program: syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) write$9p(r0, &(0x7f00000001c0)="78bbe544e464673a0448ce75de7c06c063a3f1585480e729ef40f30996b0b90e8e44b186f35b0a", 0x27) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) syz_mount_image$jfs(&(0x7f0000000140), &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1004010, &(0x7f0000000500)=ANY=[], 0xfc, 0x6071, &(0x7f0000001f80)="$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") syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x804444, 0x0, 0xfe, 0x0, &(0x7f0000000480)) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lseek(r3, 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x85}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000380)=@mmap={0x401, 0x2, 0x4, 0x4, 0x4, {0x77359400}, {0x3, 0x2, 0xf, 0x6, 0x3, 0x1, "a91b63d9"}, 0x2, 0x1, {}, 0x101, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f00000005c0)=@fd={0x8, 0x2, 0x4, 0x100011, 0x0, {}, {0x1, 0x0, 0x8, 0xf7, 0xb, 0xa, "e6cc432c"}, 0x8, 0x4, {}, 0xff, 0x0, r5}) getdents(r3, 0x0, 0x58) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r1, 0x3ba0, &(0x7f0000001800)={0x48, 0x8, r6, 0x0, 0x8000000000000001, 0x1000, &(0x7f0000000800)="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", 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r7, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet(r7, &(0x7f0000000180)="4528f4ca900ca489d5a97364d819e8f866d351a2abeaef5856960f2ada186be02089e4cd4ef0768bdd4f326cbf494b917416031cc9b705b3ea73bd592f5abef3356c6b3204bdf4b0a7c295d28a18e42c5c5db58221fc66be3d610cf92be35fefe7d1b9a4d3dc7b83f3779aaecf1175a457e35b02b914718e09ba325512ac65420af3ada83397aaaec54c3da99e2393968f07f0925c75a1c7eb4fc1261858bfe09d71a019b06a54e45af920f299e19cbae153d0dce4e1eed3c7d49f09524144c3936641168b4dcca816629c8164b4a2521c2ea98cd30b419ee73d4cf44419ca273441ce26fcb13f", 0xe7, 0x40000, 0x0, 0x0) [ 95.522790][ T4648] Bluetooth: hci0: command tx timeout [ 96.042391][ T5326] loop0: detected capacity change from 0 to 32768 [ 96.256431][ T5327] ================================================================== [ 96.259970][ T5327] BUG: KASAN: slab-use-after-free in jfs_readdir+0x10a5/0x33f0 [ 96.263283][ T5327] Read of size 8 at addr ffff88803133b9e0 by task syz.0.0/5327 [ 96.266366][ T5327] [ 96.267383][ T5327] CPU: 0 UID: 0 PID: 5327 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 96.267399][ T5327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.267406][ T5327] Call Trace: [ 96.267412][ T5327] [ 96.267419][ T5327] dump_stack_lvl+0xe8/0x150 [ 96.267440][ T5327] print_address_description+0x55/0x1e0 [ 96.267458][ T5327] ? jfs_readdir+0x10a5/0x33f0 [ 96.267473][ T5327] print_report+0x58/0x70 [ 96.267487][ T5327] kasan_report+0x117/0x150 [ 96.267502][ T5327] ? jfs_readdir+0x10a5/0x33f0 [ 96.267519][ T5327] jfs_readdir+0x10a5/0x33f0 [ 96.267533][ T5327] ? check_noncircular+0xda/0x150 [ 96.267549][ T5327] ? lockdep_unlock+0x5d/0xd0 [ 96.267565][ T5327] ? __pfx_jfs_readdir+0x10/0x10 [ 96.267585][ T5327] ? down_write+0x16d/0x200 [ 96.267643][ T5327] ? __pfx_down_write+0x10/0x10 [ 96.267657][ T5327] ? wrap_directory_iterator+0x52/0xe0 [ 96.267674][ T5327] ? __pfx_jfs_readdir+0x10/0x10 [ 96.267690][ T5327] wrap_directory_iterator+0x96/0xe0 [ 96.267707][ T5327] iterate_dir+0x2e2/0x4d0 [ 96.267724][ T5327] __se_sys_getdents+0xf1/0x270 [ 96.267734][ T5327] ? __pfx___se_sys_getdents+0x10/0x10 [ 96.267743][ T5327] ? __pfx_filldir+0x10/0x10 [ 96.267754][ T5327] ? rcu_is_watching+0x15/0xb0 [ 96.267766][ T5327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.267779][ T5327] do_syscall_64+0x174/0x580 [ 96.267790][ T5327] ? trace_irq_disable+0x3b/0x140 [ 96.267803][ T5327] ? clear_bhb_loop+0x40/0x90 [ 96.267822][ T5327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.267832][ T5327] RIP: 0033:0x7fbcf299de99 [ 96.267846][ T5327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.267854][ T5327] RSP: 002b:00007fbcf38f8fe8 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 96.267867][ T5327] RAX: ffffffffffffffda RBX: 00007fbcf2c26090 RCX: 00007fbcf299de99 [ 96.267876][ T5327] RDX: 0000000000000058 RSI: 0000000000000000 RDI: 0000000000000006 [ 96.267883][ T5327] RBP: 00007fbcf2a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 96.267890][ T5327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.267897][ T5327] R13: 00007fbcf2c26128 R14: 00007fbcf2c26090 R15: 00007ffd1c2a1c38 [ 96.267911][ T5327] [ 96.267914][ T5327] [ 96.361758][ T5327] Allocated by task 5326: [ 96.363672][ T5327] kasan_save_track+0x3e/0x80 [ 96.365704][ T5327] __kasan_slab_alloc+0x6c/0x80 [ 96.367794][ T5327] kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 96.370072][ T5327] mempool_alloc_noprof+0x1bf/0x300 [ 96.372301][ T5327] __get_metapage+0x4ed/0xdf0 [ 96.374362][ T5327] dtSplitRoot+0x216/0x1900 [ 96.376284][ T5327] dtInsert+0xedd/0x5cb0 [ 96.378081][ T5327] jfs_mkdir+0x76b/0xb00 [ 96.379837][ T5327] vfs_mkdir+0x406/0x620 [ 96.381558][ T5327] filename_mkdirat+0x285/0x510 [ 96.383596][ T5327] __se_sys_mkdirat+0x35/0x150 [ 96.385573][ T5327] do_syscall_64+0x174/0x580 [ 96.387482][ T5327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.389911][ T5327] [ 96.390958][ T5327] Freed by task 5327: [ 96.392616][ T5327] kasan_save_track+0x3e/0x80 [ 96.394596][ T5327] kasan_save_free_info+0x40/0x50 [ 96.396655][ T5327] __kasan_slab_free+0x5c/0x80 [ 96.398677][ T5327] kmem_cache_free+0x182/0x650 [ 96.400663][ T5327] mempool_free+0xec/0x130 [ 96.402504][ T5327] release_metapage+0x7f5/0xa60 [ 96.404523][ T5327] jfs_readdir+0xe32/0x33f0 [ 96.406428][ T5327] wrap_directory_iterator+0x96/0xe0 [ 96.408569][ T5327] iterate_dir+0x2e2/0x4d0 [ 96.410459][ T5327] __se_sys_getdents+0xf1/0x270 [ 96.412523][ T5327] do_syscall_64+0x174/0x580 [ 96.414518][ T5327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.417005][ T5327] [ 96.418037][ T5327] The buggy address belongs to the object at ffff88803133b9b0 [ 96.418037][ T5327] which belongs to the cache jfs_mp of size 184 [ 96.423549][ T5327] The buggy address is located 48 bytes inside of [ 96.423549][ T5327] freed 184-byte region [ffff88803133b9b0, ffff88803133ba68) [ 96.428983][ T5327] [ 96.430045][ T5327] The buggy address belongs to the physical page: [ 96.432625][ T5327] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3133b [ 96.436185][ T5327] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 96.439144][ T5327] page_type: f5(slab) [ 96.440836][ T5327] raw: 04fff00000000000 ffff888030f5ac80 dead000000000122 0000000000000000 [ 96.444500][ T5327] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 96.448002][ T5327] page dumped because: kasan: bad access detected [ 96.450727][ T5327] page_owner tracks the page as allocated [ 96.453115][ T5327] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 8955558747, free_ts 0 [ 96.460822][ T5327] post_alloc_hook+0x1f9/0x250 [ 96.462819][ T5327] get_page_from_freelist+0x21fa/0x2270 [ 96.465041][ T5327] __alloc_frozen_pages_noprof+0x18d/0x380 [ 96.467523][ T5327] allocate_slab+0x79/0x5e0 [ 96.469447][ T5327] refill_objects+0x2d5/0x350 [ 96.471429][ T5327] __pcs_replace_empty_main+0x2bf/0x6b0 [ 96.473804][ T5327] kmem_cache_alloc_noprof+0x382/0x5f0 [ 96.476262][ T5327] mempool_init_node+0x1f4/0x4f0 [ 96.478416][ T5327] mempool_create_node_noprof+0xb8/0x150 [ 96.480908][ T5327] metapage_init+0xed/0x150 [ 