program: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x8000000000000000, 0x519400) ioctl$SNDRV_PCM_IOCTL_LINK(r0, 0x40044160, &(0x7f0000000040)=0xfffff866) (async) creat(&(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 32) openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async, rerun: 32) mount(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='ubifs\x00', 0x8000, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000080)={0x8, 0x9}) (async) syz_mount_image$jfs(&(0x7f0000005d00), &(0x7f0000005d40)='./file0\x00', 0x0, &(0x7f0000005d80), 0x1, 0x5ce8, &(0x7f0000005dc0)="$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") [ 84.675834][ T5305] Bluetooth: hci0: command tx timeout [ 84.747545][ T5323] Invalid source name [ 85.541595][ T5324] loop0: detected capacity change from 0 to 32768 [ 85.616836][ T5324] *** Log Is Dirty ! *** [ 85.658394][ T5324] lmLogInit: exit(-22) [ 85.691103][ T5324] lmLogOpen: exit(-22) [ 85.692872][ T5324] jfs_mount_rw failed, return code = -22 [ 85.713303][ T1037] ================================================================== [ 85.718822][ T1037] BUG: KASAN: slab-use-after-free in __lock_acquire+0x78/0x2100 [ 85.727347][ T1037] Read of size 8 at addr ffff888035c34c68 by task kworker/u4:7/1037 [ 85.741159][ T1037] [ 85.743042][ T1037] CPU: 0 UID: 0 PID: 1037 Comm: kworker/u4:7 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 85.743065][ T1037] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.743077][ T1037] Workqueue: loop0 loop_workfn [ 85.743148][ T1037] Call Trace: [ 85.743158][ T1037] [ 85.743165][ T1037] dump_stack_lvl+0x241/0x360 [ 85.743184][ T1037] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.743196][ T1037] ? __pfx__printk+0x10/0x10 [ 85.743214][ T1037] ? _printk+0xd5/0x120 [ 85.743232][ T1037] ? __virt_addr_valid+0x183/0x530 [ 85.743250][ T1037] ? __virt_addr_valid+0x183/0x530 [ 85.743268][ T1037] print_report+0x169/0x550 [ 85.743287][ T1037] ? __virt_addr_valid+0x183/0x530 [ 85.743303][ T1037] ? __virt_addr_valid+0x183/0x530 [ 85.743320][ T1037] ? __virt_addr_valid+0x45f/0x530 [ 85.743336][ T1037] ? __phys_addr+0xba/0x170 [ 85.743354][ T1037] ? __lock_acquire+0x78/0x2100 [ 85.743405][ T1037] kasan_report+0x143/0x180 [ 85.743423][ T1037] ? __lock_acquire+0x78/0x2100 [ 85.743441][ T1037] __lock_acquire+0x78/0x2100 [ 85.743460][ T1037] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 85.743478][ T1037] lock_acquire+0x1ed/0x550 [ 85.743502][ T1037] ? __wake_up_common_lock+0x25/0x1e0 [ 85.743520][ T1037] ? __pfx_lock_acquire+0x10/0x10 [ 85.743537][ T1037] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 85.743598][ T1037] _raw_spin_lock_irqsave+0xd5/0x120 [ 85.743613][ T1037] ? __wake_up_common_lock+0x25/0x1e0 [ 85.743629][ T1037] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 85.743643][ T1037] ? lbmIODone+0x2bf/0x1750 [ 85.743659][ T1037] ? blkg_put+0x23/0x250 [ 85.743671][ T1037] __wake_up_common_lock+0x25/0x1e0 [ 85.743686][ T1037] ? bio_endio+0x82a/0x890 [ 85.743700][ T1037] blk_update_request+0x5e5/0x1160 [ 85.743726][ T1037] blk_mq_end_request+0x3e/0x70 [ 