program: syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000180)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c00598f2f223a0a12f76404ad3bd59a04fbd75d1008c039c51a2a013e63af1c9ed7416faa1e2ea98d0f1c7337a5c81920988a4299a77054cdb12285fd7a0e5b43382d962372b73042593a5bd6b7db4a1b3721c62f11018727c29f3a1bd1e554474ea0d1da2a20b205df342a04a34b65e16a23e8e7811a984963073ebcbead85f9e4332bdef4c1ce54a1c6f7a47b75aa95b9e8cb616be40a0000b1309ee426d1803ef09abb9509846c34b9ac0bf109cedbd12c850effda9ae677566159f9c83da7ff6e247e3ac43c0a663c8c83650692e474bac2c047b238601bd5187d6bed82fe2034512ef11b74a98252198c4402bcf3165561157678e9d50831c27d1094a04d8c7607d7164033cda7a8170482"], 0x1, 0x4442, &(0x7f00000088c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101740, 0x179) r0 = syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x22400) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x301001, 0x0) ioctl$IOC_PR_RELEASE(r3, 0x401070ca, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="24000000020605000000000000000000000000000500010006000000050005000200000042d0646225e53ad68535a47e1c7cb2ab77e2df579ea633c6a4190fa5471e6107ff0f0000442601b7e48e1dd1c5f94359592e61748a615580d269c219a0d2c0a7f4e815f4371e14733628efcbb209a34838bb744a73d05ab482ed8f4e50669aa95064a57ec2eca588c7007d55c3e98c323d922ee4f558252fbcd7b358a1aa6eb78b860e8dbe62e356d0f890c961de33ee05d0b94ee6c171acfeecd7804f5fad4b43f7323294296d0fa5f3e4801eb14d452eb864c018480664e7b7c3ede6ee35eff28fff41081c598d7c574f"], 0x24}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001400a1eb25bd7000fedbdf25020850fe", @ANYRES32=r6, @ANYBLOB="14000300691b8176746930000840020005010100080001001b10fba9080002007f69dfaaf400006c6c65bac0b24420fc98cd910035acba0cfdd5b931aea31db6c83a6433c70242e97da50ad7e9575042a7abee110e13f7356c9eed475a3c4e7125f85c2b6145e02633b7941ec9c160f52d82bc1f9b4dc1e8bfa7c96e41"], 0x54}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x4c}}, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYRES64, @ANYRES32=r9, @ANYRESHEX=r7], 0x24}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) r11 = socket$kcm(0x10, 0x6, 0x4) sendmsg$kcm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x40010001, 0x2, 0x15, 0x17, "9e959f16b6787b08aa26e66c4056a51695284854c382ec6bcfeef4fb0efcc1d8a6078ed98e203fd5f0643902dd8f6fac274de9d940bba5e51e92bbd4ce85450d", "f625c1076e4c36c800def96015e0fb7e904d865c2fdc458ee68d347f41be5a08", [0xf22, 0x7]}) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000140)='.\x00', 0x1a4a038, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) [ 68.084248][ T5305] Bluetooth: hci0: command tx timeout [ 68.322505][ T5321] loop0: detected capacity change from 0 to 32768 [ 68.334648][ T5321] ======================================================= [ 68.334648][ T5321] WARNING: The mand mount option has been deprecated and [ 68.334648][ T5321] and is ignored by this kernel. Remove the mand [ 68.334648][ T5321] option from the mount to silence this warning. [ 68.334648][ T5321] ======================================================= [ 68.386561][ T5321] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 68.402184][ T25] audit: type=1800 