program: r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0200300c000800"], 0x11) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x40086602, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0405"], 0x7) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_role_change={{0x12, 0x8}}}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e", 0x24}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400000008001b0000000000"], 0x30}}, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x10000000}, 0x52cc) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000040), 0x1, 0x76a, &(0x7f0000000fc0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='pids.events\x00', 0x275a, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r3, 0xf505, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$kcm(0x2, 0x3, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_clone(0x0, 0x0, 0xfffffffffffffe7b, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x88c8, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], 0x1, 0x175, &(0x7f0000000380)="$eJzsmT9PwkAYxp9rESJxcMZBE0lEI6UtalxMJPEb4J+wQaQStIhCB2Hzkxi/gIu78aMokwujiVtN2wNOouKgJsbnN7z3vMfL9e5t8jRpQQj5t/Qenx/Oe40VHcAM0kjI+Sd9VKMp9avZYnPuajt5W74p7aTu+uPrCQC+//XrxwDcF3R4Mvf9t/9Oy3EX2lDvQcOy1AcQMKQuQ8O+1A4ESlIfK7oZ1BvGUd11jMOmWw2EGQQrCHYQ8uP7618KVJX9CeX3dqd7UnFdp/WDYlL/+gUNW8r+1Ps16I2p9M+CBkvqPASKUm8iMehN1BLl/KnYaH39l89PQUHx18TIn/xrgSXFn2KKf+S8xlmu3elm641Kzak5p7ad3zDXTHPdzoVGFMVP/G869Keksv7UB7VxEcdFxfNaVhSHuR3F9xw3HvqfhsxilAs5pxI+D2bFQjBkdJkTQgghhBBCCCGEEELItzMPEb4FnYD9En5new0AAP//cCp3gA==") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x80) sendmsg$inet(r5, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x64) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) [ 110.576586][ T5333] loop0: detected capacity change from 0 to 2048 [ 110.609450][ T5307] Bluetooth: hci0: command tx timeout [ 110.866988][ T5333] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.912733][ T80] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 111.927802][ T80] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 256 with error 28 [ 111.934774][ T80] EXT4-fs (loop0): This should not happen!! Data will be lost [ 111.934774][ T80] [ 112.443808][ T5337] EXT4-fs (loop0): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 2048 with error 28 [ 112.450516][ T5337] EXT4-fs (loop0): This should not happen!! Data will be lost [ 112.450516][ T5337] [ 112.455465][ T5337] EXT4-fs (loop0): Total free blocks count 0 [ 112.458052][ T5337] EXT4-fs (loop0): Free/Dirty block details [ 112.460697][ T5337] EXT4-fs (loop0): free_blocks=2415919104 [ 112.463926][ T5337] EXT4-fs (loop0): dirty_blocks=24656 [ 112.467382][ T5337] EXT4-fs (loop0): Block reservation details [ 112.678847][ T4666] ================================================================== [ 112.682218][ T4666] BUG: KASAN: slab-use-after-free in hci_conn_drop+0x34/0x2a0 [ 112.685492][ T4666] Write of size 4 at addr ffff8880125f4010 by task kworker/u5:1/4666 [ 112.689361][ T4666] [ 112.690623][ T4666] CPU: 0 UID: 0 PID: 4666 Comm: kworker/u5:1 Not tainted syzkaller #0 PREEMPT(full) [ 112.690641][ T4666] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 112.690651][ T4666] Workqueue: hci0 hci_cmd_sync_work [ 112.690674][ T4666] Call Trace: [ 112.690684][ T4666] [ 112.690692][ T4666] dump_stack_lvl+0xe8/0x150 [ 112.690861][ T4666] print_report+0xba/0x230 [ 112.690910][ T4666] ? hci_conn_drop+0x34/0x2a0 [ 112.690926][ T4666] kasan_report+0x117/0x150 [ 112.691006][ T4666] ? hci_conn_drop+0x34/0x2a0 [ 112.691023][ T4666] kasan_check_range+0x264/0x2c0 [ 112.691038][ T4666] hci_conn_drop+0x34/0x2a0 [ 112.691053][ T4666] ? __pfx_le_read_features_complete+0x10/0x10 [ 112.691065][ T4666] hci_cmd_sync_work+0x262/0x400 [ 112.691076][ T4666] ? process_scheduled_works+0xa8d/0x18c0 [ 112.691128][ T4666] process_scheduled_works+0xb6e/0x18c0 [ 112.691149][ T4666] ? __pfx_process_scheduled_works+0x10/0x10 [ 112.691160][ T4666] ? assign_work+0x3d5/0x5e0 [ 112.691171][ T4666] worker_thread+0xa53/0xfc0 [ 112.691187][ T4666] kthread+0x388/0x470 [ 112.691197][ T4666] ? __pfx_worker_thread+0x10/0x10 [ 112.691207][ T4666] ? __pfx_kthread+0x10/0x10 [ 112.691215][ T4666] ret_from_fork+0x51e/0xb90 [ 112.691243][ T4666] ? __pfx_ret_from_fork+0x10/0x10 [ 112.691253][ T4666] ? __switch_to+0xc7d/0x1450 [ 112.691281][ T4666] ? __pfx_kthread+0x10/0x10 [ 112.691289][ T4666] ret_from_fork_asm+0x1a/0x30 [ 112.691305][ T4666] [ 112.691310][ T4666] [ 112.761068][ T4666] Allocated by task 5307: [ 112.763233][ T4666] kasan_save_track+0x3e/0x80 [ 112.765634][ T4666] __kasan_kmalloc+0x93/0xb0 [ 112.768196][ T4666] __kmalloc_cache_noprof+0x31c/0x660 [ 112.770524][ T4666] __hci_conn_add+0x3c4/0x1e00 [ 112.773092][ T4666] le_conn_complete_evt+0x706/0x1430 [ 112.775979][ T4666] hci_le_enh_conn_complete_evt+0x189/0x490 [ 112.778652][ T4666] hci_event_packet+0x7af/0x12c0 [ 112.780884][ T4666] hci_rx_work+0x3ee/0x1030 [ 112.782931][ T4666] process_scheduled_works+0xb6e/0x18c0 [ 112.785575][ T4666] worker_thread+0xa53/0xfc0 [ 112.787815][ T4666] kthread+0x388/0x470 [ 112.789872][ T4666] ret_from_fork+0x51e/0xb90 [ 112.791908][ T4666] ret_from_fork_asm+0x1a/0x30 [ 112.794129][ T4666] [ 112.795220][ T4666] Freed by task 5307: [ 112.797092][ T4666] kasan_save_track+0x3e/0x80 [ 112.800525][ T4666] kasan_save_free_info+0x46/0x50 [ 112.803695][ T4666] __kasan_slab_free+0x5c/0x80 [ 112.805983][ T4666] kfree+0x1c1/0x630 [ 112.807804][ T4666] device_release+0xc4/0x1f0 [ 112.810071][ T4666] kobject_put+0x228/0x560 [ 112.811980][ T4666] hci_conn_del+0xc36/0x1230 [ 112.814233][ T4666] hci_disconn_complete_evt+0x64e/0x950 [ 112.816461][ T4666] hci_event_packet+0x805/0x12c0 [ 112.818625][ T4666] hci_rx_work+0x3ee/0x1030 [ 112.821246][ T4666] process_scheduled_works+0xb6e/0x18c0 [ 112.824384][ T4666] worker_thread+0xa53/0xfc0 [ 112.826793][ T4666] kthread+0x388/0x470 [ 112.828699][ T4666] ret_from_fork+0x51e/0xb90 [ 112.830867][ T4666] ret_from_fork_asm+0x1a/0x30 [ 112.833080][ T4666] [ 112.834134][ T4666] The buggy address belongs to the object at ffff8880125f4000 [ 112.834134][ T4666] which belongs to the cache kmalloc-8k of size 8192 [ 112.840628][ T4666] The buggy address is located 16 bytes inside of [ 112.840628][ T4666] freed 8192-byte region [ffff8880125f4000, ffff8880125f6000) [ 112.847293][ T4666] [ 112.848338][ T4666] The buggy address belongs to the physical page: [ 112.851530][ T4666] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x125f0 [ 112.855897][ T4666] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 112.859649][ T4666] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 112.862878][ T4666] page_type: f5(slab) [ 112.864884][ T4666] raw: 00fff00000000040 ffff88801ac42280 dead000000000100 dead000000000122 [ 112.870585][ T4666] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 112.874467][ T4666] head: 00fff00000000040 ffff88801ac42280 dead000000000100 dead000000000122 [ 112.878075][ T4666] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 112.881875][ T4666] head: 00fff00000000003 ffffea0000497c01 00000000ffffffff 00000000ffffffff [ 112.886517][ T4666] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 112.890850][ T4666] page dumped because: kasan: bad access detected [ 112.893666][ T4666] page_owner tracks the page as allocated [ 112.896244][ T4666] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4693, tgid 4693 (init), ts 37184125258, free_ts 36393054651 [ 112.906346][ T4666] post_alloc_hook+0x231/0x280 [ 112.908580][ T4666] get_page_from_freelist+0x24dc/0x2580 [ 112.911004][ T4666] __alloc_frozen_pages_noprof+0x18d/0x380 [ 