Warning: Permanently added '[localhost]:14564' (ED25519) to the list of known hosts. executing program [ 69.239094][ T5308] loop0: detected capacity change from 0 to 32768 [ 69.245584][ T5308] ======================================================= [ 69.245584][ T5308] WARNING: The mand mount option has been deprecated and [ 69.245584][ T5308] and is ignored by this kernel. Remove the mand [ 69.245584][ T5308] option from the mount to silence this warning. [ 69.245584][ T5308] ======================================================= [ 69.273221][ T5308] (syz-executor335,5308,0):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "heartbõeat=none" or missing value [ 69.283565][ T5308] (syz-executor335,5308,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 69.495746][ T5308] loop0: detected capacity change from 0 to 32768 [ 69.538744][ T5308] JBD2: Ignoring recovery information on journal [ 69.564724][ T5308] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 69.572830][ T1025] (kworker/u4:4,1025,0):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 69.577464][ T1025] (kworker/u4:4,1025,0):ocfs2_read_locked_inode:521 ERROR: status = -12 [ 69.584075][ T1025] ================================================================== [ 69.587175][ T1025] BUG: KASAN: slab-out-of-bounds in ocfs2_dir_foreach_blk+0x1ab6/0x1b20 [ 69.591844][ T1025] Read of size 8 at addr ffff888040701778 by task kworker/u4:4/1025 [ 69.595644][ T1025] [ 69.596574][ T1025] CPU: 0 UID: 0 PID: 1025 Comm: kworker/u4:4 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 69.600542][ T1025] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.604321][ T1025] Workqueue: ocfs2_wq ocfs2_complete_recovery [ 69.606572][ T1025] Call Trace: [ 69.607814][ T1025] [ 69.608902][ T1025] dump_stack_lvl+0x241/0x360 [ 69.610688][ T1025] ? __pfx_dump_stack_lvl+0x10/0x10 [ 69.612530][ T1025] ? __pfx__printk+0x10/0x10 [ 69.614136][ T1025] ? _printk+0xd5/0x120 [ 69.615756][ T1025] ? __virt_addr_valid+0x183/0x530 [ 69.617687][ T1025] ? __virt_addr_valid+0x183/0x530 [ 69.619605][ T1025] print_report+0x169/0x550 [ 69.621171][ T1025] ? __virt_addr_valid+0x183/0x530 [ 69.622929][ T1025] ? __virt_addr_valid+0x183/0x530 [ 69.624715][ T1025] ? __virt_addr_valid+0x45f/0x530 [ 69.626542][ T1025] ? __phys_addr+0xba/0x170 [ 69.628152][ T1025] ? ocfs2_dir_foreach_blk+0x1ab6/0x1b20 [ 69.630104][ T1025] kasan_report+0x143/0x180 [ 69.631742][ T1025] ? ocfs2_dir_foreach_blk+0x1ab6/0x1b20 [ 69.633792][ T1025] ocfs2_dir_foreach_blk+0x1ab6/0x1b20 [ 69.635766][ T1025] ? __pfx_ocfs2_dir_foreach_blk+0x10/0x10 [ 69.637923][ T1025] ? inode_query_iversion+0x17f/0x1f0 [ 69.639853][ T1025] ? __pfx___might_resched+0x10/0x10 [ 69.641635][ T1025] ? __pfx_inode_query_iversion+0x10/0x10 [ 69.643635][ T1025] ? __pfx_ocfs2_get_system_file_inode+0x10/0x10 [ 69.645835][ T1025] ? ocfs2_complete_recovery+0xbeb/0x25c0 [ 69.647823][ T1025] ? do_raw_spin_lock+0x14f/0x370 [ 69.649547][ T1025] ocfs2_dir_foreach+0xb4/0x100 [ 69.651388][ T1025] ? __pfx_ocfs2_dir_foreach+0x10/0x10 [ 69.653363][ T1025] ? do_raw_spin_unlock+0x58/0x8b0 [ 69.655093][ T1025] ocfs2_complete_recovery+0xcf1/0x25c0 [ 69.657105][ T1025] ? __pfx_ocfs2_complete_recovery+0x10/0x10 [ 69.659241][ T1025] ? __pfx_ocfs2_orphan_filldir+0x10/0x10 [ 69.661267][ T1025] ? __lock_acquire+0x1384/0x2050 [ 69.663193][ T1025] ? __pfx_lock_acquire+0x10/0x10 [ 69.664942][ T1025] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 69.667022][ T1025] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 69.669168][ T1025] ? process_scheduled_works+0x976/0x1850 [ 69.670831][ T1025] process_scheduled_works+0xa63/0x1850 [ 69.672790][ T1025] ? __pfx_process_scheduled_works+0x10/0x10 [ 69.674894][ T1025] ? assign_work+0x364/0x3d0 [ 69.676622][ T1025] worker_thread+0x870/0xd30 [ 69.678251][ T1025] ? __kthread_parkme+0x169/0x1d0 [ 69.680196][ T1025] ? __pfx_worker_thread+0x10/0x10 [ 69.682060][ T1025] kthread+0x2f0/0x390 [ 69.683549][ T1025] ? __pfx_worker_thread+0x10/0x10 [ 69.685389][ T1025] ? __pfx_kthread+0x10/0x10 [ 69.686880][ T1025] ret_from_fork+0x4b/0x80 [ 69.688514][ T1025] ? __pfx_kthread+0x10/0x10 [ 69.690099][ T1025] ret_from_fork_asm+0x1a/0x30 [ 69.691919][ T1025] [ 69.693115][ T1025] [ 69.694038][ T1025] Allocated by task 1: [ 69.695595][ T1025] kasan_save_track+0x3f/0x80 [ 69.697218][ T1025] __kasan_slab_alloc+0x66/0x80 [ 69.698797][ T1025] kmem_cache_alloc_noprof+0x135/0x2a0 [ 69.700796][ T1025] __kernfs_new_node+0xd8/0x870 [ 69.702577][ T1025] kernfs_new_node+0x137/0x240 [ 69.704359][ T1025] __kernfs_create_file+0x49/0x2e0 [ 69.706165][ T1025] sysfs_add_file_mode_ns+0x24a/0x310 [ 69.708043][ T1025] internal_create_group+0x7a7/0x11d0 [ 69.709911][ T1025] sysfs_slab_add+0x157/0x290 [ 69.711624][ T1025] slab_sysfs_init+0x66/0x170 [ 69.713373][ T1025] do_one_initcall+0x248/0x880 [ 69.715110][ T1025] do_initcall_level+0x157/0x210 [ 69.716878][ T1025] do_initcalls+0x3f/0x80 [ 69.718453][ T1025] kernel_init_freeable+0x435/0x5d0 [ 69.720394][ T1025] kernel_init+0x1d/0x2b0 [ 69.721981][ T1025] ret_from_fork+0x4b/0x80 [ 69.723611][ T1025] ret_from_fork_asm+0x1a/0x30 [ 69.725346][ T1025] [ 69.726298][ T1025] The buggy address belongs to the object at ffff888040701690 [ 69.726298][ T1025] which belongs to the cache kernfs_node_cache of size 176 [ 69.731464][ T1025] The buggy address is located 56 bytes to the right of [ 69.731464][ T1025] allocated 176-byte region [ffff888040701690, ffff888040701740) [ 69.737019][ T1025] [ 69.737833][ T1025] The buggy address belongs to the physical page: [ 69.740169][ T1025] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x40701 [ 69.743434][ T1025] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 69.746085][ T1025] page_type: f5(slab) [ 69.747727][ T1025] raw: 04fff00000000000 ffff888030407dc0 dead000000000122 0000000000000000 [ 69.750729][ T1025] raw: 0000000000000000 0000000000110011 00000001f5000000 0000000000000000 [ 69.753872][ T1025] page dumped because: kasan: bad access detected [ 69.756125][ T1025] page_owner tracks the page as allocated [ 69.758193][ T1025] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 22332972406, free_ts 0 [ 69.764521][ T1025] post_alloc_hook+0x1f3/0x230 [ 69.766285][ T1025] get_page_from_freelist+0x3045/0x3190 [ 69.768389][ T1025] __alloc_pages_noprof+0x292/0x710 [ 69.770488][ T1025] alloc_pages_mpol_noprof+0x3e8/0x680 [ 69.772605][ T1025] alloc_slab_page+0x6a/0x120 [ 69.774466][ T1025] allocate_slab+0x5a/0x2f0 [ 69.776178][ T1025] ___slab_alloc+0xcd1/0x14b0 [ 69.778050][ T1025] __slab_alloc+0x58/0xa0 [ 69.779786][ T1025] kmem_cache_alloc_noprof+0x1c1/0x2a0 [ 69.781815][ T1025] __kernfs_new_node+0xd8/0x870 [ 69.783561][ T1025] kernfs_new_node+0x137/0x240 [ 69.785264][ T1025] __kernfs_create_file+0x49/0x2e0 [ 69.787467][ T1025] sysfs_add_file_mode_ns+0x24a/0x310 [ 69.789678][ T1025] internal_create_group+0x7a7/0x11d0 [ 69.791907][ T1025] sysfs_slab_add+0x157/0x290 [ 69.793845][ T1025] slab_sysfs_init+0x66/0x170 [ 69.795717][ T1025] page_owner free stack trace missing [ 69.797853][ T1025] [ 69.798822][ T1025] Memory state around the buggy address: [ 69.801055][ T1025] ffff888040701600: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 69.804123][ T1025] ffff888040701680: fc fc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 69.807111][ T1025] >ffff888040701700: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 69.810176][ T1025] ^ [ 69.813273][ T1025] ffff888040701780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 69.816342][ T1025] ffff888040701800: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc 00 00 [ 69.819404][ T1025] ================================================================== [ 69.835105][ T1025] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 69.837957][ T1025] CPU: 0 UID: 0 PID: 1025 Comm: kworker/u4:4 