pfx_bch2_dev_attach_bdev+0x10/0x10 [ 93.503855][ T5120] ? down_write+0x18c/0x220 [ 93.505599][ T5120] ? __pfx_down_write+0x10/0x10 [ 93.507500][ T5120] ? bch2_fs_open+0x330/0xdf0 [ 93.509287][ T5120] bch2_fs_open+0x97c/0xdf0 [ 93.511042][ T5120] ? __pfx_bch2_fs_open+0x10/0x10 [ 93.512967][ T5120] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 93.515514][ T5120] ? __pfx_bch2_test_super+0x10/0x10 [ 93.517500][ T5120] ? sget+0x2b8/0x620 [ 93.519076][ T5120] ? __pfx_bch2_noset_super+0x10/0x10 [ 93.521070][ T5120] bch2_fs_get_tree+0x731/0x1700 [ 93.522957][ T5120] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 93.524955][ T5120] ? generic_parse_monolithic+0x387/0x400 [ 93.527011][ T5120] ? apparmor_capable+0x13b/0x1b0 [ 93.528888][ T5120] ? bpf_lsm_capable+0x9/0x10 [ 93.530659][ T5120] vfs_get_tree+0x90/0x2a0 [ 93.532383][ T5120] do_new_mount+0x2be/0xb40 [ 93.534053][ T5120] ? __pfx_do_new_mount+0x10/0x10 [ 93.535816][ T5120] __se_sys_mount+0x2d6/0x3c0 [ 93.537467][ T5120] ? __pfx___se_sys_mount+0x10/0x10 [ 93.539590][ T5120] ? exc_page_fault+0x590/0x8c0 [ 93.541641][ T5120] ? __x64_sys_mount+0x20/0xc0 [ 93.543348][ T5120] do_syscall_64+0xf3/0x230 [ 93.544863][ T5120] ? clear_bhb_loop+0x35/0x90 [ 93.546394][ T5120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.548404][ T5120] RIP: 0033:0x7f21d537b0ba [ 93.549969][ T5120] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 7e 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.556700][ T5120] RSP: 002b:00007f21d61b0e68 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 93.559607][ T5120] RAX: ffffffffffffffda RBX: 00007f21d61b0ef0 RCX: 00007f21d537b0ba [ 93.562444][ T5120] RDX: 00000000200058c0 RSI: 0000000020005900 RDI: 00007f21d61b0eb0 [ 93.565314][ T5120] RBP: 00000000200058c0 R08: 00007f21d61b0ef0 R09: 0000000000000000 [ 93.568120][ T5120] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020005900 [ 93.570967][ T5120] R13: 00007f21d61b0eb0 R14: 00000000000058ad R15: 0000000020005940 [ 93.573562][ T5120] [ 93.574708][ T5120] Kernel Offset: disabled [ 93.576007][ T5120] Rebooting in 86400 seconds..