program: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0xc7e98fdc06df0529, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x88c0, &(0x7f00000007c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c0050890e1d2cc1bbbdf08d08fe06ff2766758d8955927fab01a7ccdecfc59b2041a9461723f1db971e775e0e358c03b00c510998283ed6f1dba0502d352e58b65a28492b0a7053e14eccd84ac5b3452602d77c0ca06fcbf3756ab0c1000b6cd9257f69726afcec2859414f3e35e002dcdf2b18b581c33cd87be229bc4302b017e3c3"], 0x1, 0x442a, &(0x7f0000008940)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40042, 0x0) pwrite64(r5, &(0x7f0000000540)="9e", 0x1, 0xfecf) r6 = open(&(0x7f000001f580)='./file1\x00', 0x145142, 0x0) ftruncate(r6, 0x96ef) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000100)=ANY=[], 0xb, 0x0, &(0x7f0000000100)) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r7, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r8, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xf, 0x9}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e00)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {}, {0x10, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0xc}]}}]}, 0x44}}, 0x20000000) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000200000000000000e632429916523586c4f9dc138ab9621255a97af1d03e55e4984c00000000c663772b1223a16b2a00cb4003fbba819c4ea1651a5c98ca7910da194b0cdb3069bce7ee949b9c31ed5ec5f0f53f306f5ef9f3d3fc2e8b495cc84a6ac391ccce7a778edc4f2b61b214e1106acaea25c5dbf6680f", @ANYRES32=r1, @ANYBLOB="cc24ffff00"/20, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="01000000010000000200"/28], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, 0x2d, 0x9, 0x70bd27, 0x0, {0x5}, [@typed={0x8, 0xa, 0x0, 0x0, @fd=r12}]}, 0x1c}}, 0x84) write$binfmt_script(r11, &(0x7f0000000240), 0x208e24b) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) [ 74.733809][ T5338] Bluetooth: hci0: command tx timeout [ 74.972436][ T5358] loop0: detected capacity change from 0 to 32768 [ 74.981576][ T5358] ======================================================= [ 74.981576][ T5358] WARNING: The mand mount option has been deprecated and [ 74.981576][ T5358] and is ignored by this kernel. Remove the mand [ 74.981576][ T5358] option from the mount to silence this warning. [ 74.981576][ T5358] ======================================================= [ 75.057355][ T5358] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 75.117549][ T5358] (syz.0.0,5358,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 75.153860][ T5358] loop0: detected capacity change from 32768 to 64 [ 75.170298][ T5358] (syz.0.0,5358,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 75.183370][ T5358] (syz.0.0,5358,0):ocfs2_assign_bh:2417 ERROR: status = -12 [ 75.186722][ T5358] (syz.0.0,5358,0):ocfs2_inode_lock_full_nested:2512 ERROR: status = -12 [ 75.190366][ T5358] (syz.0.0,5358,0):ocfs2_inode_lock_atime:2602 ERROR: status = -12 [ 75.198378][ T5358] (syz.0.0,5358,0):ocfs2_mmap_prepare:170 ERROR: status = -12 [ 75.202688][ T5358] (syz.0.0,5358,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 75.210405][ T5358] (syz.0.0,5358,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 75.215237][ T5358] (syz.0.0,5358,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 75.218824][ T5358] (syz.0.0,5358,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff88804431cfb8, block: 0 [ 75.224366][ T5358] (syz.0.0,5358,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 75.227639][ T5358] (syz.0.0,5358,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 75.230859][ T5358] (syz.0.0,5358,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 