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 69.841977][ T1025] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.846134][ T1025] Workqueue: ocfs2_wq ocfs2_complete_recovery [ 69.848506][ T1025] Call Trace: [ 69.849819][ T1025] [ 69.850962][ T1025] dump_stack_lvl+0x241/0x360 [ 69.852847][ T1025] ? __pfx_dump_stack_lvl+0x10/0x10 [ 69.854846][ T1025] ? __pfx__printk+0x10/0x10 [ 69.856554][ T1025] ? preempt_schedule+0xe1/0xf0 [ 69.858289][ T1025] ? vscnprintf+0x5d/0x90 [ 69.859842][ T1025] panic+0x349/0x880 [ 69.861281][ T1025] ? check_panic_on_warn+0x21/0xb0 [ 69.863246][ T1025] ? __pfx_panic+0x10/0x10 [ 69.864876][ T1025] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 69.867260][ T1025] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 69.869655][ T1025] ? print_report+0x502/0x550 [ 69.871340][ T1025] check_panic_on_warn+0x86/0xb0 [ 69.873282][ T1025] ? ocfs2_dir_foreach_blk+0x1ab6/0x1b20 [ 69.875448][ T1025] end_report+0x77/0x160 [ 69.877076][ T1025] kasan_report+0x154/0x180 [ 69.878885][ T1025] ? ocfs2_dir_foreach_blk+0x1ab6/0x1b20 [ 69.881008][ T1025] ocfs2_dir_foreach_blk+0x1ab6/0x1b20 [ 69.883033][ T1025] ? __pfx_ocfs2_dir_foreach_blk+0x10/0x10 [ 69.885308][ T1025] ? inode_query_iversion+0x17f/0x1f0 [ 69.887355][ T1025] ? __pfx___might_resched+0x10/0x10 [ 69.889308][ T1025] ? __pfx_inode_query_iversion+0x10/0x10 [ 69.891376][ T1025] ? __pfx_ocfs2_get_system_file_inode+0x10/0x10 [ 69.893735][ T1025] ? ocfs2_complete_recovery+0xbeb/0x25c0 [ 69.895875][ T1025] ? do_raw_spin_lock+0x14f/0x370 [ 69.897793][ T1025] ocfs2_dir_foreach+0xb4/0x100 [ 69.899593][ T1025] ? __pfx_ocfs2_dir_foreach+0x10/0x10 [ 69.901679][ T1025] ? do_raw_spin_unlock+0x58/0x8b0 [ 69.903658][ T1025] ocfs2_complete_recovery+0xcf1/0x25c0 [ 69.905694][ T1025] ? __pfx_ocfs2_complete_recovery+0x10/0x10 [ 69.908023][ T1025] ? __pfx_ocfs2_orphan_filldir+0x10/0x10 [ 69.910170][ T1025] ? __lock_acquire+0x1384/0x2050 [ 69.912136][ T1025] ? __pfx_lock_acquire+0x10/0x10 [ 69.914062][ T1025] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 69.916301][ T1025] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 69.918654][ T1025] ? process_scheduled_works+0x976/0x1850 [ 69.920698][ T1025] process_scheduled_works+0xa63/0x1850 [ 69.922735][ T1025] ? __pfx_process_scheduled_works+0x10/0x10 [ 69.925000][ T1025] ? assign_work+0x364/0x3d0 [ 69.926697][ T1025] worker_thread+0x870/0xd30 [ 69.928336][ T1025] ? __kthread_parkme+0x169/0x1d0 [ 69.930135][ T1025] ? __pfx_worker_thread+0x10/0x10 [ 69.932207][ T1025] kthread+0x2f0/0x390 [ 69.933670][ T1025] ? __pfx_worker_thread+0x10/0x10 [ 69.935612][ T1025] ? __pfx_kthread+0x10/0x10 [ 69.937312][ T1025] ret_from_fork+0x4b/0x80 [ 69.939035][ T1025] ? __pfx_kthread+0x10/0x10 [ 69.940787][ T1025] ret_from_fork_asm+0x1a/0x30 [ 69.942532][ T1025] [ 69.943930][ T1025] Kernel Offset: disabled [ 69.945484][ T1025] Rebooting in 86400 seconds.. VM DIAGNOSIS: 17:48:31 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000072 RBX=ffffffff9a716e80 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=0000000000000000 RSP=ffffc90002286d30 R8 =ffffffff854aac2b R9 =1ffff11003d70046 R10=dffffc0000000000 R11=ffffffff854aabe0 R12=dffffc0000000000 R13=ffffffff9a411f2b R14=0000000000000072 R15=00000000000003f8 RIP=ffffffff854aac5e RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88801fc00000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005555729b6738 CR3=000000003696e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000040000021 Opmask01=0000000000000001 Opmask02=00000000fff7ffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeec49e9b0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f006a64615f6572 6f63735f6d6f6f2f 666c65732f636f72 702f003030303100 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a004f41445f4057 4a46565f484a4a0a 434940560a464a57 550a001515151400 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000