program: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a3c000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001414000000110001"], 0x64}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a3c000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001414000000110001"], 0x64}}, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0xd0) fallocate(r1, 0x0, 0x0, 0x1000f4) open(&(0x7f0000000000)='./bus\x00', 0x64942, 0x20) (async) r2 = open(&(0x7f0000000000)='./bus\x00', 0x64942, 0x20) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x4417e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, 0x0, 0x80) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f00000007c0)={{r3}, "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"}) sendfile(r2, r2, 0x0, 0x1000200201005) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006dc0)={{0x14, 0x10, 0x9000, 0x6}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}]}]}], {0x14, 0x11, 0x64, 0x0, 0x0, {0x0, 0x84}}}, 0x70}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006dc0)={{0x14, 0x10, 0x9000, 0x6}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}]}]}], {0x14, 0x11, 0x64, 0x0, 0x0, {0x0, 0x84}}}, 0x70}}, 0x0) [ 102.890696][ T45] Bluetooth: hci0: command tx timeout [ 103.491722][ T5324] loop0: detected capacity change from 0 to 32768 [ 103.502099][ T5324] ======================================================= [ 103.502099][ T5324] WARNING: The mand mount option has been deprecated and [ 103.502099][ T5324] and is ignored by this kernel. Remove the mand [ 103.502099][ T5324] option from the mount to silence this warning. [ 103.502099][ T5324] ======================================================= [ 103.595488][ T5324] JBD2: Ignoring recovery information on journal [ 103.663595][ T5324] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 103.752084][ T5325] ================================================================== [ 103.755499][ T5325] BUG: KASAN: slab-use-after-free in ocfs2_fault+0xdb/0x440 [ 103.759300][ T5325] Read of size 8 at addr ffff888043f3c7d8 by task syz.0.0/5325 [ 103.763192][ T5325] [ 103.764508][ T5325] CPU: 0 UID: 0 PID: 5325 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 103.764528][ T5325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.764536][ T5325] Call Trace: [ 103.764548][ T5325] [ 103.764555][ T5325] dump_stack_lvl+0xe8/0x150 [ 103.764580][ T5325] print_report+0xba/0x230 [ 103.764594][ T5325] ? ocfs2_fault+0xdb/0x440 [ 103.764609][ T5325] kasan_report+0x117/0x150 [ 103.764625][ T5325] ? ocfs2_fault+0xdb/0x440 [ 103.764636][ T5325] ocfs2_fault+0xdb/0x440 [ 103.764656][ T5325] ? __pfx_ocfs2_fault+0x10/0x10 [ 103.764665][ T5325] ? css_rstat_updated+0x23a/0x530 [ 103.764682][ T5325] __do_fault+0x138/0x390 [ 103.764696][ T5325] do_pte_missing+0x228f/0x3490 [ 103.764710][ T5325] ? handle_mm_fault+0xee/0x3310 [ 103.764726][ T5325] handle_mm_fault+0x1bec/0x3310 [ 103.764745][ T5325] ? handle_mm_fault+0xee/0x3310 [ 103.764760][ T5325] ? __pfx_handle_mm_fault+0x10/0x10 [ 103.764774][ T5325] ? follow_page_pte+0x841/0x1450 [ 103.764794][ T5325] ? __pfx_follow_page_pte+0x10/0x10 [ 103.764810][ T5325] __get_user_pages+0x165b/0x29d0 [ 103.764830][ T5325] populate_vma_page_range+0x2be/0x3c0 [ 103.764845][ T5325] ? __pfx_populate_vma_page_range+0x10/0x10 [ 103.764859][ T5325] ? down_read+0x272/0x2e0 [ 103.764925][ T5325] ? __mm_populate+0x173/0x390 [ 103.764939][ T5325] __mm_populate+0x25f/0x390 [ 103.764952][ T5325] ? __pfx___mm_populate+0x10/0x10 [ 103.764968][ T5325] vm_mmap_pgoff+0x3aa/0x4f0 [ 103.764985][ T5325] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 103.764998][ T5325] ? __fget_files+0x2a/0x420 [ 103.765015][ T5325] ? __fget_files+0x3a0/0x420 [ 103.765028][ T5325] ? __fget_files+0x2a/0x420 [ 103.765042][ T5325] ksys_mmap_pgoff+0x51e/0x760 [ 103.765058][ T5325] do_syscall_64+0x14d/0xf80 [ 103.765074][ T5325] ? trace_irq_disable+0x3b/0x150 [ 103.765084][ T5325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.765096][ T5325] ? clear_bhb_loop+0x40/0x90 [ 103.765109][ T5325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.765121][ T5325] RIP: 0033:0x7f10b2d9c819 [ 103.765137][ T5325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.765148][ T5325] RSP: 002b:00007f10b3cbefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 103.765163][ T5325] RAX: ffffffffffffffda RBX: 00007f10b3016090 RCX: 00007f10b2d9c819 [ 103.765171][ T5325] RDX: 00000000007ffffe RSI: 0000000000600000 RDI: 0000200000000000 [ 103.765178][ T5325] RBP: 00007f10b2e32c91 R08: 0000000000000008 R09: 0000000000000000 [ 103.765185][ T5325] R10: 0000000004002011 R11: 0000000000000246 R12: 0000000000000000 [ 103.765192][ T5325] R13: 00007f10b3016128 R14: 00007f10b3016090 R15: 00007ffeb2e674a8 [ 103.765203][ T5325] [ 103.765208][ T5325] [ 103.897083][ T5325] Allocated by task 5325: [ 103.899105][ T5325] kasan_save_track+0x3e/0x80 [ 103.901601][ T5325] __kasan_slab_alloc+0x6c/0x80 [ 103.904540][ T5325] kmem_cache_alloc_noprof+0x2bc/0x650 [ 103.907146][ T5325] vm_area_alloc+0x24/0x140 [ 103.909862][ T5325] mmap_region+0x10eb/0x2240 [ 103.912322][ T5325] do_mmap+0xc39/0x10c0 [ 103.914339][ T5325] vm_mmap_pgoff+0x2c9/0x4f0 [ 103.916874][ T5325] ksys_mmap_pgoff+0x51e/0x760 [ 103.919255][ T5325] do_syscall_64+0x14d/0xf80 [ 103.921689][ T5325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.924501][ T5325] [ 103.925656][ T5325] Freed by task 15: [ 103.927501][ T5325] kasan_save_track+0x3e/0x80 [ 103.930208][ T5325] kasan_save_free_info+0x46/0x50 [ 103.932599][ T5325] __kasan_slab_free+0x5c/0x80 [ 103.934837][ T5325] slab_free_after_rcu_debug+0x126/0x220 [ 103.937592][ T5325] rcu_core+0x7cd/0x1070 [ 103.940077][ T5325] handle_softirqs+0x22a/0x870 [ 103.942595][ T5325] run_ksoftirqd+0x36/0x60 [ 103.945035][ T5325] smpboot_thread_fn+0x541/0xa50 [ 103.947574][ T5325] kthread+0x388/0x470 [ 103.949689][ T5325] ret_from_fork+0x51e/0xb90 [ 103.952314][ T5325] ret_from_fork_asm+0x1a/0x30 [ 103.954727][ T5325] [ 103.955858][ T5325] Last potentially related work creation: [ 103.958603][ T5325] kasan_save_stack+0x3e/0x60 [ 103.960808][ T5325] kasan_record_aux_stack+0xbd/0xd0 [ 103.963037][ T5325] kmem_cache_free+0x426/0x630 [ 103.965409][ T5325] vms_complete_munmap_vmas+0x929/0xc60 [ 103.967929][ T5325] __mmap_complete+0x7b/0x5e0 [ 103.970258][ T5325] mmap_region+0x15a2/0x2240 [ 103.972754][ T5325] do_mmap+0xc39/0x10c0 [ 103.975117][ T5325] vm_mmap_pgoff+0x2c9/0x4f0 [ 103.978187][ T5325] ksys_mmap_pgoff+0x51e/0x760 [ 103.981288][ T5325] do_syscall_64+0x14d/0xf80 [ 103.983321][ T5325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.986011][ T5325] [ 103.987156][ T5325] The buggy address belongs to the object