75.235422][ T5358] (syz.0.0,5358,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff88804431cfb8, block: 0 [ 75.240250][ T5358] (syz.0.0,5358,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 75.244471][ T5358] (syz.0.0,5358,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 75.248006][ T5358] (syz.0.0,5358,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 75.253003][ T5358] (syz.0.0,5358,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff88804431cfb8, block: 1 [ 75.260961][ T5358] (syz.0.0,5358,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 75.264462][ T5358] (syz.0.0,5358,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 75.267957][ T5358] (syz.0.0,5358,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 75.271633][ T5358] (syz.0.0,5358,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff88804431cfb8, block: 2 [ 75.277358][ T5358] (syz.0.0,5358,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 75.280345][ T5358] (syz.0.0,5358,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 75.284488][ T5358] (syz.0.0,5358,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 75.289562][ T5358] (syz.0.0,5358,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff88804431cfb8, block: 3 [ 75.296893][ T5358] (syz.0.0,5358,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 75.300270][ T5358] (syz.0.0,5358,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 75.305192][ T5358] (syz.0.0,5358,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 75.310592][ T5358] (syz.0.0,5358,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff88804431cfb8, block: 4 [ 75.316830][ T5358] (syz.0.0,5358,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 75.320501][ T5358] (syz.0.0,5358,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 75.324342][ T5358] (syz.0.0,5358,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 75.328127][ T5358] (syz.0.0,5358,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff88804431cfb8, block: 5 [ 75.334224][ T5358] (syz.0.0,5358,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 75.337260][ T5358] (syz.0.0,5358,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 75.340546][ T5358] (syz.0.0,5358,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 75.344668][ T5358] (syz.0.0,5358,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff88804431cfb8, block: 6 [ 75.349487][ T5358] (syz.0.0,5358,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 75.352483][ T5358] (syz.0.0,5358,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 75.359255][ T5358] (syz.0.0,5358,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 75.362970][ T5358] (syz.0.0,5358,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff88804431cfb8, block: 7 [ 75.374265][ T5358] (syz.0.0,5358,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 75.377631][ T5358] (syz.0.0,5358,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 75.385554][ T5358] (syz.0.0,5358,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 75.390123][ T5358] (syz.0.0,5358,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff88804431cfb8, block: 0 [ 75.395650][ T5358] (syz.0.0,5358,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 75.398861][ T5358] (syz.0.0,5358,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 75.402027][ T5358] (syz.0.0,5358,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 75.406456][ T5358] (syz.0.0,5358,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff88804431cfb8, block: 1 [ 75.411090][ T5358] (syz.0.0,5358,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 75.416093][ T5358] (syz.0.0,5358,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 75.419523][ T5358] (syz.0.0,5358,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 75.432564][ T5358] (syz.0.0,5358,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff88804431cfb8, block: 2 [ 75.442773][ T5358] (syz.0.0,5358,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 75.453001][ T5358] (syz.0.0,5358,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 75.464320][ T5358] (syz.0.0,5358,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 75.467666][ T5358] (syz.0.0,5358,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff88804431cfb8, block: 3 [ 75.471810][ T5358] (syz.0.0,5358,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 75.480302][ T5358] (syz.0.0,5358,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 75.484679][ T5358] (syz.0.0,5358,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 75.488081][ T5358] (syz.0.0,5358,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff88804431cfb8, block: 4 [ 75.495525][ T5358] (syz.0.0,5358,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 75.498858][ T5358] (syz.0.0,5358,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 75.502031][ T5358] (syz.0.0,5358,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 75.506189][ T5358] (syz.0.0,5358,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff88804431cfb8, block: 5 [ 75.510881][ T5358] (syz.0.0,5358,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 75.516372][ T5358] (syz.0.0,5358,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 75.519559][ T5358] (syz.0.0,5358,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 75.537270][ T5358] (syz.0.0,5358,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff88804431cfb8, block: 6 [ 75.542405][ T5358] (syz.0.0,5358,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 75.550934][ T5366] (syz.0.0,5366,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 75.555265][ T5358] (syz.0.0,5358,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 75.558489][ T5366] (syz.0.0,5366,0):ocfs2_search_one_group:1738 ERROR: status = -12 [ 75.561631][ T5366] (syz.0.0,5366,0):ocfs2_claim_suballoc_bits:1989 ERROR: status = -12 [ 75.566327][ T5358] (syz.0.0,5358,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 75.570369][ T5358] (syz.0.0,5358,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff88804431cfb8, block: 7 [ 75.575421][ T5366] (syz.0.0,5366,0):ocfs2_claim_suballoc_bits:2063 ERROR: status = -12 [ 75.578481][ T5366] (syz.0.0,5366,0):ocfs2_claim_new_inode:2298 ERROR: status = -12 [ 75.581749][ T5362] (syz.0.0,5362,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 75.585340][ T5362] (syz.0.0,5362,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 75.588722][ T5362] (syz.0.0,5362,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 75.594311][ T5366] (syz.0.0,5366,0):ocfs2_claim_new_inode:2313 ERROR: status = -12 [ 75.597917][ T5366] (syz.0.0,5366,0):ocfs2_mknod_locked:641 ERROR: status = -12 [ 75.604464][ T5362] (syz.0.0,5362,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff88804431cfb8, block: 0 [ 75.613996][ T5366] (syz.0.0,5366,0):ocfs2_mknod:388 ERROR: status = -12 [ 75.630912][ T5366] (syz.0.0,5366,0):ocfs2_mknod:505 ERROR: status = -12 [ 75.638032][ T5362] (syz.0.0,5362,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 75.641295][ T5362] (syz.0.0,5362,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 75.645926][ T5366] (syz.0.0,5366,0):ocfs2_create:678 ERROR: status = -12 [ 75.649895][ T5362] (syz.0.0,5362,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 75.654615][ T5362] (syz.0.0,5362,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff88804431cfb8, block: 1 [ 75.659438][ T5362] (syz.0.0,5362,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 75.662678][ T5362] (syz.0.0,5362,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 75.666355][ T5362] (syz.0.0,5362,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 75.669769][ T5362] (syz.0.0,5362,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff88804431cfb8, block: 2 [ 75.674814][ T5362] (syz.0.0,5362,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 75.678152][ T5362] (syz.0.0,5362,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 75.681537][ T5362] (syz.0.0,5362,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 75.686581][ T5362] (syz.0.0,5362,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff88804431cfb8, block: 3 [ 75.694025][ T5362] (syz.0.0,5362,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 75.698221][ T5362] (syz.0.0,5362,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 75.701702][ T5362] (syz.0.0,5362,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 75.705973][ T5362] (syz.0.0,5362,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff88804431cfb8, block: 4 [ 75.710506][ T5362] (syz.0.0,5362,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 75.716864][ T5362] (syz.0.0,5362,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 75.727028][ T5362] (syz.0.0,5362,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 75.733213][ T5362] (syz.0.0,5362,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff88804431cfb8, block: 5 [ 75.744264][ T5362] (syz.0.0,5362,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 75.748314][ T5362] (syz.0.0,5362,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 75.755794][ T5359] ================================================================== [ 75.759342][ T5359] BUG: KASAN: slab-use-after-free in ocfs2_fault+0xd3/0x3f0 [ 75.762807][ T5359] Read of size 8 at addr ffff8880117f0198 by task syz.0.0/5359 [ 75.766684][ T5359] [ 75.767953][ T5359] CPU: 0 UID: 0 PID: 5359 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 75.767972][ T5359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.767982][ T5359] Call Trace: [ 75.767990][ T5359] [ 75.767997][ T5359] dump_stack_lvl+0x189/0x250 [ 75.768014][ T5359] ? __kasan_check_byte+0x12/0x40 [ 75.768030][ T5359] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.768045][ T5359] ? lock_release+0x4b/0x3e0 [ 75.768064][ T5359] ? __virt_addr_valid+0x4a5/0x5c0 [ 75.768081][ T5359] print_report+0xca/0x240 [ 75.768093][ T5359] ? ocfs2_fault+0xd3/0x3f0 [ 75.768109][ T5359] kasan_report+0x118/0x150 [ 75.768126][ T5359] ? ocfs2_fault+0xd3/0x3f0 [ 75.768143][ T5359] ocfs2_fault+0xd3/0x3f0 [ 75.768159][ T5359] ? __pfx_ocfs2_fault+0x10/0x10 [ 75.768178][ T5359] __do_fault+0x138/0x390 [ 75.768195][ T5359] __handle_mm_fault+0x3611/0x5440 [ 75.768213][ T5359] ? __pfx___handle_mm_fault+0x10/0x10 [ 75.768230][ T5359] ? find_vma+0xe7/0x160 [ 75.768242][ T5359] ? __pfx_find_vma+0x10/0x10 [ 75.768256][ T5359] handle_mm_fault+0x40a/0x8e0 [ 75.768272][ T5359] do_user_addr_fault+0x764/0x1390 [ 75.768295][ T5359] exc_page_fault+0x76/0xf0 [ 75.768377][ T5359] ? __might_fault+0xb0/0x130 [ 75.768393][ T5359] asm_exc_page_fault+0x26/0x30 [ 75.768408][ T5359] RIP: 0010:__get_user_4+0x14/0x20 [ 75.768424][ T5359] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <8b> 10 31 c0 0f 01 ca e9 90 02 04 00 90 90 90 90 90 90 90 90 90 90 [ 75.768434][ T5359] RSP: 0018:ffffc9000d427d40 EFLAGS: 00050287 [ 75.768447][ T5359] RAX: 0000200000000200 RBX: 0000200000000200 RCX: 84c3af1afabb9b00 [ 75.768458][ T5359] RDX: 00007ffffffff000 RSI: ffffffff8dbaa18c RDI: ffffffff8be34980 [ 75.768469][ T5359] RBP: 000000000000000c R08: 0000000000000000 R09: ffffffff820d0b40 [ 75.768478][ T5359] R10: dffffc0000000000 R11: fffffbfff1f475a7 R12: 1ffff92001a84fb4 [ 75.768488][ T5359] R13: 000000000000000c R14: 0000200000000080 R15: ffffc9000d427dc0 [ 75.768499][ T5359] ? __might_fault+0xb0/0x130 [ 75.768516][ T5359] move_addr_to_user+0x4b/0x200 [ 75.768574][ T5359] __sys_getsockname+0x1c3/0x270 [ 75.768591][ T5359] ? count_memcg_event_mm+0x21/0x260 [ 75.768606][ T5359] ? __pfx___sys_getsockname+0x10/0x10 [ 75.768630][ T5359] __x64_sys_getsockname+0x7b/0x90 [ 75.768647][ T5359] do_syscall_64+0xfa/0x3b0 [ 75.768664][ T5359] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.768679][ T5359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.768691][ T5359] ? clear_bhb_loop+0x60/0xb0 [ 75.768705][ T5359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.768717][ T5359] RIP: 0033:0x7fcab878ebe9 [ 75.768729][ T5359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.768739][ T5359] RSP: 002b:00007fcab9644038 EFLAGS: 00000246 ORIG_RAX: 0000000000000033 [ 75.768752][ T5359] RAX: ffffffffffffffda RBX: 00007fcab89b6090 RCX: 00007fcab878ebe9 [ 75.768760][ T5359] RDX: 0000200000000200 RSI: 0000200000000080 RDI: 0000000000000006 [ 75.768769][ T5359] RBP: 00007fcab8811e19 R08: 0000000000000000 R09: 0000000000000000 [ 75.768777][ T5359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.768786][ T5359] R13: 00007fcab89b6128 R14: 00007fcab89b6090 R15: 00007fffbadd4e18 [ 75.768800][ T5359] [ 75.768804][ T5359] [ 75.914388][ T5359] Allocated by task 5358: [ 75.916706][ T5359] kasan_save_track+0x3e/0x80 [ 75.919170][ T5359] __kasan_slab_alloc+0x6c/0x80 [ 75.921497][ T5359] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 75.924104][ T5359] vm_area_alloc+0x24/0x140 [ 75.926196][ T5359] mmap_region+0xdc7/0x20c0 [ 75.928363][ T5359] do_mmap+0xc45/0x10d0 [ 75.930155][ T5359] vm_mmap_pgoff+0x2a6/0x4d0 [ 75.932150][ T5359] ksys_mmap_pgoff+0x51f/0x760 [ 75.934185][ T5359] do_syscall_64+0xfa/0x3b0 [ 75.936146][ T5359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.938666][ T5359] [ 75.939690][ T5359] Freed by task 5358: [ 75.941413][ T5359] kasan_save_track+0x3e/0x80 [ 75.943499][ T5359] kasan_save_free_info+0x46/0x50 [ 75.945691][ T5359] __kasan_slab_free+0x5b/0x80 [ 75.947863][ T5359] slab_free_after_rcu_debug+0x129/0x2a0 [ 75.950347][ T5359] rcu_core+0xcab/0x1770 [ 75.952202][ T5359] handle_softirqs+0x283/0x870 [ 75.954313][ T5359] __irq_exit_rcu+0xca/0x1f0 [ 75.956567][ T5359] irq_exit_rcu+0x9/0x30 [ 75.958572][ T5359] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 75.961009][ T5359] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 75.963782][ T5359] [ 75.964871][ T5359] Last potentially related work creation: [ 75.967400][ T5359] kasan_save_stack+0x3e/0x60 [ 75.969613][ T5359] kasan_record_aux_stack+0xbd/0xd0 [ 75.971907][ T5359] kmem_cache_free+0x2f6/0x400 [ 75.974097][ T5359] vms_complete_munmap_vmas+0x626/0x8a0 [ 75.976565][ T5359] mmap_region+0x11db/0x20c0 [ 75.978625][ T5359] do_mmap+0xc45/0x10d0 [ 75.980426][ T5359] vm_mmap_pgoff+0x2a6/0x4d0 [ 75.982500][ T5359] ksys_mmap_pgoff+0x51f/0x760 [ 75.984740][ T5359] do_syscall_64+0xfa/0x3b0 [ 75.986997][ T5359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.989753][ T5359] [ 75.990935][ T5359] The buggy address belongs to the object at ffff8880117f0140 [ 75.990935][ T5359] which belongs to the cache vm_area_struct of size 256 [ 75.998345][ T5359] The buggy address is located 88 bytes inside of [ 75.998345][ T5359] freed 256-byte region [ffff8880117f0140, ffff8880117f0240) [ 76.004648][ T5359] [ 76.005733][ T5359] The buggy address belongs to the physical page: [ 76.008711][ T5359] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x117f0 [ 76.012501][ T5359] memcg:ffff888011fb8781 [ 76.014321][ T5359] ksm flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 76.018357][ T5359] page_type: f5(slab) [ 76.020233][ T5359] raw: 00fff00000000000 ffff88801b6edb40 ffffea000045fb80 dead000000000003 [ 76.024100][ T5359] raw: 0000000000000000 00000000000c000c 00000000f5000000 ffff888011fb8781 [ 76.027956][ T5359] page dumped because: kasan: bad access detected [ 76.030698][ T5359] page_owner tracks the page as allocated [ 76.033056][ T5359] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5105, tgid 5105 (dhcpcd-run-hook), ts 45500625007, free_ts 45493508851 [ 76.041691][ T5359] post_alloc_hook+0x240/0x2a0 [ 76.043820][ T5359] get_page_from_freelist+0x21e4/0x22c0 [ 76.046281][ T5359] __alloc_frozen_pages_noprof+0x181/0x370 [ 76.049008][ T5359] alloc_pages_mpol+0x232/0x4a0 [ 76.051184][ T5359] allocate_slab+0x8a/0x370 [ 76.053229][ T5359] ___slab_alloc+0xbeb/0x1410 [ 76.055295][ T5359] kmem_cache_alloc_noprof+0x283/0x3c0 [ 76.057715][ T5359] vm_area_alloc+0x24/0x140 [ 76.059733][ T5359] mmap_region+0xdc7/0x20c0 [ 76.061789][ T5359] do_mmap+0xc45/0x10d0 [ 76.063583][ T5359] vm_mmap_pgoff+0x2a6/0x4d0 [ 76.065677][ T5359] elf_load+0x140/0x6c0 [ 76.067483][ T5359] load_elf_binary+0x1079/0x2740 [ 76.069886][ T5359] bprm_execve+0x999/0x1450 [ 76.071696][ T5359] do_execveat_common+0x510/0x6a0 [ 76.073715][ T5359] __x64_sys_execve+0x94/0xb0 [ 76.075550][ T5359] page last free pid 15 tgid 15 stack trace: [ 76.077844][ T5359] __free_frozen_pages+0xbc4/0xd30 [ 76.079893][ T5359] __tlb_remove_table+0x2d2/0x3b0 [ 76.082016][ T5359] tlb_remove_table_rcu+0x85/0x100 [ 76.084123][ T5359] rcu_core+0xcab/0x1770 [ 76.085860][ T5359] handle_softirqs+0x283/0x870 [ 76.087778][ T5359] run_ksoftirqd+0x9b/0x100 [ 76.089698][ T5359] smpboot_thread_fn+0x53f/0xa60 [ 76.091841][ T5359] kthread+0x70e/0x8a0 [ 76.093632][ T5359] ret_from_fork+0x3f9/0x770 [ 76.095336][ T5359] ret_from_fork_asm+0x1a/0x30 [ 76.097240][ T5359] [ 76.098280][ T5359] Memory state around the buggy address: [ 76.100653][ T5359] ffff8880117f0080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.104094][ T5359] ffff8880117f0100: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 76.107509][ T5359] >ffff8880117f0180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.111379][ T5359] ^ [ 76.113596][ T5359] ffff8880117f0200: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 76.117598][ T5359] ffff8880117f0280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 76.120860][ T5359] ================================================================== [ 76.151696][ T5362] (syz.0.0,5362,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 76.166551][ T5362] (syz.0.0,5362,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff88804431cfb8, block: 6 [ 76.171648][ T5362] (syz.0.0,5362,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 76.191440][ T5362] (syz.0.0,5362,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 76.195028][ T5362] (syz.0.0,5362,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 76.198631][ T5362] (syz.0.0,5362,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff88804431cfb8, block: 7 [ 76.208031][ T5359] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 76.211270][ T5359] CPU: 0 UID: 0 PID: 5359 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 76.215212][ T5359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.220043][ T5359] Call Trace: [ 76.221599][ T5359] [ 76.222978][ T5359] dump_stack_lvl+0x99/0x250 [ 76.224895][ T5359] ? __asan_memcpy+0x40/0x70 [ 76.226930][ T5359] ? __pfx_dump_stack_lvl+0x10/0x10 [ 76.229090][ T5359] ? __pfx__printk+0x10/0x10 [ 76.231085][ T5359] vpanic+0x281/0x750 [ 76.232848][ T5359] ? preempt_schedule+0xae/0xc0 [ 76.234856][ T5359] ? __pfx_vpanic+0x10/0x10 [ 76.236918][ T5359] ? preempt_schedule_common+0x83/0xd0 [ 76.239238][ T5359] ? preempt_schedule+0xae/0xc0 [ 76.241449][ T5359] ? __pfx_preempt_schedule+0x10/0x10 [ 76.243797][ T5359] panic+0xb9/0xc0 [ 76.245461][ T5359] ? __pfx_panic+0x10/0x10 [ 76.247403][ T5359] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 76.249936][ T5359] ? ocfs2_fault+0xd3/0x3f0 [ 76.251870][ T5359] check_panic_on_warn+0x89/0xb0 [ 76.254066][ T5359] ? ocfs2_fault+0xd3/0x3f0 [ 76.256677][ T5359] end_report+0x78/0x160 [ 76.259128][ T5359] kasan_report+0x129/0x150 [ 76.261163][ T5359] ? ocfs2_fault+0xd3/0x3f0 [ 76.263107][ T5359] ocfs2_fault+0xd3/0x3f0 [ 76.264959][ T5359] ? __pfx_ocfs2_fault+0x10/0x10 [ 76.267308][ T5359] __do_fault+0x138/0x390 [ 76.269503][ T5359] __handle_mm_fault+0x3611/0x5440 [ 76.271961][ T5359] ? __pfx___handle_mm_fault+0x10/0x10 [ 76.274244][ T5359] ? find_vma+0xe7/0x160 [ 76.276013][ T5359] ? __pfx_find_vma+0x10/0x10 [ 76.278017][ T5359] handle_mm_fault+0x40a/0x8e0 [ 76.280133][ T5359] do_user_addr_fault+0x764/0x1390 [ 76.282263][ T5359] exc_page_fault+0x76/0xf0 [ 76.284269][ T5359] ? __might_fault+0xb0/0x130 [ 76.286196][ T5359] asm_exc_page_fault+0x26/0x30 [ 76.288276][ T5359] RIP: 0010:__get_user_4+0x14/0x20 [ 76.290524][ T5359] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <8b> 10 31 c0 0f 01 ca e9 90 02 04 00 90 90 90 90 90 90 90 90 90 90 [ 76.298734][ T5359] RSP: 0018:ffffc9000d427d40 EFLAGS: 00050287 [ 76.301383][ T5359] RAX: 0000200000000200 RBX: 0000200000000200 RCX: 84c3af1afabb9b00 [ 76.304690][ T5359] RDX: 00007ffffffff000 RSI: ffffffff8dbaa18c RDI: ffffffff8be34980 [ 76.308113][ T5359] RBP: 000000000000000c R08: 0000000000000000 R09: ffffffff820d0b40 [ 76.311477][ T5359] R10: dffffc0000000000 R11: fffffbfff1f475a7 R12: 1ffff92001a84fb4 [ 76.314818][ T5359] R13: 000000000000000c R14: 0000200000000080 R15: ffffc9000d427dc0 [ 76.318174][ T5359] ? __might_fault+0xb0/0x130 [ 76.320263][ T5359] move_addr_to_user+0x4b/0x200 [ 76.322418][ T5359] __sys_getsockname+0x1c3/0x270 [ 76.324522][ T5359] ? count_memcg_event_mm+0x21/0x260 [ 76.326707][ T5359] ? __pfx___sys_getsockname+0x10/0x10 [ 76.329110][ T5359] __x64_sys_getsockname+0x7b/0x90 [ 76.331329][ T5359] do_syscall_64+0xfa/0x3b0 [ 76.333360][ T5359] ? lockdep_hardirqs_on+0x9c/0x150 [ 76.335646][ T5359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.338380][ T5359] ? clear_bhb_loop+0x60/0xb0 [ 76.340492][ T5359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.343059][ T5359] RIP: 0033:0x7fcab878ebe9 [ 76.345080][ T5359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.352823][ T5359] RSP: 002b:00007fcab9644038 EFLAGS: 00000246 ORIG_RAX: 0000000000000033 [ 76.356297][ T5359] RAX: ffffffffffffffda RBX: 00007fcab89b6090 RCX: 00007fcab878ebe9 [ 76.359264][ T5359] RDX: 0000200000000200 RSI: 0000200000000080 RDI: 0000000000000006 [ 76.362453][ T5359] RBP: 00007fcab8811e19 R08: 0000000000000000 R09: 0000000000000000 [ 76.365635][ T5359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.368805][ T5359] R13: 00007fcab89b6128 R14: 00007fcab89b6090 R15: 00007fffbadd4e18 [ 76.372117][ T5359] [ 76.373812][ T5359] Kernel Offset: disabled [ 76.375692][ T5359] Rebooting in 86400 seconds..