program: syz_open_dev$sndpcmp(&(0x7f0000000300), 0x1, 0x203) syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file1\x00', 0x10080, &(0x7f0000000000)=ANY=[], 0xfd, 0x6028, &(0x7f000000c6c0)="$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") rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) setxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000340), 0x1, 0x564, &(0x7f0000000c00)="$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") (async) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x0, 0x0, &(0x7f0000000140)) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) fallocate(r0, 0x10, 0x800, 0x8000) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) (async) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000180)=""/105, 0x69) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)={0x440000, 0x11, 0x10}, 0x18) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) (async) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0) write$rfkill(r8, &(0x7f0000000100)={0x0, 0x2, 0x3, 0x1}, 0x8) (async) ioctl$TCFLSH(r7, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000680)=0x81) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0xb, 0x3}, @fd={0x66642a85, 0x0, r4}, @flat=@weak_handle={0x77682a85, 0x1115}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000880)='J'}) [ 68.565839][ T5302] Bluetooth: hci0: command tx timeout [ 69.045042][ T5323] loop0: detected capacity change from 0 to 32768 [ 69.131312][ T5324] JFS: metapage_get_blocks failed [ 69.134094][ T5324] ERROR: (device loop0): release_metapage: metapage_write_one() failed [ 69.134094][ T5324] [ 69.166397][ T5324] ERROR: (device loop0): remounting filesystem as read-only [ 69.175517][ T5324] ================================================================== [ 69.178925][ T5324] BUG: KASAN: slab-use-after-free in release_metapage+0x760/0xac0 [ 69.182071][ T5324] Read of size 8 at addr ffff888042c25cc0 by task syz.0.0/5324 [ 69.185397][ T5324] [ 69.186442][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 69.186457][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.186464][ T5324] Call Trace: [ 69.186472][ T5324] [ 69.186479][ T5324] dump_stack_lvl+0x189/0x250 [ 69.186498][ T5324] ? __virt_addr_valid+0x1c8/0x5c0 [ 69.186512][ T5324] ? rcu_is_watching+0x15/0xb0 [ 69.186524][ T5324] ? __kasan_check_byte+0x12/0x40 [ 69.186539][ T5324] ? __pfx_dump_stack_lvl+0x10/0x10 [ 69.186550][ T5324] ? rcu_is_watching+0x15/0xb0 [ 69.186560][ T5324] ? lock_release+0x4b/0x3e0 [ 69.186571][ T5324] ? __virt_addr_valid+0x1c8/0x5c0 [ 69.186582][ T5324] ? __virt_addr_valid+0x4a5/0x5c0 [ 69.186594][ T5324] print_report+0xca/0x240 [ 69.186607][ T5324] ? release_metapage+0x760/0xac0 [ 69.186618][ T5324] kasan_report+0x118/0x150 [ 69.186633][ T5324] ? release_metapage+0x760/0xac0 [ 69.186646][ T5324] release_metapage+0x760/0xac0 [ 69.186658][ T5324] ? rcu_is_watching+0x15/0xb0 [ 69.186671][ T5324] __jfs_setxattr+0xa6e/0x1120 [ 69.186685][ T5324] ? __pfx___jfs_setxattr+0x10/0x10 [ 69.186694][ T5324] __jfs_xattr_set+0xda/0x170 [ 69.186700][ T5324] ? __pfx___jfs_xattr_set+0x10/0x10 [ 69.186707][ T5324] ? xattr_full_name+0x6f/0x90 [ 69.186714][ T5324] ? jfs_xattr_set+0x33/0x60 [ 69.186719][ T5324] ? __pfx_jfs_xattr_set+0x10/0x10 [ 69.186725][ T5324] __vfs_setxattr+0x43c/0x480 [ 69.186736][ T5324] __vfs_setxattr_noperm+0x12d/0x660 [ 69.186750][ T5324] vfs_setxattr+0x16b/0x2f0 [ 69.186758][ T5324] ? __pfx_vfs_setxattr+0x10/0x10 [ 69.186767][ T5324] filename_setxattr+0x274/0x600 [ 69.186778][ T5324] ? __pfx_filename_setxattr+0x10/0x10 [ 69.186786][ T5324] ? getname_flags+0x1e5/0x540 [ 69.186797][ T5324] path_setxattrat+0x364/0x3a0 [ 69.186805][ T5324] ? __pfx_path_setxattrat+0x10/0x10 [ 69.186818][ T5324] ? rcu_is_watching+0x15/0xb0 [ 69.186828][ T5324] __x64_sys_setxattr+0xbc/0xe0 [ 69.186842][ T5324] do_syscall_64+0xfa/0xfa0 [ 69.186909][ T5324] ? lockdep_hardirqs_on+0x9c/0x150 [ 69.186921][ T5324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.186929][ T5324] ? clear_bhb_loop+0x60/0xb0 [ 69.186936][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.186943][ T5324] RIP: 0033:0x7f0c58b8efc9 [ 69.186952][ T5324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.186959][ T5324] RSP: 002b:00007f0c59952038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 69.186967][ T5324] RAX: ffffffffffffffda RBX: 00007f0c58de6090 RCX: 00007f0c58b8efc9 [ 69.186972][ T5324] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000200000000040 [ 69.186976][ T5324] RBP: 00007f0c58c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 69.186980][ T5324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.186984][ T5324] R13: 00007f0c58de6128 R14: 00007f0c58de6090 R15: 00007fff49469ef8 [ 69.186991][ T5324] [ 69.186993][ T5324] [ 69.318580][ T5324] Allocated by task 5324: [ 69.320650][ T5324] kasan_save_track+0x3e/0x80 [ 69.322879][ T5324] __kasan_slab_alloc+0x6c/0x80 [ 69.325084][ T5324] kmem_cache_alloc_noprof+0x367/0x6e0 [ 69.327507][ T5324] mempool_alloc_noprof+0x1a7/0x510 [ 69.329755][ T5324] __get_metapage+0x509/0xde0 [ 69.331776][ T5324] ea_get+0xb8e/0x1330 [ 69.333577][ T5324] __jfs_setxattr+0x57c/0x1120 [ 69.335779][ T5324] __jfs_xattr_set+0xda/0x170 [ 69.337825][ T5324] __vfs_setxattr+0x43c/0x480 [ 69.339844][ T5324] __vfs_setxattr_noperm+0x12d/0x660 [ 69.342180][ T5324] vfs_setxattr+0x16b/0x2f0 [ 69.344284][ T5324] filename_setxattr+0x274/0x600 [ 69.346524][ T5324] path_setxattrat+0x364/0x3a0 [ 69.348685][ T5324] __x64_sys_setxattr+0xbc/0xe0 [ 69.350895][ T5324] do_syscall_64+0xfa/0xfa0 [ 69.353026][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.355855][ T5324] [ 69.357003][ T5324] Freed by task 78: [ 69.358762][ T5324] kasan_save_track+0x3e/0x80 [ 69.360910][ T5324] __kasan_save_free_info+0x46/0x50 [ 69.363162][ T5324] __kasan_slab_free+0x5c/0x80 [ 69.365322][ T5324] kmem_cache_free+0x19b/0x690 [ 69.367564][ T5324] metapage_release_folio+0x40e/0x540 [ 69.369954][ T5324] shrink_folio_list+0x20ac/0x4c70 [ 69.372100][ T5324] evict_folios+0x471e/0x57c0 [ 69.374229][ T5324] try_to_shrink_lruvec+0x8a3/0xb50 [ 69.376587][ T5324] shrink_one+0x21b/0x7c0 [ 69.378480][ T5324] shrink_node+0x315d/0x3780 [ 69.380357][ T5324] kswapd+0x147c/0x2800 [ 69.382056][ T5324] kthread+0x711/0x8a0 [ 69.383646][ T5324] ret_from_fork+0x4bc/0x870 [ 69.385622][ T5324] ret_from_fork_asm+0x1a/0x30 [ 69.387478][ T5324] [ 69.388429][ T5324] The buggy address belongs to the object at ffff888042c25c98 [ 69.388429][ T5324] which belongs to the cache jfs_mp of size 184 [ 69.393988][ T5324] The buggy address is located 40 bytes inside of [ 69.393988][ T5324] freed 184-byte region [ffff888042c25c98, ffff888042c25d50) [ 69.399930][ T5324] [ 69.401063][ T5324] The buggy address belongs to the physical page: [ 69.403914][ T5324] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x42c25 [ 69.407841][ T5324] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 69.410957][ T5324] page_type: f5(slab) [ 69.412760][ T5324] raw: 04fff00000000000 ffff88801f927c80 dead000000000122 0000000000000000 [ 69.416617][ T5324] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 69.420472][ T5324] page dumped because: kasan: bad access detected [ 69.423363][ T5324] page_owner tracks the page as allocated [ 69.425891][ T5324] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5323, tgid 5322 (syz.0.0), ts 69072504150, free_ts 67105904160 [ 69.434454][ T5324] post_alloc_hook+0x240/0x2a0 [ 69.436653][ T5324] get_page_from_freelist+0x2365/0x2440 [ 69.438994][ T5324] __alloc_frozen_pages_noprof+0x181/0x370 [ 69.441617][ T5324] alloc_pages_mpol+0x232/0x4a0 [ 69.443805][ T5324] allocate_slab+0x96/0x350 [ 69.445977][ T5324] ___slab_alloc+0xe94/0x18a0 [ 69.448131][ T5324] __slab_alloc+0x65/0x100 [ 69.450163][ T5324] kmem_cache_alloc_noprof+0x3f9/0x6e0 [ 69.452557][ T5324] mempool_alloc_noprof+0x1a7/0x510 [ 69.455052][ T5324] __get_metapage+0x509/0xde0 [ 69.457278][ T5324] diReadSpecial+0x25b/0x710 [ 69.459422][ T5324] jfs_mount+0x73/0x870 [ 69.461337][ T5324] jfs_fill_super+0x6bc/0xd80 [ 69.463462][ T5324] get_tree_bdev_flags+0x40e/0x4d0 [ 69.465691][ T5324] vfs_get_tree+0x92/0x2b0 [ 69.467614][ T5324] do_new_mount+0x302/0xa10 [ 69.469738][ T5324] page last free pid 10 tgid 10 stack trace: [ 69.472414][ T5324] __free_frozen_pages+0xbc4/0xd30 [ 69.474859][ T5324] __slab_free+0x2e7/0x390 [ 69.476978][ T5324] qlist_free_all+0x97/0x140 [ 69.479138][ T5324] kasan_quarantine_reduce+0x148/0x160 [ 69.481623][ T5324] __kasan_slab_alloc+0x22/0x80 [ 69.483922][ T5324] kmem_cache_alloc_node_noprof+0x433/0x710 [ 69.486564][ T5324] __alloc_skb+0x112/0x2d0 [ 69.488582][ T5324] mld_newpack+0x13c/0xc40 [ 69.490621][ T5324] add_grhead+0x5a/0x2a0 [ 69.492508][ T5324] add_grec+0x1452/0x1740 [ 69.494539][ T5324] mld_ifc_work+0x6ed/0xd60 [ 69.496547][ T5324] process_scheduled_works+0xae1/0x17b0 [ 69.498970][ T5324] worker_thread+0x8a0/0xda0 [ 69.501042][ T5324] kthread+0x711/0x8a0 [ 69.502898][ T5324] ret_from_fork+0x4bc/0x870 [ 69.504924][ T5324] ret_from_fork_asm+0x1a/0x30 [ 69.507146][ T5324] [ 69.508268][ T5324] Memory state around the buggy address: [ 69.510881][ T5324] ffff888042c25b80: fc fc fc fc 00 00 00 00 00 00 00 00 00 00 00 00 [ 69.514530][ T5324] ffff888042c25c00: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc [ 69.517961][ T5324] >ffff888042c25c80: fc fc fc fa fb fb fb fb fb fb fb fb fb fb fb fb [ 69.521218][ T5324] ^ [ 69.523913][ T5324] ffff888042c25d00: fb fb fb fb fb fb fb fb fb fb fc fc fc fc fc fc [ 69.527182][ T5324] ffff888042c25d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 69.530725][ T5324] ================================================================== [ 69.608449][ T5324] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 69.611632][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 69.615847][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.620709][ T5324] Call Trace: [ 69.622269][ T5324] [ 69.623610][ T5324] dump_stack_lvl+0x99/0x250 [ 69.625720][ T5324] ? __asan_memcpy+0x40/0x70 [ 69.627802][ T5324] ? __pfx_dump_stack_lvl+0x10/0x10 [ 69.630241][ T5324] ? __pfx__printk+0x10/0x10 [ 69.632562][ T5324] vpanic+0x237/0x6d0 [ 69.634530][ T5324] ? __pfx_vpanic+0x10/0x10 [ 69.636610][ T5324] ? preempt_schedule_common+0x83/0xd0 [ 69.639031][ T5324] ? preempt_schedule+0xae/0xc0 [ 69.641153][ T5324] panic+0xb9/0xc0 [ 69.642854][ T5324] ? __pfx_panic+0x10/0x10 [ 69.644970][ T5324] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 69.647903][ T5324] ? release_metapage+0x760/0xac0 [ 69.650285][ T5324] check_panic_on_warn+0x89/0xb0 [ 69.652538][ T5324] ? release_metapage+0x760/0xac0 [ 69.655152][ T5324] end_report+0x78/0x160 [ 69.657444][ T5324] kasan_report+0x129/0x150 [ 69.659577][ T5324] ? release_metapage+0x760/0xac0 [ 69.661829][ T5324] release_metapage+0x760/0xac0 [ 69.664129][ T5324] ? rcu_is_watching+0x15/0xb0 [ 69.666429][ T5324] __jfs_setxattr+0xa6e/0x1120 [ 69.668594][ T5324] ? __pfx___jfs_setxattr+0x10/0x10 [ 69.670918][ T5324] __jfs_xattr_set+0xda/0x170 [ 69.672922][ T5324] ? __pfx___jfs_xattr_set+0x10/0x10 [ 69.675236][ T5324] ? xattr_full_name+0x6f/0x90 [ 69.677259][ T5324] ? jfs_xattr_set+0x33/0x60 [ 69.679420][ T5324] ? __pfx_jfs_xattr_set+0x10/0x10 [ 69.681833][ T5324] __vfs_setxattr+0x43c/0x480 [ 69.684010][ T5324] __vfs_setxattr_noperm+0x12d/0x660 [ 69.686384][ T5324] vfs_setxattr+0x16b/0x2f0 [ 69.688436][ T5324] ? __pfx_vfs_setxattr+0x10/0x10 [ 69.691116][ T5324] filename_setxattr+0x274/0x600 [ 69.693583][ T5324] ? __pfx_filename_setxattr+0x10/0x10 [ 69.696077][ T5324] ? getname_flags+0x1e5/0x540 [ 69.698322][ T5324] path_setxattrat+0x364/0x3a0 [ 69.700433][ T5324] ? __pfx_path_setxattrat+0x10/0x10 [ 69.702830][ T5324] ? rcu_is_watching+0x15/0xb0 [ 69.705071][ T5324] __x64_sys_setxattr+0xbc/0xe0 [ 69.707286][ T5324] do_syscall_64+0xfa/0xfa0 [ 69.709439][ T5324] ? lockdep_hardirqs_on+0x9c/0x150 [ 69.711860][ T5324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.714783][ T5324] ? clear_bhb_loop+0x60/0xb0 [ 69.717348][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.720491][ T5324] RIP: 0033:0x7f0c58b8efc9 [ 69.722572][ T5324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.731306][ T5324] RSP: 002b:00007f0c59952038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 69.735168][ T5324] RAX: ffffffffffffffda RBX: 00007f0c58de6090 RCX: 00007f0c58b8efc9 [ 69.738761][ T5324] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000200000000040 [ 69.742359][ T5324] RBP: 00007f0c58c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 69.745961][ T5324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.749641][ T5324] R13: 00007f0c58de6128 R14: 00007f0c58de6090 R15: 00007fff49469ef8 [ 69.753650][ T5324] [ 69.755749][ T5324] Kernel Offset: disabled [ 69.758030][ T5324] Rebooting in 86400 seconds..