96.482952][ T5327] init_jfs_fs+0xfd/0x4e0 [ 96.484827][ T5327] do_one_initcall+0x250/0x870 [ 96.486818][ T5327] do_initcall_level+0x10a/0x1a0 [ 96.488944][ T5327] do_initcalls+0x59/0xa0 [ 96.490800][ T5327] kernel_init_freeable+0x29d/0x3e0 [ 96.492923][ T5327] kernel_init+0x1d/0x1d0 [ 96.494704][ T5327] page_owner free stack trace missing [ 96.496843][ T5327] [ 96.497905][ T5327] Memory state around the buggy address: [ 96.500212][ T5327] ffff88803133b880: fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00 00 [ 96.503416][ T5327] ffff88803133b900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc [ 96.506649][ T5327] >ffff88803133b980: fc fc fc fc fc fc fa fb fb fb fb fb fb fb fb fb [ 96.509930][ T5327] ^ [ 96.512922][ T5327] ffff88803133ba00: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 96.516272][ T5327] ffff88803133ba80: fc fc fc fc fc fa fb fb fb fb fb fb fb fb fb fb [ 96.519498][ T5327] ================================================================== [ 96.792184][ T5327] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 96.795055][ T5327] CPU: 0 UID: 0 PID: 5327 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 96.798617][ T5327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.802644][ T5327] Call Trace: [ 96.804018][ T5327] [ 96.805199][ T5327] vpanic+0x56c/0xa60 [ 96.806813][ T5327] ? __pfx_vpanic+0x10/0x10 [ 96.808610][ T5327] panic+0xc5/0xd0 [ 96.810168][ T5327] ? __pfx_panic+0x10/0x10 [ 96.811948][ T5327] ? preempt_schedule_thunk+0x16/0x40 [ 96.814126][ T5327] ? jfs_readdir+0x10a5/0x33f0 [ 96.816128][ T5327] ? preempt_schedule_thunk+0x16/0x40 [ 96.818329][ T5327] ? jfs_readdir+0x10a5/0x33f0 [ 96.820273][ T5327] check_panic_on_warn+0x89/0xb0 [ 96.822311][ T5327] ? jfs_readdir+0x10a5/0x33f0 [ 96.824201][ T5327] end_report+0x73/0x170 [ 96.825755][ T5327] ? jfs_readdir+0x10a5/0x33f0 [ 96.827628][ T5327] kasan_report+0x128/0x150 [ 96.829397][ T5327] ? jfs_readdir+0x10a5/0x33f0 [ 96.831293][ T5327] jfs_readdir+0x10a5/0x33f0 [ 96.833147][ T5327] ? check_noncircular+0xda/0x150 [ 96.834962][ T5327] ? lockdep_unlock+0x5d/0xd0 [ 96.836748][ T5327] ? __pfx_jfs_readdir+0x10/0x10 [ 96.838747][ T5327] ? down_write+0x16d/0x200 [ 96.840520][ T5327] ? __pfx_down_write+0x10/0x10 [ 96.842498][ T5327] ? wrap_directory_iterator+0x52/0xe0 [ 96.844632][ T5327] ? __pfx_jfs_readdir+0x10/0x10 [ 96.846655][ T5327] wrap_directory_iterator+0x96/0xe0 [ 96.848837][ T5327] iterate_dir+0x2e2/0x4d0 [ 96.850686][ T5327] __se_sys_getdents+0xf1/0x270 [ 96.852652][ T5327] ? __pfx___se_sys_getdents+0x10/0x10 [ 96.854907][ T5327] ? __pfx_filldir+0x10/0x10 [ 96.856766][ T5327] ? rcu_is_watching+0x15/0xb0 [ 96.858750][ T5327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.861338][ T5327] do_syscall_64+0x174/0x580 [ 96.863285][ T5327] ? trace_irq_disable+0x3b/0x140 [ 96.865474][ T5327] ? clear_bhb_loop+0x40/0x90 [ 96.867520][ T5327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.869947][ T5327] RIP: 0033:0x7fbcf299de99 [ 96.871834][ T5327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.879866][ T5327] RSP: 002b:00007fbcf38f8fe8 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 96.883473][ T5327] RAX: ffffffffffffffda RBX: 00007fbcf2c26090 RCX: 00007fbcf299de99 [ 96.886696][ T5327] RDX: 0000000000000058 RSI: 0000000000000000 RDI: 0000000000000006 [ 96.890059][ T5327] RBP: 00007fbcf2a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 96.893391][ T5327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.896641][ T5327] R13: 00007fbcf2c26128 R14: 00007fbcf2c26090 R15: 00007ffd1c2a1c38 [ 96.899952][ T5327] [ 96.901628][ T5327] Kernel Offset: disabled [ 96.903479][ T5327] Rebooting in 86400 seconds..