program: ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000000)) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$unix(0x1, 0x1, 0x0) syz_mount_image$jfs(&(0x7f00000000c0), &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101c842, &(0x7f0000000300)=ANY=[], 0x51, 0x5fbc, &(0x7f0000003100)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) setxattr$incfs_metadata(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e) r3 = gettid() rt_sigqueueinfo(r3, 0x21, &(0x7f0000000180)={0x0, 0x0, 0xfffffffb}) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000040)=r3) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) write(r0, &(0x7f0000000100)="29000000140005b7ff000000040860eb0101b6ff021596db2d6d6974b5d728aa4b5d02c26ed638eeb7", 0x29) [ 68.619925][ T4672] Bluetooth: hci0: command tx timeout [ 68.901757][ T5324] loop0: detected capacity change from 0 to 32768 [ 68.926915][ T5324] ======================================================= [ 68.926915][ T5324] WARNING: The mand mount option has been deprecated and [ 68.926915][ T5324] and is ignored by this kernel. Remove the mand [ 68.926915][ T5324] option from the mount to silence this warning. [ 68.926915][ T5324] ======================================================= [ 69.022130][ T5324] JFS: metapage_get_blocks failed [ 69.024469][ T5324] ERROR: (device loop0): release_metapage: metapage_write_one() failed [ 69.024469][ T5324] [ 69.053659][ T5324] ERROR: (device loop0): remounting filesystem as read-only [ 69.056790][ T5324] ================================================================== [ 69.060252][ T5324] BUG: KASAN: slab-use-after-free in release_metapage+0x760/0xac0 [ 69.063628][ T5324] Read of size 8 at addr ffff888019e7f028 by task syz.0.0/5324 [ 69.066806][ T5324] [ 69.067902][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 69.067918][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.067926][ T5324] Call Trace: [ 69.067933][ T5324] [ 69.067938][ T5324] dump_stack_lvl+0x189/0x250 [ 69.067955][ T5324] ? __virt_addr_valid+0x1c8/0x5c0 [ 69.067966][ T5324] ? rcu_is_watching+0x15/0xb0 [ 69.067974][ T5324] ? __kasan_check_byte+0x12/0x40 [ 69.067984][ T5324] ? __pfx_dump_stack_lvl+0x10/0x10 [ 69.067996][ T5324] ? rcu_is_watching+0x15/0xb0 [ 69.068008][ T5324] ? lock_release+0x4b/0x3e0 [ 69.068020][ T5324] ? __virt_addr_valid+0x1c8/0x5c0 [ 69.068033][ T5324] ? __virt_addr_valid+0x4a5/0x5c0 [ 69.068047][ T5324] print_report+0xca/0x240 [ 69.068060][ T5324] ? release_metapage+0x760/0xac0 [ 69.068073][ T5324] kasan_report+0x118/0x150 [ 69.068088][ T5324] ? release_metapage+0x760/0xac0 [ 69.068103][ T5324] release_metapage+0x760/0xac0 [ 69.068117][ T5324] ? rcu_is_watching+0x15/0xb0 [ 69.068129][ T5324] __jfs_setxattr+0xa6e/0x1120 [ 69.068142][ T5324] ? __pfx___jfs_setxattr+0x10/0x10 [ 69.068152][ T5324] ? register_lock_class+0x51/0x320 [ 69.068162][ T5324] __jfs_xattr_set+0xda/0x170 [ 69.068172][ T5324] ? __pfx___jfs_xattr_set+0x10/0x10 [ 69.068182][ T5324] ? xattr_full_name+0x6f/0x90 [ 69.068191][ T5324] ? jfs_xattr_set+0x33/0x60 [ 69.068200][ T5324] ? __pfx_jfs_xattr_set+0x10/0x10 [ 69.068210][ T5324] __vfs_setxattr+0x43c/0x480 [ 69.068227][ T5324] __vfs_setxattr_noperm+0x12d/0x660 [ 69.068242][ T5324] vfs_setxattr+0x16b/0x2f0 [ 69.068256][ T5324] ? __pfx_vfs_setxattr+0x10/0x10 [ 69.068270][ T5324] filename_setxattr+0x274/0x600 [ 69.068286][ T5324] ? __pfx_filename_setxattr+0x10/0x10 [ 69.068299][ T5324] ? getname_flags+0x1e5/0x540 [ 69.068314][ T5324] path_setxattrat+0x364/0x3a0 [ 69.068327][ T5324] ? __pfx_path_setxattrat+0x10/0x10 [ 69.068346][ T5324] __x64_sys_setxattr+0xbc/0xe0 [ 69.068361][ T5324] do_syscall_64+0xfa/0xfa0 [ 69.068416][ T5324] ? lockdep_hardirqs_on+0x9c/0x150 [ 69.068429][ T5324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.068441][ T5324] ? clear_bhb_loop+0x60/0xb0 [ 69.068453][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.068463][ T5324] RIP: 0033:0x7ff92958efc9 [ 69.068475][ T5324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.068484][ T5324] RSP: 002b:00007ff92a38b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 69.068496][ T5324] RAX: ffffffffffffffda RBX: 00007ff9297e5fa0 RCX: 00007ff92958efc9 [ 69.068503][ T5324] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 00002000000002c0 [ 69.068510][ T5324] RBP: 00007ff929611f91 R08: 0000000000000000 R09: 0000000000000000 [ 69.068517][ T5324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.068523][ T5324] R13: 00007ff9297e6038 R14: 00007ff9297e5fa0 R15: 00007fffe55d3d08 [ 69.068535][ T5324] [ 69.068539][ T5324] [ 69.201848][ T5324] Allocated by task 5324: [ 69.203752][ T5324] kasan_save_track+0x3e/0x80 [ 69.205843][ T5324] __kasan_slab_alloc+0x6c/0x80 [ 69.207977][ T5324] kmem_cache_alloc_noprof+0x367/0x6e0 [ 69.210385][ T5324] mempool_alloc_noprof+0x1a7/0x510 [ 69.212691][ T5324] __get_metapage+0x509/0xde0 [ 69.214749][ T5324] ea_get+0xb8e/0x1330 [ 69.216489][ T5324] __jfs_setxattr+0x57c/0x1120 [ 69.218581][ T5324] __jfs_xattr_set+0xda/0x170 [ 69.220655][ T5324] __vfs_setxattr+0x43c/0x480 [ 69.222775][ T5324] __vfs_setxattr_noperm+0x12d/0x660 [ 69.225087][ T5324] vfs_setxattr+0x16b/0x2f0 [ 69.227100][ T5324] filename_setxattr+0x274/0x600 [ 69.229286][ T5324] path_setxattrat+0x364/0x3a0 [ 69.231413][ T5324] __x64_sys_setxattr+0xbc/0xe0 [ 69.233507][ T5324] do_syscall_64+0xfa/0xfa0 [ 69.235448][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.237991][ T5324] [ 69.239157][ T5324] Freed by task 79: [ 69.240851][ T5324] kasan_save_track+0x3e/0x80 [ 69.243027][ T5324] __kasan_save_free_info+0x46/0x50 [ 69.245334][ T5324] __kasan_slab_free+0x5c/0x80 [ 69.247531][ T5324] kmem_cache_free+0x19b/0x690 [ 69.249634][ T5324] metapage_release_folio+0x40e/0x540 [ 69.252034][ T5324] shrink_folio_list+0x20ac/0x4c70 [ 69.254163][ T5324] evict_folios+0x471e/0x57c0 [ 69.256095][ T5324] try_to_shrink_lruvec+0x8a3/0xb50 [ 69.258245][ T5324] shrink_one+0x21b/0x7c0 [ 69.260083][ T5324] shrink_node+0x315d/0x3780 [ 69.262091][ T5324] kswapd+0x147c/0x2800 [ 69.264029][ T5324] kthread+0x711/0x8a0 [ 69.265694][ T5324] ret_from_fork+0x4bc/0x870 [ 69.267586][ T5324] ret_from_fork_asm+0x1a/0x30 [ 69.269633][ T5324] [ 69.270735][ T5324] The buggy address belongs to the object at ffff888019e7f000 [ 69.270735][ T5324] which belongs to the cache jfs_mp of size 184 [ 69.276591][ T5324] The buggy address is located 40 bytes inside of [ 69.276591][ T5324] freed 184-byte region [ffff888019e7f000, ffff888019e7f0b8) [ 69.282246][ T5324] [ 69.283369][ T5324] The buggy address belongs to the physical page: [ 69.286089][ T5324] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x19e7f [ 69.289820][ T5324] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 69.292842][ T5324] page_type: f5(slab) [ 69.294613][ T5324] raw: 00fff00000000000 ffff88801facec80 dead000000000122 0000000000000000 [ 69.298253][ T5324] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 69.301922][ T5324] page dumped because: kasan: bad access detected [ 69.304727][ T5324] page_owner tracks the page as allocated [ 69.307156][ T5324] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5324, tgid 5323 (syz.0.0), ts 69022038475, free_ts 68631144110 [ 69.315001][ T5324] post_alloc_hook+0x240/0x2a0 [ 69.317096][ T5324] get_page_from_freelist+0x2365/0x2440 [ 69.319534][ T5324] __alloc_frozen_pages_noprof+0x181/0x370 [ 69.322026][ T5324] alloc_pages_mpol+0x232/0x4a0 [ 69.324025][ T5324] allocate_slab+0x96/0x350 [ 69.325865][ T5324] ___slab_alloc+0xe94/0x18a0 [ 69.327866][ T5324] __slab_alloc+0x65/0x100 [ 69.329816][ T5324] kmem_cache_alloc_noprof+0x3f9/0x6e0 [ 69.331989][ T5324] mempool_alloc_noprof+0x1a7/0x510 [ 69.334356][ T5324] __get_metapage+0x509/0xde0 [ 69.336666][ T5324] ea_get+0xb8e/0x1330 [ 69.338494][ T5324] __jfs_setxattr+0x57c/0x1120 [ 69.340593][ T5324] __jfs_xattr_set+0xda/0x170 [ 69.342766][ T5324] __vfs_setxattr+0x43c/0x480 [ 69.344891][ T5324] __vfs_setxattr_noperm+0x12d/0x660 [ 69.347037][ T5324] vfs_setxattr+0x16b/0x2f0 [ 69.348877][ T5324] page last free pid 79 tgid 79 stack trace: [ 69.351321][ T5324] free_unref_folios+0xdb3/0x14f0 [ 69.353311][ T5324] shrink_folio_list+0x295e/0x4c70 [ 69.355352][ T5324] evict_folios+0x471e/0x57c0 [ 69.357284][ T5324] try_to_shrink_lruvec+0x8a3/0xb50 [ 69.359685][ T5324] shrink_one+0x21b/0x7c0 [ 69.361613][ T5324] shrink_node+0x315d/0x3780 [ 69.363656][ T5324] kswapd+0x147c/0x2800 [ 69.365508][ T5324] kthread+0x711/0x8a0 [ 69.367386][ T5324] ret_from_fork+0x4bc/0x870 [ 69.369453][ T5324] ret_from_fork_asm+0x1a/0x30 [ 69.371569][ T5324] [ 69.372598][ T5324] Memory state around the buggy address: [ 69.375096][ T5324] ffff888019e7ef00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 69.378477][ T5324] ffff888019e7ef80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 69.381885][ T5324] >ffff888019e7f000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 69.385290][ T5324] ^ [ 69.387620][ T5324] ffff888019e7f080: fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc [ 69.391207][ T5324] ffff888019e7f100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 69.394718][ T5324] ================================================================== [ 69.504528][ T5324] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 