program: r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x10f043, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r2, &(0x7f0000000140)="cb978ef251d135bb3b401e52b6b1cc22c4edb54c4e0dd25a872cfadd170b4695561aeca5cb2e270f8a63e0f225bc3fce322316fea28ffff240f9c425182a145a90f4d1b239c3fa49054553ac1b11e66167"}, 0x20) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[], 0x0) r4 = syz_pidfd_open(r3, 0x0) wait4(r3, 0x0, 0x40000000, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xc040ff0b, &(0x7f0000000180)) fchdir(r1) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100, 0x29) r6 = openat(r5, &(0x7f0000000040)='.\x00', 0x0, 0x0) r7 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000001c0)=0x14) r8 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000004b40), 0x402, 0x0) syz_mount_image$bcachefs(&(0x7f00000058c0), &(0x7f0000005900)='./file0\x00', 0x0, &(0x7f0000005940)=ANY=[@ANYBLOB='\x00'], 0x1, 0x58d4, &(0x7f0000010b40)="$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") ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000004b80)=0x14) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/warn_count', 0x109a82, 0x131) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x110a, 0x1}) write$cgroup_int(r9, &(0x7f0000000000)=0xb00, 0x12) [ 74.932386][ T4685] Bluetooth: hci0: command tx timeout [ 75.294334][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 76.237333][ T5336] loop0: detected capacity change from 0 to 32768 [ 76.381315][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.390054][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.395555][ T1314] ================================================================== [ 76.399199][ T1314] BUG: KASAN: slab-use-after-free in tty_write_room+0x35/0x90 [ 76.402617][ T1314] Read of size 8 at addr ffff888036525020 by task aoe_tx0/1314 [ 76.405923][ T1314] [ 76.407076][ T1314] CPU: 0 UID: 0 PID: 1314 Comm: aoe_tx0 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 76.407093][ T1314] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.407101][ T1314] Call Trace: [ 76.407109][ T1314] [ 76.407116][ T1314] dump_stack_lvl+0x189/0x250 [ 76.407135][ T1314] ? __virt_addr_valid+0x1c8/0x5c0 [ 76.407150][ T1314] ? rcu_is_watching+0x15/0xb0 [ 76.407179][ T1314] ? __pfx_dump_stack_lvl+0x10/0x10 [ 76.407192][ T1314] ? rcu_is_watching+0x15/0xb0 [ 76.407205][ T1314] ? lock_release+0x4b/0x3e0 [ 76.407217][ T1314] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 76.407282][ T1314] ? __virt_addr_valid+0x1c8/0x5c0 [ 76.407296][ T1314] ? __virt_addr_valid+0x4a5/0x5c0 [ 76.407311][ T1314] print_report+0xca/0x240 [ 76.407322][ T1314] ? tty_write_room+0x35/0x90 [ 76.407332][ T1314] kasan_report+0x118/0x150 [ 76.407346][ T1314] ? tty_write_room+0x35/0x90 [ 76.407356][ T1314] tty_write_room+0x35/0x90 [ 76.407367][ T1314] handle_tx+0x163/0x610 [ 76.407418][ T1314] dev_hard_start_xmit+0x2d4/0x830 [ 76.407438][ T1314] __dev_queue_xmit+0x1adf/0x3a70 [ 76.407456][ T1314] ? __dev_queue_xmit+0x27e/0x3a70 [ 76.407473][ T1314] ? rcu_is_watching+0x15/0xb0 [ 76.407484][ T1314] ? trace_sched_exit_tp+0x38/0x120 [ 76.407496][ T1314] ? __pfx___dev_queue_xmit+0x10/0x10 [ 76.407514][ T1314] ? do_raw_spin_lock+0x121/0x290 [ 76.407530][ T1314] ? do_raw_spin_unlock+0x4d/0x240 [ 76.407544][ T1314] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 76.407563][ T1314] ? _raw_spin_unlock_irq+0x23/0x50 [ 76.407580][ T1314] ? lockdep_hardirqs_on+0x9c/0x150 [ 76.407597][ T1314] tx+0x6b/0x190 [ 76.407608][ T1314] ? __pfx_tx+0x10/0x10 [ 76.407619][ T1314] kthread+0x1d0/0x3e0 [ 76.407632][ T1314] ? __pfx_kthread+0x10/0x10 [ 76.407641][ T1314] ? __pfx_default_wake_function+0x10/0x10 [ 76.407651][ T1314] ? __kthread_parkme+0x7b/0x200 [ 76.407664][ T1314] ? __kthread_parkme+0x1a1/0x200 [ 76.407677][ T1314] kthread+0x711/0x8a0 [ 76.407694][ T1314] ? __pfx_kthread+0x10/0x10 [ 76.407704][ T1314] ? __pfx_kthread+0x10/0x10 [ 76.407718][ T1314] ? _raw_spin_unlock_irq+0x23/0x50 [ 76.407734][ T1314] ? lockdep_hardirqs_on+0x9c/0x150 [ 76.407742][ T1314] ? __pfx_kthread+0x10/0x10 [ 76.407754][ T1314] ret_from_fork+0x3fc/0x770 [ 76.407765][ T1314] ? __pfx_ret_from_fork+0x10/0x10 [ 76.407778][ T1314] ? __pfx_kthread+0x10/0x10 [ 76.407793][ T1314] ret_from_fork_asm+0x1a/0x30 [ 76.407809][ T1314] [ 76.407813][ T1314] [ 76.521088][ T1314] Allocated by task 5336: [ 76.522997][ T1314] kasan_save_track+0x3e/0x80 [ 76.525026][ T1314] __kasan_kmalloc+0x93/0xb0 [ 76.527111][ T1314] __kmalloc_cache_noprof+0x230/0x3d0 [ 76.529542][ T1314] alloc_tty_struct+0xa6/0x780 [ 76.531799][ T1314] tty_init_dev+0x59/0x4d0 [ 76.533893][ T1314] tty_open+0x5ab/0xd10 [ 76.535746][ T1314] chrdev_open+0x4c9/0x5e0 [ 76.537640][ T1314] do_dentry_open+0xdf0/0x1970 [ 76.539809][ T1314] vfs_open+0x3b/0x340 [ 76.541636][ T1314] path_openat+0x2ee5/0x3830 [ 76.543682][ T1314] do_filp_open+0x1fa/0x410 [ 76.545683][ T1314] do_sys_openat2+0x121/0x1c0 [ 76.547931][ T1314] __x64_sys_openat+0x138/0x170 [ 76.550277][ T1314] do_syscall_64+0xfa/0x3b0 [ 76.552328][ T1314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.555234][ T1314] [ 76.556274][ T1314] Freed by task 9: [ 76.557964][ T1314] kasan_save_track+0x3e/0x80 [ 76.560060][ T1314] kasan_save_free_info+0x46/0x50 [ 76.562419][ T1314] __kasan_slab_free+0x62/0x70 [ 76.564909][ T1314] kfree+0x18e/0x440 [ 76.566710][ T1314] process_scheduled_works+0xae1/0x17b0 [ 76.569242][ T1314] worker_thread+0x8a0/0xda0 [ 76.571219][ T1314] kthread+0x711/0x8a0 [ 76.572977][ T1314] ret_from_fork+0x3fc/0x770 [ 76.574828][ T1314] ret_from_fork_asm+0x1a/0x30 [ 76.576895][ T1314] [ 76.578029][ T1314] Last potentially related work creation: [ 76.580390][ T1314] kasan_save_stack+0x3e/0x60 [ 76.582562][ T1314] kasan_record_aux_stack+0xbd/0xd0 [ 76.584890][ T1314] insert_work+0x3d/0x330 [ 76.586884][ T1314] __queue_work+0xcfc/0xfe0 [ 76.588993][ T1314] queue_work_on+0x181/0x270 [ 76.591176][ T1314] tty_release_struct+0xb8/0xd0 [ 76.593316][ T1314] tty_release+0xcb0/0x1640 [ 76.595394][ T1314] __fput+0x449/0xa70 [ 76.597302][ T1314] task_work_run+0x1d4/0x260 [ 76.599469][ T1314] exit_to_user_mode_loop+0xec/0x110 [ 76.601499][ T1314] do_syscall_64+0x2bd/0x3b0 [ 76.603442][ T1314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.606074][ T1314] [ 76.607174][ T1314] The buggy address belongs to the object