85.743739][ T1037] loop_process_work+0x1bc8/0x21c0 [ 85.743761][ T1037] ? __pfx_loop_process_work+0x10/0x10 [ 85.743773][ T1037] ? register_lock_class+0x102/0x980 [ 85.743791][ T1037] ? __pfx_register_lock_class+0x10/0x10 [ 85.743807][ T1037] ? mark_lock+0x9a/0x360 [ 85.743823][ T1037] ? debug_object_deactivate+0x2d5/0x390 [ 85.743839][ T1037] ? __lock_acquire+0x1397/0x2100 [ 85.743855][ T1037] ? do_raw_spin_unlock+0x58/0x8b0 [ 85.743874][ T1037] ? __pfx_lock_acquire+0x10/0x10 [ 85.743890][ T1037] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 85.743906][ T1037] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 85.743925][ T1037] ? process_scheduled_works+0x976/0x1840 [ 85.743940][ T1037] process_scheduled_works+0xa66/0x1840 [ 85.743962][ T1037] ? __pfx_process_scheduled_works+0x10/0x10 [ 85.743979][ T1037] ? assign_work+0x364/0x3d0 [ 85.743993][ T1037] worker_thread+0x870/0xd30 [ 85.744011][ T1037] ? __kthread_parkme+0x169/0x1d0 [ 85.744026][ T1037] ? __pfx_worker_thread+0x10/0x10 [ 85.744040][ T1037] kthread+0x7a9/0x920 [ 85.744055][ T1037] ? __pfx_kthread+0x10/0x10 [ 85.744072][ T1037] ? __pfx_worker_thread+0x10/0x10 [ 85.744086][ T1037] ? __pfx_kthread+0x10/0x10 [ 85.744101][ T1037] ? __pfx_kthread+0x10/0x10 [ 85.744117][ T1037] ? __pfx_kthread+0x10/0x10 [ 85.744131][ T1037] ? _raw_spin_unlock_irq+0x23/0x50 [ 85.744145][ T1037] ? lockdep_hardirqs_on+0x99/0x150 [ 85.744161][ T1037] ? __pfx_kthread+0x10/0x10 [ 85.744177][ T1037] ret_from_fork+0x4b/0x80 [ 85.744195][ T1037] ? __pfx_kthread+0x10/0x10 [ 85.744211][ T1037] ret_from_fork_asm+0x1a/0x30 [ 85.744230][ T1037] [ 85.744236][ T1037] [ 86.039560][ T1037] Allocated by task 5324: [ 86.041990][ T1037] kasan_save_track+0x3f/0x80 [ 86.044285][ T1037] __kasan_kmalloc+0x98/0xb0 [ 86.047495][ T1037] __kmalloc_cache_noprof+0x243/0x390 [ 86.051628][ T1037] lmLogInit+0x3b4/0x1c90 [ 86.053906][ T1037] lmLogOpen+0x55e/0x1040 [ 86.056479][ T1037] jfs_mount_rw+0xf1/0x6a0 [ 86.059023][ T1037] jfs_fill_super+0x775/0xd90 [ 86.061193][ T1037] get_tree_bdev_flags+0x48c/0x5c0 [ 86.063851][ T1037] vfs_get_tree+0x90/0x2b0 [ 86.066853][ T1037] do_new_mount+0x2be/0xb40 [ 86.069076][ T1037] __se_sys_mount+0x2d6/0x3c0 [ 86.071953][ T1037] do_syscall_64+0xf3/0x230 [ 86.074477][ T1037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.078067][ T1037] [ 86.080141][ T1037] Freed by task 5324: [ 86.083035][ T1037] kasan_save_track+0x3f/0x80 [ 86.086053][ T1037] kasan_save_free_info+0x40/0x50 [ 86.089032][ T1037] __kasan_slab_free+0x59/0x70 [ 86.092315][ T1037] kfree+0x196/0x430 [ 86.095391][ T1037] lmLogInit+0xccd/0x1c90 [ 86.097293][ T1037] lmLogOpen+0x55e/0x1040 [ 86.099545][ T1037] jfs_mount_rw+0xf1/0x6a0 [ 86.101676][ T1037] jfs_fill_super+0x775/0xd90 [ 86.104661][ T1037] get_tree_bdev_flags+0x48c/0x5c0 [ 86.108066][ T1037] vfs_get_tree+0x90/0x2b0 [ 86.111787][ T1037] do_new_mount+0x2be/0xb40 [ 86.114578][ T1037] __se_sys_mount+0x2d6/0x3c0 [ 86.117259][ T1037] do_syscall_64+0xf3/0x230 [ 86.120358][ T1037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.128691][ T1037] [ 86.131541][ T1037] The buggy address belongs to the