audit(1742492315.945:2): pid=5321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.0" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 68.415203][ T5321] ================================================================== [ 68.418340][ T5321] BUG: KASAN: slab-use-after-free in ocfs2_reserve_suballoc_bits+0x1020/0x4e70 [ 68.421971][ T5321] Read of size 4 at addr ffff88804339b004 by task syz.0.0/5321 [ 68.424894][ T5321] [ 68.425903][ T5321] CPU: 0 UID: 0 PID: 5321 Comm: syz.0.0 Not tainted 6.14.0-rc7-syzkaller-00137-g5fc319360819 #0 [ 68.425919][ T5321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.425925][ T5321] Call Trace: [ 68.425931][ T5321] [ 68.425936][ T5321] dump_stack_lvl+0x241/0x360 [ 68.425951][ T5321] ? __pfx_dump_stack_lvl+0x10/0x10 [ 68.425962][ T5321] ? __pfx__printk+0x10/0x10 [ 68.425972][ T5321] ? _printk+0xd5/0x120 [ 68.425980][ T5321] ? __virt_addr_valid+0x183/0x530 [ 68.425991][ T5321] ? __virt_addr_valid+0x183/0x530 [ 68.425999][ T5321] print_report+0x16e/0x5b0 [ 68.426011][ T5321] ? __virt_addr_valid+0x183/0x530 [ 68.426020][ T5321] ? __virt_addr_valid+0x183/0x530 [ 68.426028][ T5321] ? __virt_addr_valid+0x45f/0x530 [ 68.426037][ T5321] ? __phys_addr+0xba/0x170 [ 68.426046][ T5321] ? ocfs2_reserve_suballoc_bits+0x1020/0x4e70 [ 68.426062][ T5321] kasan_report+0x143/0x180 [ 68.426075][ T5321] ? ocfs2_reserve_suballoc_bits+0x1020/0x4e70 [ 68.426089][ T5321] ocfs2_reserve_suballoc_bits+0x1020/0x4e70 [ 68.426105][ T5321] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 68.426122][ T5321] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 68.426138][ T5321] ? lockdep_hardirqs_on+0x99/0x150 [ 68.426187][ T5321] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 68.426197][ T5321] ? __pfx_ocfs2_reserve_suballoc_bits+0x10/0x10 [ 68.426209][ T5321] ? stack_depot_save_flags+0x7b4/0x940 [ 68.426221][ T5321] ? kasan_save_track+0x51/0x80 [ 68.426229][ T5321] ? kasan_save_track+0x3f/0x80 [ 68.426235][ T5321] ? __kasan_kmalloc+0x98/0xb0 [ 68.426242][ T5321] ? __kmalloc_cache_noprof+0x243/0x390 [ 68.426253][ T5321] ? ocfs2_reserve_new_metadata_blocks+0x117/0x9c0 [ 68.426263][ T5321] ? ocfs2_extend_dir+0xdf9/0x51a0 [ 68.426271][ T5321] ? ocfs2_prepare_dir_for_insert+0x3679/0x5fa0 [ 68.426279][ T5321] ? ocfs2_mknod+0xcaf/0x2b30 [ 68.426291][ T5321] ? ocfs2_create+0x1ab/0x470 [ 68.426302][ T5321] ? path_openat+0x193c/0x3590 [ 68.426313][ T5321] ? do_filp_open+0x27f/0x4e0 [ 68.426323][ T5321] ? do_sys_openat2+0x13e/0x1d0 [ 68.426337][ T5321] ? __x64_sys_openat+0x247/0x2a0 [ 68.426351][ T5321] ? do_syscall_64+0xf3/0x230 [ 68.426360][ T5321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.426377][ T5321] ? __kasan_kmalloc+0x98/0xb0 [ 68.426385][ T5321] ? __kmalloc_cache_noprof+0x243/0x390 [ 68.426393][ T5321] ? ocfs2_reserve_new_metadata_blocks+0x117/0x9c0 [ 68.426404][ T5321] ocfs2_reserve_new_metadata_blocks+0x41c/0x9c0 [ 68.426413][ T5321] ? hlock_conflict+0x59/0x1e0 [ 68.426421][ T5321] ? __pfx_ocfs2_reserve_new_metadata_blocks+0x10/0x10 [ 68.426432][ T5321] ? down_write+0x18c/0x220 [ 68.426438][ T5321] ? __pfx_down_write+0x10/0x10 [ 68.426445][ T5321] ocfs2_extend_dir+0xdf9/0x51a0 [ 68.426457][ T5321] ? __pfx_ocfs2_extend_dir+0x10/0x10 [ 68.426465][ T5321] ? lock_release+0xbf/0xa30 [ 68.426474][ T5321] ? validate_chain+0x11e/0x5920 [ 68.426488][ T5321] ? __pfx_ocfs2_journal_access_di+0x10/0x10 [ 68.426495][ T5321] ? mark_lock+0x9a/0x360 [ 68.426505][ T5321] ? __pfx_lock_acquire+0x10/0x10 [ 68.426514][ T5321] ? ocfs2_buffer_cached+0x3d3/0x830 [ 68.426524][ T5321] ? __pfx_lock_release+0x10/0x10 [ 68.426534][ T5321] ? do_raw_spin_lock+0x14f/0x370 [ 68.426546][ T5321] ? rcu_is_watching+0x15/0xb0 [ 68.426555][ T5321] ? __asan_memcpy+0x40/0x70 [ 68.426562][ T5321] ? ocfs2_dx_dir_name_hash+0xb6e/0xd30 [ 68.426574][ T5321] ? __pfx_ocfs2_dx_dir_name_hash+0x10/0x10 [ 68.426585][ T5321] ? bdev_getblk+0x6e/0x670 [ 68.426599][ T5321] ocfs2_prepare_dir_for_insert+0x3679/0x5fa0 [ 68.426614][ T5321] ? __pfx_ocfs2_read_blocks+0x10/0x10 [ 68.426624][ T5321] ? __pfx_ocfs2_prepare_dir_for_insert+0x10/0x10 [ 68.426632][ T5321] ? rcu_is_watching+0x15/0xb0 [ 68.426639][ T5321] ? ocfs2_search_dirblock+0x39b/0x8c0 [ 68.426648][ T5321] ? __pfx_ocfs2_search_dirblock+0x10/0x10 [ 68.426655][ T5321] ? __mutex_unlock_slowpath+0x227/0x800 [ 68.426665][ T5321] ? __pfx_ocfs2_set_buffer_uptodate+0x10/0x10 [ 68.426675][ T5321] ? __brelse+0x59/0xa0 [ 68.426683][ T5321] ? ocfs2_find_entry+0x1027/0x2570 [ 68.426689][ T5321] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 68.426699][ T5321] ? bdev_getblk+0x6e/0x670 [ 68.426709][ T5321] ? __pfx_ocfs2_find_entry+0x10/0x10 [ 68.426716][ T5321] ? ocfs2_read_blocks+0x1246/0x1600 [ 68.426723][ T5321] ? __pfx_ocfs2_validate_inode_block+0x10/0x10 [ 68.426735][ T5321] ? __pfx_ocfs2_read_blocks+0x10/0x10 [ 68.426742][ T5321] ? __pfx_lock_acquire+0x10/0x10 [ 68.426752][ T5321] ? ocfs2_inode_lock_full_nested+0x17b/0x1be0 [ 68.426761][ T5321] ? ocfs2_read_inode_block+0x14c/0x1e0 [ 68.426771][ T5321] ? __pfx_ocfs2_read_inode_block+0x10/0x10 [ 68.426781][ T5321] ? do_raw_spin_unlock+0x58/0x8b0 [ 68.426790][ T5321] ? ocfs2_inode_lock_full_nested+0xb29/0x1be0 [ 68.426805][ T5321] ? __pfx_ocfs2_inode_lock_full_nested+0x10/0x10 [ 68.426817][ T5321] ? __asan_memset+0x23/0x50 [ 68.426827][ T5321] ? ocfs2_check_dir_for_entry+0x2dc/0x4a0 [ 68.426838][ T5321] ? __pfx_ocfs2_check_dir_for_entry+0x10/0x10 [ 68.426849][ T5321] ? ocfs2_find_entry+0x1027/0x2570 [ 68.426861][ T5321] ? ocfs2_mknod+0x2c7/0x2b30 [ 68.426870][ T5321] ocfs2_mknod+0xcaf/0x2b30 [ 68.426878][ T5321] ? __pfx_validate_chain+0x10/0x10 [ 68.426887][ T5321] ? __pfx_ocfs2_mknod+0x10/0x10 [ 68.426901][ T5321] ? __lock_acquire+0x1397/0x2100 [ 68.426919][ T5321] ? __pfx_lock_acquire+0x10/0x10 [ 68.426932][ T5321] ? ocfs2_inode_unlock+0xa7/0x150 [ 68.426945][ T5321] ? __pfx_lock_release+0x10/0x10 [ 68.426959][ T5321] ? do_raw_spin_lock+0x14f/0x370 [ 68.427003][ T5321] ? do_raw_spin_unlock+0x58/0x8b0 [ 68.427018][ T5321] ? _raw_spin_unlock+0x28/0x50 [ 68.427031][ T5321] ? rcu_is_watching+0x15/0xb0 [ 68.427043][ T5321] ? ocfs2_lookup+0x503/0xa30 [ 68.427060][ T5321] ocfs2_create+0x1ab/0x470 [ 68.427075][ T5321] ? __pfx_ocfs2_create+0x10/0x10 [ 68.427084][ T5321] ? inode_permission+0xff/0x460 [ 68.427095][ T5321] ? __pfx_ocfs2_permission+0x10/0x10 [ 68.427104][ T5321] ? bpf_lsm_inode_create+0x9/0x10 [ 68.427116][ T5321] ? security_inode_create+0xbe/0x340 [ 68.427126][ T5321] ? __pfx_ocfs2_create+0x10/0x10 [ 68.427140][ T5321] path_openat+0x193c/0x3590 [ 68.427155][ T5321] ? __pfx_path_openat+0x10/0x10 [ 68.427171][ T5321] do_filp_open+0x27f/0x4e0 [ 68.427182][ T5321] ? __pfx_do_filp_open+0x10/0x10 [ 68.427191][ T5321] ? do_raw_spin_lock+0x14f/0x370 [ 68.427211][ T5321] do_sys_openat2+0x13e/0x1d0 [ 68.427225][ T5321] ? __might_fault+0xaa/0x120 [ 68.427234][ T5321] ? __pfx_do_sys_openat2+0x10/0x10 [ 68.427247][ T5321] ? rcu_is_watching+0x15/0xb0 [ 68.427257][ T5321] ? __rseq_handle_notify_resume+0x34d/0x14e0 [ 68.427275][ T5321] __x64_sys_openat+0x247/0x2a0 [ 68.427291][ T5321] ? __pfx___x64_sys_openat+0x10/0x10 [ 68.427305][ T5321] ? do_syscall_64+0x100/0x230 [ 68.427317][ T5321] ? do_syscall_64+0xb6/0x230 [ 68.427326][ T5321] do_syscall_64+0xf3/0x230 [ 68.427336][ T5321] ? clear_bhb_loop+0x35/0x90 [ 68.427350][ T5321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.427364][ T5321] RIP: 0033:0x7fa99d38d169 [ 68.427375][ T5321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.427384][ T5321] RSP: 002b:00007fa99e27d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 68.427396][ T5321] RAX: ffffffffffffffda RBX: 00007fa99d5a5fa0 RCX: 00007fa99d38d169 [ 68.427404][ T5321] RDX: 0000000000101740 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 68.427412][ T5321] RBP: 00007fa99d40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 68.427420][ T5321] R10: 0000000000000179 R11: 0000000000000246 R12: 0000000000000000 [ 68.427427][ T5321] R13: 0000000000000000 R14: 00007fa99d5a5fa0 R15: 00007ffff00931a8 [ 68.427439][ T5321] [ 68.427443][ T5321] [ 68.712701][ T5321] Allocated by task 5304: [ 68.714335][ T5321] kasan_save_track+0x3f/0x80 [ 68.716200][ T5321] __kasan_kmalloc+0x98/0xb0 [ 68.717780][ T5321] __kmalloc_cache_noprof+0x243/0x390 [ 68.719829][ T5321] netdevice_event+0x3f2/0x8e0 [ 68.721768][ T5321] notifier_call_chain+0x1a5/0x3f0 [ 68.723642][ T5321] call_netdevice_notifiers+0xb6/0xf0 [ 68.725671][ T5321] ipvlan_device_event+0x697/0xa10 [ 68.727565][ T5321] notifier_call_chain+0x1a5/0x3f0 [ 68.729564][ T5321] dev_set_mac_address+0x3d9/0x510 [ 68.731390][ T5321] dev_set_mac_address_user+0x31/0x50 [ 68.733068][ T5321] do_setlink+0x784/0x4300 [ 68.734498][ T5321] rtnl_newlink+0x1704/0x1d30 [ 68.736080][ T5321] rtnetlink_rcv_msg+0x791/0xcf0 [ 68.737848][ T5321] netlink_rcv_skb+0x206/0x480 [ 68.739745][ T5321] netlink_unicast+0x7f6/0x990 [ 68.741536][ T5321] netlink_sendmsg+0x8de/0xcb0 [ 68.743339][ T5321] __sock_sendmsg+0x221/0x270 [ 68.745257][ T5321] __sys_sendto+0x363/0x4c0 [ 68.746993][ T5321] __x64_sys_sendto+0xde/0x100 [ 68.748737][ T5321] do_syscall_64+0xf3/0x230 [ 68.750549][ T5321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.752777][ T5321] [ 68.753687][ T5321] Freed by task 1094: [ 68.755126][ T5321] kasan_save_track+0x3f/0x80 [ 68.756696][ T5321] kasan_save_free_info+0x40/0x50 [ 68.758468][ T5321] __kasan_slab_free+0x59/0x70 [ 68.760270][ T5321] kfree+0x196/0x430 [ 68.761774][ T5321] process_scheduled_works+0xabe/0x18e0 [ 68.763894][ T5321] worker_thread+0x870/0xd30 [ 68.765734][ T5321] kthread+0x7a9/0x920 [ 68.767360][ T5321] ret_from_fork+0x4b/0x80 [ 68.769037][ T5321] ret_from_fork_asm+0x1a/0x30 [ 68.770854][ T5321] [ 68.771868][ T5321] Last potentially related work creation: [ 68.773909][ T5321] kasan_save_stack+0x3f/0x60 [ 68.775676][ T5321] kasan_record_aux_stack+0xaa/0xc0 [ 68.777566][ T5321] insert_work+0x3e/0x330 [ 68.779231][ T5321] __queue_work+0xd9a/0x1090 [ 68.780992][ T5321] queue_work_on+0x1c2/0x380 [ 68.782799][ T5321] netdevice_event+0x7ae/0x8e0 [ 68.784674][ T5321] notifier_call_chain+0x1a5/0x3f0 [ 68.786522][ T5321] call_netdevice_notifiers+0xb6/0xf0 [ 68.788528][ T5321] ipvlan_device_event+0x697/0xa10 [ 68.790414][ T5321] notifier_call_chain+0x1a5/0x3f0 [ 68.792250][ T5321] dev_set_mac_address+0x3d9/0x510 [ 68.793998][ T5321] dev_set_mac_address_user+0x31/0x50 [ 68.796033][ T5321] do_setlink+0x784/0x4300 [ 68.797669][ T5321] rtnl_newlink+0x1704/0x1d30 [ 68.799323][ T5321] rtnetlink_rcv_msg+0x791/0xcf0 [ 68.801076][ T5321] netlink_rcv_skb+0x206/0x480 [ 68.802710][ T5321] netlink_unicast+0x7f6/0x990 [ 68.804462][ T5321] netlink_sendmsg+0x8de/0xcb0 [ 68.806245][ T5321] __sock_sendmsg+0x221/0x270 [ 68.807960][ T5321] __sys_sendto+0x363/0x4c0 [ 68.809569][ T5321] __x64_sys_sendto+0xde/0x100 [ 68.811232][ T5321] do_syscall_64+0xf3/0x230 [ 68.813059][ T5321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.815594][ T5321] [ 68.816529][ T5321] The buggy address belongs to the object at ffff88804339b000 [ 68.816529][ T5321] which belongs to the cache kmalloc-192 of size 192 [ 68.821720][ T5321] The buggy address is located 4 bytes inside of [ 68.821720][ T5321] freed 192-byte region [ffff88804339b000, ffff88804339b0c0) [ 68.826545][ T5321] [ 68.827434][ T5321] The buggy address belongs to the physical page: [ 68.829882][ T5321] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4339b [ 68.833219][ T5321] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 68.835976][ T5321] page_type: f5(slab) [ 68.837601][ T5321] raw: 04fff00000000000 ffff88801b0413c0 dead000000000122 0000000000000000 [ 68.840919][ T5321] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 68.844256][ T5321] page dumped because: kasan: bad access detected [ 68.846794][ T5321] page_owner tracks the page as allocated [ 68.849102][ T5321] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5304, tgid 5304 (syz-executor), ts 66241621762, free_ts 66234291887 [ 68.856682][ T5321] post_alloc_hook+0x1f4/0x240 [ 68.858575][ T5321] get_page_from_freelist+0x365c/0x37a0 [ 68.860677][ T5321] __alloc_frozen_pages_noprof+0x292/0x710 [ 68.862880][ T5321] alloc_pages_mpol+0x311/0x660 [ 68.864769][ T5321] allocate_slab+0x8f/0x3a0 [ 68.866503][ T5321] ___slab_alloc+0xc27/0x14a0 [ 68.868402][ T5321] __slab_alloc+0x58/0xa0 [ 68.870099][ T5321] __kmalloc_cache_noprof+0x27b/0x390 [ 68.872214][ T5321] netdevice_event+0x3f2/0x8e0 [ 68.874216][ T5321] notifier_call_chain+0x1a5/0x3f0 [ 68.876264][ T5321] call_netdevice_notifiers+0xb6/0xf0 [ 68.878384][ T5321] ipvlan_device_event+0x697/0xa10 [ 68.880382][ T5321] notifier_call_chain+0x1a5/0x3f0 [ 68.882404][ T5321] dev_set_mac_address+0x3d9/0x510 [ 68.884506][ T5321] dev_set_mac_address_user+0x31/0x50 [ 68.886409][ T5321] do_setlink+0x784/0x4300 [ 68.888122][ T5321] page last free pid 17 tgid 17 stack trace: [ 68.890425][ T5321] free_frozen_pages+0xe0d/0x10e0 [ 68.892414][ T5321] __tlb_remove_table+0x33c/0x420 [ 68.894465][ T5321] tlb_remove_table_rcu+0x76/0xf0 [ 68.896450][ T5321] rcu_core+0xaaa/0x17a0 [ 68.898164][ T5321] handle_softirqs+0x2d4/0x9b0 [ 68.900075][ T5321] run_ksoftirqd+0xca/0x130 [ 68.901836][ T5321] smpboot_thread_fn+0x544/0xa30 [ 68.903780][ T5321] kthread+0x7a9/0x920 [ 68.905425][ T5321] ret_from_fork+0x4b/0x80 [ 68.907214][ T5321] ret_from_fork_asm+0x1a/0x30 [ 68.909102][ T5321] [ 68.910080][ T5321] Memory state around the buggy address: [ 68.912835][ T5321] ffff88804339af00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 68.915947][ T5321] ffff88804339af80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 68.918897][ T5321] >ffff88804339b000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 68.921717][ T5321] ^ [ 68.923230][ T5321] ffff88804339b080: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 68.926355][ T5321] ffff88804339b100: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 68.929545][ T5321] ================================================================== [ 68.958584][ T5321] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 68.961347][ T5321] CPU: 0 UID: 0 PID: 5321 Comm: syz.0.0 Not tainted 6.14.0-rc7-syzkaller-00137-g5fc319360819 #0 [ 68.965467][ T5321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.969845][ T5321] Call Trace: [ 68.971246][ T5321] [ 68.972453][ T5321] dump_stack_lvl+0x241/0x360 [ 68.974296][ T5321] ? __pfx_dump_stack_lvl+0x10/0x10 [ 68.976421][ T5321] ? __pfx__printk+0x10/0x10 [ 68.978242][ T5321] ? preempt_schedule+0xe1/0xf0 [ 68.980295][ T5321] ? vscnprintf+0x5d/0x90 [ 68.981962][ T5321] panic+0x349/0x880 [ 68.983521][ T5321] ? check_panic_on_warn+0x21/0xb0 [ 68.985598][ T5321] ? __pfx_panic+0x10/0x10 [ 68.987452][ T5321] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 68.989893][ T5321] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 68.992299][ T5321] ? print_report+0x519/0x5b0 [ 68.994198][ T5321] check_panic_on_warn+0x86/0xb0 [ 68.996191][ T5321] ? ocfs2_reserve_suballoc_bits+0x1020/0x4e70 [ 68.998519][ T5321] end_report+0x77/0x160 [ 69.000149][ T5321] kasan_report+0x154/0x180 [ 69.001828][ T5321] ? ocfs2_reserve_suballoc_bits+0x1020/0x4e70 [ 69.004108][ T5321] ocfs2_reserve_suballoc_bits+0x1020/0x4e70 [ 69.006349][ T5321] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 69.008562][ T5321] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 69.010821][ T5321] ? lockdep_hardirqs_on+0x99/0x150 [ 69.012777][ T5321] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 69.015153][ T5321] ? __pfx_ocfs2_reserve_suballoc_bits+0x10/0x10 [ 69.017433][ T5321] ? stack_depot_save_flags+0x7b4/0x940 [ 69.019420][ T5321] ? kasan_save_track+0x51/0x80 [ 69.021128][ T5321] ? kasan_save_track+0x3f/0x80 [ 69.022904][ T5321] ? __kasan_kmalloc+0x98/0xb0 [ 69.024808][ T5321] ? __kmalloc_cache_noprof+0x243/0x390 [ 69.026939][ T5321] ? ocfs2_reserve_new_metadata_blocks+0x117/0x9c0 [ 69.029408][ T5321] ? ocfs2_extend_dir+0xdf9/0x51a0 [ 69.031435][ T5321] ? ocfs2_prepare_dir_for_insert+0x3679/0x5fa0 [ 69.033796][ T5321] ? ocfs2_mknod+0xcaf/0x2b30 [ 69.035634][ T5321] ? ocfs2_create+0x1ab/0x470 [ 69.037435][ T5321] ? path_openat+0x193c/0x3590 [ 69.039328][ T5321] ? do_filp_open+0x27f/0x4e0 [ 69.041130][ T5321] ? do_sys_openat2+0x13e/0x1d0 [ 69.043007][ T5321] ? __x64_sys_openat+0x247/0x2a0 [ 69.044957][ T5321] ? do_syscall_64+0xf3/0x230 [ 69.046780][ T5321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.049034][ T5321] ? __kasan_kmalloc+0x98/0xb0 [ 69.050720][ T5321] ? __kmalloc_cache_noprof+0x243/0x390 [ 69.052767][ T5321] ? ocfs2_reserve_new_metadata_blocks+0x117/0x9c0 [ 69.055267][ T5321] ocfs2_reserve_new_metadata_blocks+0x41c/0x9c0 [ 69.057691][ T5321] ? hlock_conflict+0x59/0x1e0 [ 69.059622][ T5321] ? __pfx_ocfs2_reserve_new_metadata_blocks+0x10/0x10 [ 69.062277][ T5321] ? down_write+0x18c/0x220 [ 69.064024][ T5321] ? __pfx_down_write+0x10/0x10 [ 69.066005][ T5321] ocfs2_extend_dir+0xdf9/0x51a0 [ 69.067983][ T5321] ? __pfx_ocfs2_extend_dir+0x10/0x10 [ 69.069965][ T5321] ? lock_release+0xbf/0xa30 [ 69.071625][ T5321] ? validate_chain+0x11e/0x5920 [ 69.073435][ T5321] ? __pfx_ocfs2_journal_access_di+0x10/0x10 [ 69.075717][ T5321] ? mark_lock+0x9a/0x360 [ 69.077367][ T5321] ? __pfx_lock_acquire+0x10/0x10 [ 69.079266][ T5321] ? ocfs2_buffer_cached+0x3d3/0x830 [ 69.081307][ T5321] ? __pfx_lock_release+0x10/0x10 [ 69.083266][ T5321] ? do_raw_spin_lock+0x14f/0x370 [ 69.085235][ T5321] ? rcu_is_watching+0x15/0xb0 [ 69.087108][ T5321] ? __asan_memcpy+0x40/0x70 [ 69.088905][ T5321] ? ocfs2_dx_dir_name_hash+0xb6e/0xd30 [ 69.091082][ T5321] ? __pfx_ocfs2_dx_dir_name_hash+0x10/0x10 [ 69.093265][ T5321] ? bdev_getblk+0x6e/0x670 [ 69.095112][ T5321] ocfs2_prepare_dir_for_insert+0x3679/0x5fa0 [ 69.097440][ T5321] ? __pfx_ocfs2_read_blocks+0x10/0x10 [ 69.099583][ T5321] ? __pfx_ocfs2_prepare_dir_for_insert+0x10/0x10 [ 69.102129][ T5321] ? rcu_is_watching+0x15/0xb0 [ 69.104017][ T5321] ? ocfs2_search_dirblock+0x39b/0x8c0 [ 69.106131][ T5321] ? __pfx_ocfs2_search_dirblock+0x10/0x10 [ 69.108399][ T5321] ? __mutex_unlock_slowpath+0x227/0x800 [ 69.110585][ T5321] ? __pfx_ocfs2_set_buffer_uptodate+0x10/0x10 [ 69.113040][ T5321] ? __brelse+0x59/0xa0 [ 69.114783][ T5321] ? ocfs2_find_entry+0x1027/0x2570 [ 69.116835][ T5321] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 69.119262][ T5321] ? bdev_getblk+0x6e/0x670 [ 69.121029][ T5321] ? __pfx_ocfs2_find_entry+0x10/0x10 [ 69.123125][ T5321] ? ocfs2_read_blocks+0x1246/0x1600 [ 69.125231][ T5321] ? __pfx_ocfs2_validate_inode_block+0x10/0x10 [ 69.127515][ T5321] ? __pfx_ocfs2_read_blocks+0x10/0x10 [ 69.129618][ T5321] ? __pfx_lock_acquire+0x10/0x10 [ 69.131640][ T5321] ? ocfs2_inode_lock_full_nested+0x17b/0x1be0 [ 69.134097][ T5321] ? ocfs2_read_inode_block+0x14c/0x1e0 [ 69.136328][ T5321] ? __pfx_ocfs2_read_inode_block+0x10/0x10 [ 69.138697][ T5321] ? do_raw_spin_unlock+0x58/0x8b0 [ 69.140743][ T5321] ? ocfs2_inode_lock_full_nested+0xb29/0x1be0 [ 69.143170][ T5321] ? __pfx_ocfs2_inode_lock_full_nested+0x10/0x10 [ 69.145692][ T5321] ? __asan_memset+0x23/0x50 [ 69.147527][ T5321] ? ocfs2_check_dir_for_entry+0x2dc/0x4a0 [ 69.149816][ T5321] ? __pfx_ocfs2_check_dir_for_entry+0x10/0x10 [ 69.152183][ T5321] ? ocfs2_find_entry+0x1027/0x2570 [ 69.154277][ T5321] ? ocfs2_mknod+0x2c7/0x2b30 [ 69.156171][ T5321] ocfs2_mknod+0xcaf/0x2b30 [ 69.157973][ T5321] ? __pfx_validate_chain+0x10/0x10 [ 69.160012][ T5321] ? __pfx_ocfs2_mknod+0x10/0x10 [ 69.161949][ T5321] ? __lock_acquire+0x1397/0x2100 [ 69.163947][ T5321] ? __pfx_lock_acquire+0x10/0x10 [ 69.165934][ T5321] ? ocfs2_inode_unlock+0xa7/0x150 [ 69.167992][ T5321] ? __pfx_lock_release+0x10/0x10 [ 69.169965][ T5321] ? do_raw_spin_lock+0x14f/0x370 [ 69.171923][ T5321] ? do_raw_spin_unlock+0x58/0x8b0 [ 69.173924][ T5321] ? _raw_spin_unlock+0x28/0x50 [ 69.175876][ T5321] ? rcu_is_watching+0x15/0xb0 [ 69.177750][ T5321] ? ocfs2_lookup+0x503/0xa30 [ 69.179577][ T5321] ocfs2_create+0x1ab/0x470 [ 69.181289][ T5321] ? __pfx_ocfs2_create+0x10/0x10 [ 69.183190][ T5321] ? inode_permission+0xff/0x460 [ 69.185103][ T5321] ? __pfx_ocfs2_permission+0x10/0x10 [ 69.187209][ T5321] ? bpf_lsm_inode_create+0x9/0x10 [ 69.189242][ T5321] ? security_inode_create+0xbe/0x340 [ 69.191319][ T5321] ? __pfx_ocfs2_create+0x10/0x10 [ 69.193177][ T5321] path_openat+0x193c/0x3590 [ 69.194984][ T5321] ? __pfx_path_openat+0x10/0x10 [ 69.196898][ T5321] do_filp_open+0x27f/0x4e0 [ 69.198816][ T5321] ? __pfx_do_filp_open+0x10/0x10 [ 69.200720][ T5321] ? do_raw_spin_lock+0x14f/0x370 [ 69.202700][ T5321] do_sys_openat2+0x13e/0x1d0 [ 69.204613][ T5321] ? __might_fault+0xaa/0x120 [ 69.206424][ T5321] ? __pfx_do_sys_openat2+0x10/0x10 [ 69.208435][ T5321] ? rcu_is_watching+0x15/0xb0 [ 69.210246][ T5321] ? __rseq_handle_notify_resume+0x34d/0x14e0 [ 69.212557][ T5321] __x64_sys_openat+0x247/0x2a0 [ 69.214434][ T5321] ? __pfx___x64_sys_openat+0x10/0x10 [ 69.216490][ T5321] ? do_syscall_64+0x100/0x230 [ 69.218339][ T5321] ? do_syscall_64+0xb6/0x230 [ 69.220210][ T5321] do_syscall_64+0xf3/0x230 [ 69.221942][ T5321] ? clear_bhb_loop+0x35/0x90 [ 69.223816][ T5321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.226130][ T5321] RIP: 0033:0x7fa99d38d169 [ 69.227918][ T5321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.235380][ T5321] RSP: 002b:00007fa99e27d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 69.238635][ T5321] RAX: ffffffffffffffda RBX: 00007fa99d5a5fa0 RCX: 00007fa99d38d169 [ 69.241554][ T5321] RDX: 0000000000101740 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 69.244466][ T5321] RBP: 00007fa99d40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 69.247419][ T5321] R10: 0000000000000179 R11: 0000000000000246 R12: 0000000000000000 [ 69.250508][ T5321] R13: 0000000000000000 R14: 00007fa99d5a5fa0 R15: 00007ffff00931a8 [ 69.253633][ T5321] [ 69.255163][ T5321] Kernel Offset: disabled [ 69.256859][ T5321] Rebooting in 86400 seconds..