69.507816][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 69.511833][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.516563][ T5324] Call Trace: [ 69.518097][ T5324] [ 69.519472][ T5324] dump_stack_lvl+0x99/0x250 [ 69.521587][ T5324] ? __asan_memcpy+0x40/0x70 [ 69.523679][ T5324] ? __pfx_dump_stack_lvl+0x10/0x10 [ 69.526107][ T5324] ? __pfx__printk+0x10/0x10 [ 69.528206][ T5324] vpanic+0x237/0x6d0 [ 69.530054][ T5324] ? __pfx_vpanic+0x10/0x10 [ 69.532129][ T5324] ? preempt_schedule_common+0x83/0xd0 [ 69.534606][ T5324] ? preempt_schedule+0xae/0xc0 [ 69.536826][ T5324] panic+0xb9/0xc0 [ 69.538550][ T5324] ? __pfx_panic+0x10/0x10 [ 69.540534][ T5324] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 69.543376][ T5324] ? release_metapage+0x760/0xac0 [ 69.545595][ T5324] check_panic_on_warn+0x89/0xb0 [ 69.547777][ T5324] ? release_metapage+0x760/0xac0 [ 69.550035][ T5324] end_report+0x78/0x160 [ 69.551855][ T5324] kasan_report+0x129/0x150 [ 69.553876][ T5324] ? release_metapage+0x760/0xac0 [ 69.556061][ T5324] release_metapage+0x760/0xac0 [ 69.558259][ T5324] ? rcu_is_watching+0x15/0xb0 [ 69.560415][ T5324] __jfs_setxattr+0xa6e/0x1120 [ 69.562530][ T5324] ? __pfx___jfs_setxattr+0x10/0x10 [ 69.564781][ T5324] ? register_lock_class+0x51/0x320 [ 69.567001][ T5324] __jfs_xattr_set+0xda/0x170 [ 69.569102][ T5324] ? __pfx___jfs_xattr_set+0x10/0x10 [ 69.571372][ T5324] ? xattr_full_name+0x6f/0x90 [ 69.573460][ T5324] ? jfs_xattr_set+0x33/0x60 [ 69.575506][ T5324] ? __pfx_jfs_xattr_set+0x10/0x10 [ 69.577801][ T5324] __vfs_setxattr+0x43c/0x480 [ 69.579905][ T5324] __vfs_setxattr_noperm+0x12d/0x660 [ 69.582169][ T5324] vfs_setxattr+0x16b/0x2f0 [ 69.584209][ T5324] ? __pfx_vfs_setxattr+0x10/0x10 [ 69.586220][ T5324] filename_setxattr+0x274/0x600 [ 69.588161][ T5324] ? __pfx_filename_setxattr+0x10/0x10 [ 69.590227][ T5324] ? getname_flags+0x1e5/0x540 [ 69.592084][ T5324] path_setxattrat+0x364/0x3a0 [ 69.594020][ T5324] ? __pfx_path_setxattrat+0x10/0x10 [ 69.596164][ T5324] __x64_sys_setxattr+0xbc/0xe0 [ 69.598084][ T5324] do_syscall_64+0xfa/0xfa0 [ 69.600134][ T5324] ? lockdep_hardirqs_on+0x9c/0x150 [ 69.602460][ T5324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.605075][ T5324] ? clear_bhb_loop+0x60/0xb0 [ 69.607260][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.609874][ T5324] RIP: 0033:0x7ff92958efc9 [ 69.611897][ T5324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.619947][ T5324] RSP: 002b:00007ff92a38b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 69.623669][ T5324] RAX: ffffffffffffffda RBX: 00007ff9297e5fa0 RCX: 00007ff92958efc9 [ 69.627153][ T5324] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 00002000000002c0 [ 69.630632][ T5324] RBP: 00007ff929611f91 R08: 0000000000000000 R09: 0000000000000000 [ 69.634046][ T5324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.637436][ T5324] R13: 00007ff9297e6038 R14: 00007ff9297e5fa0 R15: 00007fffe55d3d08 [ 69.640884][ T5324] [ 69.642639][ T5324] Kernel Offset: disabled [ 69.644550][ T5324] Rebooting in 86400 seconds..