object at ffff888035c34c00 [ 86.131541][ T1037] which belongs to the cache kmalloc-192 of size 192 [ 86.141743][ T1037] The buggy address is located 104 bytes inside of [ 86.141743][ T1037] freed 192-byte region [ffff888035c34c00, ffff888035c34cc0) [ 86.148055][ T1037] [ 86.148998][ T1037] The buggy address belongs to the physical page: [ 86.151662][ T1037] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x35c34 [ 86.155066][ T1037] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 86.186673][ T1037] page_type: f5(slab) [ 86.189255][ T1037] raw: 04fff00000000000 ffff88801ac413c0 ffffea0000c13d40 dead000000000002 [ 86.194907][ T1037] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 86.198366][ T1037] page dumped because: kasan: bad access detected [ 86.200750][ T1037] page_owner tracks the page as allocated [ 86.203569][ T1037] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 11305730207, free_ts 0 [ 86.218746][ T1037] post_alloc_hook+0x1f4/0x240 [ 86.221065][ T1037] get_page_from_freelist+0x365c/0x37a0 [ 86.224168][ T1037] __alloc_frozen_pages_noprof+0x292/0x710 [ 86.227075][ T1037] alloc_pages_mpol+0x311/0x660 [ 86.229317][ T1037] allocate_slab+0x8f/0x3a0 [ 86.231976][ T1037] ___slab_alloc+0xc27/0x14a0 [ 86.234604][ T1037] __slab_alloc+0x58/0xa0 [ 86.236201][ T1037] __kmalloc_noprof+0x2e6/0x4c0 [ 86.238057][ T1037] ops_init+0x1f1/0x590 [ 86.239839][ T1037] register_pernet_operations+0x30d/0x630 [ 86.242284][ T1037] register_pernet_subsys+0x28/0x40 [ 86.244208][ T1037] ipvlan_init_module+0x51/0x120 [ 86.246093][ T1037] do_one_initcall+0x248/0x870 [ 86.248130][ T1037] do_initcall_level+0x157/0x210 [ 86.251010][ T1037] do_initcalls+0x3f/0x80 [ 86.253625][ T1037] kernel_init_freeable+0x435/0x5d0 [ 86.258833][ T1037] page_owner free stack trace missing [ 86.265370][ T1037] [ 86.267893][ T1037] Memory state around the buggy address: [ 86.274346][ T1037] ffff888035c34b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 86.280046][ T1037] ffff888035c34b80: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 86.284518][ T1037] >ffff888035c34c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.287213][ T1037] ^ [ 86.290164][ T1037] ffff888035c34c80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 86.294746][ T1037] ffff888035c34d00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 86.298875][ T1037] ================================================================== [ 86.303010][ T1037] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 86.306304][ T1037] CPU: 0 UID: 0 PID: 1037 Comm: kworker/u4:7 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 86.311393][ T1037] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.318852][ T1037] Workqueue: loop0 loop_workfn [ 86.321278][ T1037] Call Trace: [ 86.322813][ T1037] [ 86.324310][ T1037] dump_stack_lvl+0x241/0x360 [ 86.326904][ T1037] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.329639][ T1037] ? __pfx__printk+0x10/0x10 [ 86.331928][ T1037] ? rcu_is_watching+0x15/0xb0 [ 86.334138][ T1037] ? lock_release+0xbf/0xa30 [ 86.336125][ T1037] ? vscnprintf+0x5d/0x90 [ 86.337942][ T1037] panic+0x349/0x880 [ 86.339652][ T1037] ? check_panic_on_warn+0x21/0xb0 [ 86.341932][ T1037] ? __pfx_panic+0x10/0x10 [ 86.344461][ T1037] ? do_raw_spin_unlock+0x58/0x8b0 [ 86.349242][ T1037] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 86.352597][ T1037] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 86.355771][ T1037] ? print_report+0x502/0x550 [ 86.357761][ T1037] check_panic_on_warn+0x86/0xb0 [ 86.360383][ T1037] ? __lock_acquire+0x78/0x2100 [ 86.364954][ T1037] end_report+0x77/0x160 [ 86.367551][ T1037] kasan_report+0x154/0x180 [ 86.371162][ T1037] ? __lock_acquire+0x78/0x2100 [ 86.373723][ T1037] __lock_acquire+0x78/0x2100 [ 86.377341][ T1037] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 86.383048][ T1037] lock_acquire+0x1ed/0x550 [ 86.386042][ T1037] ? __wake_up_common_lock+0x25/0x1e0 [ 86.389439][ T1037] ? __pfx_lock_acquire+0x10/0x10 [ 86.393909][ T1037] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 86.397680][ T1037] _raw_spin_lock_irqsave+0xd5/0x120 [ 86.399949][ T1037] ? __wake_up_common_lock+0x25/0x1e0 [ 86.403175][ T1037] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 86.406366][ T1037] ? lbmIODone+0x2bf/0x1750 [ 86.408244][ T1037] ? blkg_put+0x23/0x250 [ 86.409890][ T1037] __wake_up_common_lock+0x25/0x1e0 [ 86.411692][ T1037] ? bio_endio+0x82a/0x890 [ 86.413355][ T1037] blk_update_request+0x5e5/0x1160 [ 86.415500][ T1037] blk_mq_end_request+0x3e/0x70 [ 86.417694][ T1037] loop_process_work+0x1bc8/0x21c0 [ 86.419907][ T1037] ? __pfx_loop_process_work+0x10/0x10 [ 86.421934][ T1037] ? register_lock_class+0x102/0x980 [ 86.424597][ T1037] ? __pfx_register_lock_class+0x10/0x10 [ 86.428022][ T1037] ? mark_lock+0x9a/0x360 [ 86.431789][ T1037] ? debug_object_deactivate+0x2d5/0x390 [ 86.435192][ T1037] ? __lock_acquire+0x1397/0x2100 [ 86.439528][ T1037] ? do_raw_spin_unlock+0x58/0x8b0 [ 86.441580][ T1037] ? __pfx_lock_acquire+0x10/0x10 [ 86.444959][ T1037] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 86.448574][ T1037] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 86.451997][ T1037] ? process_scheduled_works+0x976/0x1840 [ 86.454895][ T1037] process_scheduled_works+0xa66/0x1840 [ 86.457296][ T1037] ? __pfx_process_scheduled_works+0x10/0x10 [ 86.459708][ T1037] ? assign_work+0x364/0x3d0 [ 86.462135][ T1037] worker_thread+0x870/0xd30 [ 86.464825][ T1037] ? __kthread_parkme+0x169/0x1d0 [ 86.470441][ T1037] ? __pfx_worker_thread+0x10/0x10 [ 86.472380][ T1037] kthread+0x7a9/0x920 [ 86.481352][ T1037] ? __pfx_kthread+0x10/0x10 [ 86.483683][ T1037] ? __pfx_worker_thread+0x10/0x10 [ 86.486022][ T1037] ? __pfx_kthread+0x10/0x10 [ 86.489499][ T1037] ? __pfx_kthread+0x10/0x10 [ 86.501597][ T1037] ? __pfx_kthread+0x10/0x10 [ 86.503389][ T1037] ? _raw_spin_unlock_irq+0x23/0x50 [ 86.505434][ T1037] ? lockdep_hardirqs_on+0x99/0x150 [ 86.507700][ T1037] ? __pfx_kthread+0x10/0x10 [ 86.521267][ T1037] ret_from_fork+0x4b/0x80 [ 86.524530][ T1037] ? __pfx_kthread+0x10/0x10 [ 86.527622][ T1037] ret_from_fork_asm+0x1a/0x30 [ 86.529698][ T1037] [ 86.531197][ T1037] Kernel Offset: disabled [ 86.532707][ T1037] Rebooting in 86400 seconds..