112.913536][ T4666] allocate_slab+0x77/0x660 [ 112.915446][ T4666] refill_objects+0x331/0x3c0 [ 112.917563][ T4666] __pcs_replace_empty_main+0x2e6/0x730 [ 112.920444][ T4666] __kmalloc_cache_noprof+0x392/0x660 [ 112.923360][ T4666] tomoyo_init_log+0x112e/0x1fb0 [ 112.926049][ T4666] tomoyo_supervisor+0x353/0x1570 [ 112.928335][ T4666] tomoyo_env_perm+0x151/0x1f0 [ 112.930524][ T4666] tomoyo_find_next_domain+0x15cb/0x1aa0 [ 112.933268][ T4666] tomoyo_bprm_check_security+0x11b/0x180 [ 112.936530][ T4666] security_bprm_check+0x85/0x240 [ 112.939342][ T4666] bprm_execve+0x896/0x1460 [ 112.941556][ T4666] do_execveat_common+0x50d/0x690 [ 112.943682][ T4666] __x64_sys_execve+0x97/0xc0 [ 112.945824][ T4666] page last free pid 1 tgid 1 stack trace: [ 112.948526][ T4666] __free_frozen_pages+0xc2b/0xdb0 [ 112.950815][ T4666] free_reserved_page+0xce/0x120 [ 112.952958][ T4666] free_reserved_area+0x90/0x190 [ 112.955357][ T4666] free_kernel_image_pages+0xa2/0x100 [ 112.957769][ T4666] kernel_init+0x31/0x1d0 [ 112.959525][ T4666] ret_from_fork+0x51e/0xb90 [ 112.961509][ T4666] ret_from_fork_asm+0x1a/0x30 [ 112.963627][ T4666] [ 112.964761][ T4666] Memory state around the buggy address: [ 112.967379][ T4666] ffff8880125f3f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 112.971038][ T4666] ffff8880125f3f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 112.974624][ T4666] >ffff8880125f4000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 112.978345][ T4666] ^ [ 112.980490][ T4666] ffff8880125f4080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 112.984321][ T4666] ffff8880125f4100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 112.987862][ T4666] ================================================================== [ 112.998465][ T5307] Bluetooth: hci0: command 0x040f tx timeout [ 113.010201][ T4666] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 113.013368][ T4666] CPU: 0 UID: 0 PID: 4666 Comm: kworker/u5:1 Not tainted syzkaller #0 PREEMPT(full) [ 113.018824][ T4666] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 113.023621][ T4666] Workqueue: hci0 hci_cmd_sync_work [ 113.026079][ T4666] Call Trace: [ 113.027565][ T4666] [ 113.028942][ T4666] vpanic+0x56c/0xa60 [ 113.030992][ T4666] ? __pfx_vpanic+0x10/0x10 [ 113.033295][ T4666] panic+0xc5/0xd0 [ 113.035679][ T4666] ? __pfx_panic+0x10/0x10 [ 113.038538][ T4666] ? preempt_schedule_thunk+0x16/0x30 [ 113.041151][ T4666] ? preempt_schedule_thunk+0x16/0x30 [ 113.043498][ T4666] ? hci_conn_drop+0x34/0x2a0 [ 113.045557][ T4666] check_panic_on_warn+0x89/0xb0 [ 113.047860][ T4666] ? hci_conn_drop+0x34/0x2a0 [ 113.050082][ T4666] end_report+0x73/0x180 [ 113.052109][ T4666] ? hci_conn_drop+0x34/0x2a0 [ 113.054660][ T4666] kasan_report+0x128/0x150 [ 113.057458][ T4666] ? hci_conn_drop+0x34/0x2a0 [ 113.059805][ T4666] kasan_check_range+0x264/0x2c0 [ 113.062062][ T4666] hci_conn_drop+0x34/0x2a0 [ 113.064112][ T4666] ? __pfx_le_read_features_complete+0x10/0x10 [ 113.067103][ T4666] hci_cmd_sync_work+0x262/0x400 [ 113.069635][ T4666] ? process_scheduled_works+0xa8d/0x18c0 [ 113.072848][ T4666] process_scheduled_works+0xb6e/0x18c0 [ 113.075574][ T4666] ? __pfx_process_scheduled_works+0x10/0x10 [ 113.078009][ T4666] ? assign_work+0x3d5/0x5e0 [ 113.080032][ T4666] worker_thread+0xa53/0xfc0 [ 113.082132][ T4666] kthread+0x388/0x470 [ 113.083958][ T4666] ? __pfx_worker_thread+0x10/0x10 [ 113.086702][ T4666] ? __pfx_kthread+0x10/0x10 [ 113.089326][ T4666] ret_from_fork+0x51e/0xb90 [ 113.091120][ T4666] ? __pfx_ret_from_fork+0x10/0x10 [ 113.093469][ T4666] ? __switch_to+0xc7d/0x1450 [ 113.095635][ T4666] ? __pfx_kthread+0x10/0x10 [ 113.097647][ T4666] ret_from_fork_asm+0x1a/0x30 [ 113.099815][ T4666] [ 113.102094][ T4666] Kernel Offset: disabled [ 113.104570][ T4666] Rebooting in 86400 seconds..