================================================================== BUG: KASAN: null-ptr-deref in instrument_atomic_read include/linux/instrumented.h:72 [inline] BUG: KASAN: null-ptr-deref in atomic_read include/linux/atomic/atomic-instrumented.h:27 [inline] BUG: KASAN: null-ptr-deref in buffer_busy fs/buffer.c:2784 [inline] BUG: KASAN: null-ptr-deref in drop_buffers+0x99/0x520 fs/buffer.c:2796 Read of size 4 at addr 0000000000000060 by task syz-fuzzer/3683 CPU: 3 PID: 3683 Comm: syz-fuzzer Not tainted 6.1.0-rc1-syzkaller #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106 kasan_report+0xbb/0x1f0 mm/kasan/report.c:495 check_region_inline mm/kasan/generic.c:183 [inline] kasan_check_range+0x13d/0x180 mm/kasan/generic.c:189 instrument_atomic_read include/linux/instrumented.h:72 [inline] atomic_read include/linux/atomic/atomic-instrumented.h:27 [inline] buffer_busy fs/buffer.c:2784 [inline] drop_buffers+0x99/0x520 fs/buffer.c:2796 try_to_free_buffers+0x20c/0x2c0 fs/buffer.c:2826 filemap_release_folio+0x15c/0x1a0 mm/filemap.c:3949 shrink_folio_list+0x1cb4/0x35b0 mm/vmscan.c:1982 shrink_inactive_list mm/vmscan.c:2489 [inline] shrink_list mm/vmscan.c:2716 [inline] shrink_lruvec+0xce4/0x26d0 mm/vmscan.c:5885 shrink_node_memcgs mm/vmscan.c:6074 [inline] shrink_node+0x8d2/0x1f30 mm/vmscan.c:6105 shrink_zones mm/vmscan.c:6343 [inline] do_try_to_free_pages+0x3b4/0x17a0 mm/vmscan.c:6405 try_to_free_pages+0x2e1/0x960 mm/vmscan.c:6640 __perform_reclaim mm/page_alloc.c:4754 [inline] __alloc_pages_direct_reclaim mm/page_alloc.c:4776 [inline] __alloc_pages_slowpath.constprop.0+0x8b6/0x23d0 mm/page_alloc.c:5182 __alloc_pages+0x4a6/0x5a0 mm/page_alloc.c:5567 alloc_pages+0x1a6/0x270 mm/mempolicy.c:2280 folio_alloc+0x1c/0x70 mm/mempolicy.c:2290 filemap_alloc_folio+0x306/0x3a0 mm/filemap.c:971 page_cache_ra_unbounded+0x1aa/0x5e0 mm/readahead.c:248 do_page_cache_ra mm/readahead.c:300 [inline] page_cache_ra_order+0x6e8/0xa00 mm/readahead.c:560 do_sync_mmap_readahead mm/filemap.c:3043 [inline] filemap_fault+0x153b/0x2400 mm/filemap.c:3135 __do_fault+0x107/0x600 mm/memory.c:4203 do_read_fault mm/memory.c:4554 [inline] do_fault mm/memory.c:4683 [inline] handle_pte_fault mm/memory.c:4955 [inline] __handle_mm_fault+0x2184/0x3a40 mm/memory.c:5097 handle_mm_fault+0x1c8/0x780 mm/memory.c:5218 do_user_addr_fault+0x475/0x1210 arch/x86/mm/fault.c:1428 handle_page_fault arch/x86/mm/fault.c:1519 [inline] exc_page_fault+0x94/0x170 arch/x86/mm/fault.c:1575 asm_exc_page_fault+0x22/0x30 arch/x86/include/asm/idtentry.h:570 RIP: 0033:0x449f26 Code: 90 00 00 00 e8 fb f8 ff ff 8b 84 24 b0 00 00 00 48 8b bc 24 c8 00 00 00 83 f8 41 73 12 89 c1 48 8d 0c 49 48 8d 15 3a c1 92 01 <8b> 0c ca eb 0c 48 8d 15 2e c1 92 01 b9 04 00 00 00 48 8b 9c 24 90 RSP: 002b:000000c0088f1920 EFLAGS: 00010283 RAX: 0000000000000017 RBX: 0000000000000000 RCX: 0000000000000045 RDX: 0000000001d76060 RSI: 0000000000de1a5f RDI: 000000c0000001a0 RBP: 000000c0088f19c0 R08: 000000000000002c R09: 000000000040d187 R10: 000000000040d174 R11: 0000000000003db8 R12: 000000000040d174 R13: 000000000011fdaa R14: 000000c000001520 R15: 00007f386e09c766 ==================================================================