at ffff888036525000 [ 76.607174][ T1314] which belongs to the cache kmalloc-cg-2k of size 2048 [ 76.612932][ T1314] The buggy address is located 32 bytes inside of [ 76.612932][ T1314] freed 2048-byte region [ffff888036525000, ffff888036525800) [ 76.618354][ T1314] [ 76.619348][ T1314] The buggy address belongs to the physical page: [ 76.622015][ T1314] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x36520 [ 76.625649][ T1314] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 76.629111][ T1314] memcg:ffff88804378ac01 [ 76.630822][ T1314] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 76.633810][ T1314] page_type: f5(slab) [ 76.635536][ T1314] raw: 04fff00000000040 ffff88801a44b3c0 dead000000000122 0000000000000000 [ 76.639257][ T1314] raw: 0000000000000000 0000000000080008 00000000f5000000 ffff88804378ac01 [ 76.642820][ T1314] head: 04fff00000000040 ffff88801a44b3c0 dead000000000122 0000000000000000 [ 76.646626][ T1314] head: 0000000000000000 0000000000080008 00000000f5000000 ffff88804378ac01 [ 76.650688][ T1314] head: 04fff00000000003 ffffea0000d94801 00000000ffffffff 00000000ffffffff [ 76.655968][ T1314] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 76.659792][ T1314] page dumped because: kasan: bad access detected [ 76.662519][ T1314] page_owner tracks the page as allocated [ 76.665018][ T1314] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5314, tgid 5314 (syz-executor), ts 73381940116, free_ts 73367135846 [ 76.675292][ T1314] post_alloc_hook+0x240/0x2a0 [ 76.677785][ T1314] get_page_from_freelist+0x21e4/0x22c0 [ 76.679996][ T1314] __alloc_frozen_pages_noprof+0x181/0x370 [ 76.682377][ T1314] alloc_pages_mpol+0x232/0x4a0 [ 76.684431][ T1314] allocate_slab+0x8a/0x3b0 [ 76.686350][ T1314] ___slab_alloc+0xbfc/0x1480 [ 76.688425][ T1314] __kvmalloc_node_noprof+0x429/0x5f0 [ 76.690812][ T1314] xt_alloc_table_info+0x3b/0xa0 [ 76.693011][ T1314] ip6t_register_table+0xbc/0x7d0 [ 76.695336][ T1314] ip6table_nat_table_init+0x43/0x2e0 [ 76.698080][ T1314] xt_find_table_lock+0x30c/0x3e0 [ 76.700608][ T1314] xt_request_find_table_lock+0x26/0x100 [ 76.703052][ T1314] do_ip6t_get_ctl+0x730/0x1180 [ 76.705176][ T1314] nf_getsockopt+0x26e/0x290 [ 76.707211][ T1314] ipv6_getsockopt+0x1ed/0x290 [ 76.709115][ T1314] do_sock_getsockopt+0x360/0x650 [ 76.711508][ T1314] page last free pid 5314 tgid 5314 stack trace: [ 76.714363][ T1314] __free_frozen_pages+0xc71/0xe70 [ 76.716700][ T1314] __slab_free+0x326/0x400 [ 76.718687][ T1314] qlist_free_all+0x97/0x140 [ 76.720804][ T1314] kasan_quarantine_reduce+0x148/0x160 [ 76.723344][ T1314] __kasan_slab_alloc+0x22/0x80 [ 76.725603][ T1314] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 76.728038][ T1314] getname_flags+0xb8/0x540 [ 76.730090][ T1314] do_sys_openat2+0xbc/0x1c0 [ 76.731784][ T1314] __x64_sys_openat+0x138/0x170 [ 76.733874][ T1314] do_syscall_64+0xfa/0x3b0 [ 76.735972][ T1314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.738514][ T1314] [ 76.739607][ T1314] Memory state around the buggy address: [ 76.742019][ T1314] ffff888036524f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 76.745421][ T1314] ffff888036524f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 