at ffff888043f3c780 [ 103.987156][ T5325] which belongs to the cache vm_area_struct of size 256 [ 103.994870][ T5325] The buggy address is located 88 bytes inside of [ 103.994870][ T5325] freed 256-byte region [ffff888043f3c780, ffff888043f3c880) [ 104.001594][ T5325] [ 104.002871][ T5325] The buggy address belongs to the physical page: [ 104.006293][ T5325] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x43f3c [ 104.010947][ T5325] memcg:ffff8880401e7381 [ 104.013019][ T5325] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 104.016355][ T5325] page_type: f5(slab) [ 104.018585][ T5325] raw: 04fff00000000000 ffff88801c2a1b40 dead000000000100 dead000000000122 [ 104.023125][ T5325] raw: 0000000000000000 00000008000c000c 00000000f5000000 ffff8880401e7381 [ 104.027104][ T5325] page dumped because: kasan: bad access detected [ 104.030621][ T5325] page_owner tracks the page as allocated [ 104.033838][ T5325] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5000, tgid 5000 (S35iptables), ts 66898353552, free_ts 66897452355 [ 104.042923][ T5325] post_alloc_hook+0x231/0x280 [ 104.045287][ T5325] get_page_from_freelist+0x24dc/0x2580 [ 104.047968][ T5325] __alloc_frozen_pages_noprof+0x18d/0x380 [ 104.050844][ T5325] allocate_slab+0x77/0x660 [ 104.052907][ T5325] refill_objects+0x331/0x3c0 [ 104.055263][ T5325] __pcs_replace_empty_main+0x2e6/0x730 [ 104.058554][ T5325] kmem_cache_alloc_noprof+0x37d/0x650 [ 104.061166][ T5325] vm_area_dup+0x2b/0x680 [ 104.063447][ T5325] __split_vma+0x1dc/0xa40 [ 104.065641][ T5325] vms_gather_munmap_vmas+0x4fa/0x1370 [ 104.068483][ T5325] mmap_region+0x85b/0x2240 [ 104.070637][ T5325] do_mmap+0xc39/0x10c0 [ 104.072304][ T5325] vm_mmap_pgoff+0x2c9/0x4f0 [ 104.074413][ T5325] ksys_mmap_pgoff+0x51e/0x760 [ 104.076648][ T5325] do_syscall_64+0x14d/0xf80 [ 104.079004][ T5325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.081800][ T5325] page last free pid 5000 tgid 5000 stack trace: [ 104.084898][ T5325] __free_frozen_pages+0xc2b/0xdb0 [ 104.087244][ T5325] __slab_free+0x263/0x2b0 [ 104.089261][ T5325] qlist_free_all+0x97/0x100 [ 104.091377][ T5325] kasan_quarantine_reduce+0x148/0x160 [ 104.094073][ T5325] __kasan_slab_alloc+0x22/0x80 [ 104.096831][ T5325] __kmalloc_noprof+0x316/0x760 [ 104.099350][ T5325] tomoyo_supervisor+0xc22/0x1570 [ 104.101878][ T5325] tomoyo_path_permission+0x25a/0x380 [ 104.104275][ T5325] tomoyo_check_open_permission+0x2b2/0x470 [ 104.106955][ T5325] security_file_open+0xa9/0x240 [ 104.109335][ T5325] do_dentry_open+0x384/0x14e0 [ 104.111471][ T5325] vfs_open+0x3b/0x340 [ 104.113389][ T5325] path_openat+0x2e08/0x3860 [ 104.115873][ T5325] do_file_open+0x23e/0x4a0 [ 104.118956][ T5325] do_sys_openat2+0x113/0x200 [ 104.121723][ T5325] __x64_sys_openat+0x138/0x170 [ 104.123749][ T5325] [ 104.124852][ T5325] Memory state around the buggy address: [ 104.127282][ T5325] ffff888043f3c680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 104.130767][ T5325] ffff888043f3c700: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 104.134355][ T5325] >ffff888043f3c780: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 104.138214][ T5325] ^ [ 104.142229][ T5325] ffff888043f3c800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 104.145910][ T5325] ffff888043f3c880: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 104.149460][ T5325] ================================================================== [ 104.192461][ T5325] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 104.196458][ T5325] CPU: 0 UID: 0 PID: 5325 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 104.200391][ T5325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.204742][ T5325] Call Trace: [ 104.206450][ T5325] [ 104.208117][ T5325] vpanic+0x56c/0xa60 [ 104.210766][ T5325] ? __pfx_vpanic+0x10/0x10 [ 104.212949][ T5325] panic+0xc5/0xd0 [ 104.214605][ T5325] ? __pfx_panic+0x10/0x10 [ 104.216654][ T5325] ? preempt_schedule_thunk+0x16/0x30 [ 104.219033][ T5325] ? ocfs2_fault+0xdb/0x440 [ 104.221183][ T5325] ? preempt_schedule_thunk+0x16/0x30 [ 104.223824][ T5325] ? ocfs2_fault+0xdb/0x440 [ 104.226167][ T5325] check_panic_on_warn+0x89/0xb0 [ 104.228769][ T5325] ? ocfs2_fault+0xdb/0x440 [ 104.231241][ T5325] end_report+0x73/0x180 [ 104.233232][ T5325] ? ocfs2_fault+0xdb/0x440 [ 104.235236][ T5325] kasan_report+0x128/0x150 [ 104.237606][ T5325] ? ocfs2_fault+0xdb/0x440 [ 104.239797][ T5325] ocfs2_fault+0xdb/0x440 [ 104.241798][ T5325] ? __pfx_ocfs2_fault+0x10/0x10 [ 104.244225][ T5325] ? css_rstat_updated+0x23a/0x530 [ 104.246604][ T5325] __do_fault+0x138/0x390 [ 104.248489][ T5325] do_pte_missing+0x228f/0x3490 [ 104.250681][ T5325] ? handle_mm_fault+0xee/0x3310 [ 104.252739][ T5325] handle_mm_fault+0x1bec/0x3310 [ 104.254834][ T5325] ? handle_mm_fault+0xee/0x3310 [ 104.257034][ T5325] ? __pfx_handle_mm_fault+0x10/0x10 [ 104.259255][ T5325] ? follow_page_pte+0x841/0x1450 [ 104.261282][ T5325] ? __pfx_follow_page_pte+0x10/0x10 [ 104.263502][ T5325] __get_user_pages+0x165b/0x29d0 [ 104.266748][ T5325] populate_vma_page_range+0x2be/0x3c0 [ 104.269727][ T5325] ? __pfx_populate_vma_page_range+0x10/0x10 [ 104.272271][ T5325] ? down_read+0x272/0x2e0 [ 104.274382][ T5325] ? __mm_populate+0x173/0x390 [ 104.276702][ T5325] __mm_populate+0x25f/0x390 [ 104.278816][ T5325] ? __pfx___mm_populate+0x10/0x10 [ 104.280983][ T5325] vm_mmap_pgoff+0x3aa/0x4f0 [ 104.283208][ T5325] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 104.286058][ T5325] ? __fget_files+0x2a/0x420 [ 104.288673][ T5325] ? __fget_files+0x3a0/0x420 [ 104.291077][ T5325] ? __fget_files+0x2a/0x420 [ 104.293217][ T5325] ksys_mmap_pgoff+0x51e/0x760 [ 104.295317][ T5325] do_syscall_64+0x14d/0xf80 [ 104.297469][ T5325] ? trace_irq_disable+0x3b/0x150 [ 104.299724][ T5325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.303035][ T5325] ? clear_bhb_loop+0x40/0x90 [ 104.305772][ T5325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.309044][ T5325] RIP: 0033:0x7f10b2d9c819 [ 104.310985][ T5325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.319126][ T5325] RSP: 002b:00007f10b3cbefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 104.323094][ T5325] RAX: ffffffffffffffda RBX: 00007f10b3016090 RCX: 00007f10b2d9c819 [ 104.327312][ T5325] RDX: 00000000007ffffe RSI: 0000000000600000 RDI: 0000200000000000 [ 104.331051][ T5325] RBP: 00007f10b2e32c91 R08: 0000000000000008 R09: 0000000000000000 [ 104.334504][ T5325] R10: 0000000004002011 R11: 0000000000000246 R12: 0000000000000000 [ 104.338376][ T5325] R13: 00007f10b3016128 R14: 00007f10b3016090 R15: 00007ffeb2e674a8 [ 104.342359][ T5325] [ 104.344128][ T5325] Kernel Offset: disabled [ 104.346258][ T5325] Rebooting in 86400 seconds..