76.748522][ T1314] >ffff888036525000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.751785][ T1314] ^ [ 76.753782][ T1314] ffff888036525080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.757352][ T1314] ffff888036525100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.760848][ T1314] ================================================================== [ 76.764475][ T1314] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 76.767508][ T1314] CPU: 0 UID: 0 PID: 1314 Comm: aoe_tx0 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 76.772517][ T1314] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.777826][ T1314] Call Trace: [ 76.779187][ T1314] [ 76.780271][ T1314] dump_stack_lvl+0x99/0x250 [ 76.782102][ T1314] ? __asan_memcpy+0x40/0x70 [ 76.784120][ T1314] ? __pfx_dump_stack_lvl+0x10/0x10 [ 76.786435][ T1314] ? __pfx__printk+0x10/0x10 [ 76.788487][ T1314] panic+0x2db/0x790 [ 76.790270][ T1314] ? lockdep_hardirqs_on+0x9c/0x150 [ 76.792605][ T1314] ? __pfx_panic+0x10/0x10 [ 76.794542][ T1314] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 76.797033][ T1314] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 76.799522][ T1314] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 76.802236][ T1314] ? tty_write_room+0x35/0x90 [ 76.804268][ T1314] check_panic_on_warn+0x89/0xb0 [ 76.806374][ T1314] ? tty_write_room+0x35/0x90 [ 76.808394][ T1314] end_report+0x78/0x160 [ 76.810196][ T1314] kasan_report+0x129/0x150 [ 76.812184][ T1314] ? tty_write_room+0x35/0x90 [ 76.814286][ T1314] tty_write_room+0x35/0x90 [ 76.816157][ T1314] handle_tx+0x163/0x610 [ 76.818015][ T1314] dev_hard_start_xmit+0x2d4/0x830 [ 76.820272][ T1314] __dev_queue_xmit+0x1adf/0x3a70 [ 76.822516][ T1314] ? __dev_queue_xmit+0x27e/0x3a70 [ 76.824772][ T1314] ? rcu_is_watching+0x15/0xb0 [ 76.826928][ T1314] ? trace_sched_exit_tp+0x38/0x120 [ 76.829163][ T1314] ? __pfx___dev_queue_xmit+0x10/0x10 [ 76.831509][ T1314] ? do_raw_spin_lock+0x121/0x290 [ 76.833667][ T1314] ? do_raw_spin_unlock+0x4d/0x240 [ 76.835890][ T1314] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 76.838414][ T1314] ? _raw_spin_unlock_irq+0x23/0x50 [ 76.840677][ T1314] ? lockdep_hardirqs_on+0x9c/0x150 [ 76.843115][ T1314] tx+0x6b/0x190 [ 76.844946][ T1314] ? __pfx_tx+0x10/0x10 [ 76.846954][ T1314] kthread+0x1d0/0x3e0 [ 76.848964][ T1314] ? __pfx_kthread+0x10/0x10 [ 76.851049][ T1314] ? __pfx_default_wake_function+0x10/0x10 [ 76.853642][ T1314] ? __kthread_parkme+0x7b/0x200 [ 76.855798][ T1314] ? __kthread_parkme+0x1a1/0x200 [ 76.858004][ T1314] kthread+0x711/0x8a0 [ 76.859834][ T1314] ? __pfx_kthread+0x10/0x10 [ 76.863039][ T1314] ? __pfx_kthread+0x10/0x10 [ 76.865132][ T1314] ? _raw_spin_unlock_irq+0x23/0x50 [ 76.867531][ T1314] ? lockdep_hardirqs_on+0x9c/0x150 [ 76.869972][ T1314] ? __pfx_kthread+0x10/0x10 [ 76.872128][ T1314] ret_from_fork+0x3fc/0x770 [ 76.874157][ T1314] ? __pfx_ret_from_fork+0x10/0x10 [ 76.876275][ T1314] ? __pfx_kthread+0x10/0x10 [ 76.878255][ T1314] ret_from_fork_asm+0x1a/0x30 [ 76.880327][ T1314] [ 76.882045][ T1314] Kernel Offset: disabled [ 76.883914][ T1314] Rebooting in 86400 seconds..