program: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@updsa={0xf0, 0x1a, 0xb975be98ef62cf93, 0x70bd26, 0x25dfdbfd, {{@in=@broadcast, @in6=@remote, 0x4e22, 0x5, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x2c}, {@in=@loopback, 0x4d3, 0xff}, @in=@loopback, {0x4, 0x1, 0x1, 0x2, 0x9, 0x18e3, 0x81, 0x7}, {0x1, 0xffffffff, 0x5, 0x8}, {0x4, 0x8, 0x5}, 0x70bd27, 0x0, 0x2, 0x0, 0x21, 0xcb}}, 0xf0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008004) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x1000000, &(0x7f0000000440)=ANY=[@ANYRES16], 0x3, 0x17d, &(0x7f0000000240)="$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") r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) syz_mount_image$jfs(&(0x7f0000005d00), &(0x7f0000005d40)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00cafc45e9b0dfa29d8c85d9d04759fbfc63396aa49b42d30b9301fc1b0956c1fd116387689d15179837669d684514204ddeec9601df7fb29fcdd5ea5965f8e2e3fef3663f23a389f65097a73f31613ba9756f0e85f87ab906c3341c3a9ce9"], 0x1, 0x5ce8, &(0x7f0000005dc0)="$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") ioctl$TCGETS2(r3, 0x5412, &(0x7f0000000280)) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f00000000c0)={0x40, 0x0, 0xa6d, 0x6, 0x1a, "1abbb870742b7f1f"}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000380), 0x40000, 0x0) [ 74.262362][ T4671] Bluetooth: hci0: command tx timeout [ 74.570222][ T5329] loop0: detected capacity change from 0 to 16 [ 74.624777][ T5329] erofs: Unknown parameter 'ÿÿ' [ 74.659243][ T5329] can0: slcan on pty20. [ 75.302026][ T5330] loop0: detected capacity change from 0 to 32768 [ 75.372545][ T5330] lmLogInit: exit(-22) [ 75.374311][ T5330] lmLogOpen: exit(-22) [ 75.376039][ T5330] jfs_mount_rw failed, return code = -22 [ 75.432351][ T30] ================================================================== [ 75.435986][ T30] BUG: KASAN: slab-use-after-free in __lock_acquire+0x77/0x2050 [ 75.440545][ T30] Read of size 8 at addr ffff888040235168 by task kworker/u4:2/30 [ 75.445709][ T30] [ 75.447162][ T30] CPU: 0 UID: 0 PID: 30 Comm: kworker/u4:2 Not tainted 6.12.0-rc5-syzkaller-00181-g6c52d4da1c74 #0 [ 75.456158][ T30] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.460882][ T30] Workqueue: loop0 loop_rootcg_workfn [ 75.462839][ T30] Call Trace: [ 75.464090][ T30] [ 75.465172][ T30] dump_stack_lvl+0x241/0x360 [ 75.466921][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.470226][ T30] ? __pfx__printk+0x10/0x10 [ 75.472320][ T30] ? _printk+0xd5/0x120 [ 75.474507][ T30] ? __virt_addr_valid+0x183/0x530 [ 75.477290][ T30] ? __virt_addr_valid+0x183/0x530 [ 75.480173][ T30] print_report+0x169/0x550 [ 75.483830][ T30] ? __virt_addr_valid+0x183/0x530 [ 75.486578][ T30] ? __virt_addr_valid+0x183/0x530 [ 75.489318][ T30] ? __virt_addr_valid+0x45f/0x530 [ 75.493909][ T30] ? __phys_addr+0xba/0x170 [ 75.497473][ T30] ? __lock_acquire+0x77/0x2050 [ 75.500743][ T30] kasan_report+0x143/0x180 [ 75.504515][ T30] ? __lock_acquire+0x77/0x2050 [ 75.507277][ T30] __lock_acquire+0x77/0x2050 [ 75.510419][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 75.514261][ T30] lock_acquire+0x1ed/0x550 [ 75.516401][ T30] ? __wake_up_common_lock+0x25/0x1e0 [ 75.519302][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 75.522018][ T30] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 75.524644][ T30] _raw_spin_lock_irqsave+0xd5/0x120 [ 75.527720][ T30] ? __wake_up_common_lock+0x25/0x1e0 [ 75.530342][ T30] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 75.532836][ T30] ? lbmIODone+0x2bf/0x1750 [ 75.535468][ T30] ? blkg_put+0x23/0x250 [ 75.537871][ T30] __wake_up_common_lock+0x25/0x1e0 [ 75.540850][ T30] ? bio_endio+0x83e/0x8a0 [ 75.542983][ T30] blk_update_request+0x5e5/0x1160 [ 75.545320][ T30] blk_mq_end_request+0x3e/0x70 [ 75.547610][ T30] loop_process_work+0x1c10/0x2170 [ 75.549720][ T30] ? __pfx_loop_process_work+0x10/0x10 [ 75.552573][ T30] ? register_lock_class+0x102/0x980 [ 75.555913][ T30] ? __pfx_register_lock_class+0x10/0x10 [ 75.559310][ T30] ? mark_lock+0x9a/0x360 [ 75.561056][ T30] ? debug_object_deactivate+0x2d5/0x390 [ 75.563276][ T30] ? __lock_acquire+0x1384/0x2050 [ 75.565263][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 75.567087][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 75.569200][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 75.571445][ T30] ? process_scheduled_works+0x976/0x1850 [ 75.573448][ T30] process_scheduled_works+0xa63/0x1850 [ 75.591814][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 75.594145][ T30] ? assign_work+0x364/0x3d0 [ 75.595991][ T30] worker_thread+0x870/0xd30 [ 75.597813][ T30] ? __kthread_parkme+0x169/0x1d0 [ 75.599692][ T30] ? __pfx_worker_thread+0x10/0x10 [ 75.601709][ T30] kthread+0x2f0/0x390 [ 75.603382][ T30] ? __pfx_worker_thread+0x10/0x10 [ 75.605463][ T30] ? __pfx_kthread+0x10/0x10 [ 75.625764][ T30] ret_from_fork+0x4b/0x80 [ 75.627399][ T30] ? __pfx_kthread+0x10/0x10 [ 75.629079][ T30] ret_from_fork_asm+0x1a/0x30 [ 75.630809][ T30] [ 75.632010][ T30] [ 75.632921][ T30] Allocated by task 5330: [ 75.634594][ T30] kasan_save_track+0x3f/0x80 [ 75.636440][ T30] __kasan_kmalloc+0x98/0xb0 [ 75.638263][ T30] __kmalloc_cache_noprof+0x19c/0x2c0 [ 75.656704][ T30] lmLogInit+0x3b4/0x1c90 [ 75.658454][ T30] lmLogOpen+0x55e/0x1040 [ 75.660222][ T30] jfs_mount_rw+0xf1/0x6a0 [ 75.662014][ T30] jfs_fill_super+0x681/0xc50 [ 75.663984][ T30] mount_bdev+0x20a/0x2d0 [ 75.665728][ T30] legacy_get_tree+0xee/0x190 [ 75.667642][ T30] vfs_get_tree+0x90/0x2b0 [ 75.669388][ T30] do_new_mount+0x2be/0xb40 [ 75.687269][ T30] __se_sys_mount+0x2d6/0x3c0 [ 75.688930][ T30] do_syscall_64+0xf3/0x230 [ 75.690531][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.692962][ T30] [ 75.693932][ T30] Freed by task 5330: [ 75.695538][ T30] kasan_save_track+0x3f/0x80 [ 75.697372][ T30] kasan_save_free_info+0x40/0x50 [ 75.712354][ T30] __kasan_slab_free+0x59/0x70 [ 75.714242][ T30] kfree+0x1a0/0x440 [ 75.728593][ T30] lmLogInit+0xccd/0x1c90 [ 75.732223][ T30] lmLogOpen+0x55e/0x1040 [ 75.740991][ T30] jfs_mount_rw+0xf1/0x6a0 [ 75.743137][ T30] jfs_fill_super+0x681/0xc50 [ 75.760577][ T30] mount_bdev+0x20a/0x2d0 [ 75.762465][ T30] legacy_get_tree+0xee/0x190 [ 75.764395][ T30] vfs_get_tree+0x90/0x2b0 [ 75.766682][ T30] do_new_mount+0x2be/0xb40 [ 75.768454][ T30] __se_sys_mount+0x2d6/0x3c0 [ 75.770397][ T30] do_syscall_64+0xf3/0x230 [ 75.772237][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.774592][ T30] [ 75.775564][ T30] The buggy address belongs to the object at ffff888040235100 [ 75.775564][ T30] which belongs to the cache kmalloc-192 of size 192 [ 75.786054][ T30] The buggy address is located 104 bytes inside of [ 75.786054][ T30] freed 192-byte region [ffff888040235100, ffff8880402351c0) [ 75.791302][ T30] [ 75.792226][ T30] The buggy address belongs to the physical page: [ 75.794599][ T30] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x40235 [ 75.797848][ T30] anon flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 75.827725][ T30] page_type: f5(slab) [ 75.829265][ T30] raw: 04fff00000000000 ffff88801ac413c0 0000000000000000 0000000000000001 [ 75.832536][ T30] raw: 0000000000000000 0000000080100010 00000001f5000000 0000000000000000 [ 75.835767][ T30] page dumped because: kasan: bad access detected [ 75.863181][ T30] page_owner tracks the page as allocated [ 75.865225][ T30] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5314, tgid 5314 (syz-executor), ts 66525112721, free_ts 66403114109 [ 75.871736][ T30] post_alloc_hook+0x1f3/0x230 [ 75.889178][ T30] get_page_from_freelist+0x303f/0x3190 [ 75.891809][ T30] __alloc_pages_noprof+0x292/0x710 [ 75.893839][ T30] alloc_pages_mpol_noprof+0x3e8/0x680 [ 75.896171][ T30] alloc_slab_page+0x6a/0x120 [ 75.898526][ T30] allocate_slab+0x5a/0x2f0 [ 75.902126][ T30] ___slab_alloc+0xcd1/0x14b0 [ 75.907871][ T30] __slab_alloc+0x58/0xa0 [ 75.910103][ T30] __kmalloc_cache_noprof+0x1d5/0x2c0 [ 75.912754][ T30] addr_event+0xd5/0x460 [ 75.914276][ T30] inetaddr_event+0x11d/0x1b0 [ 75.916021][ T30] notifier_call_chain+0x19f/0x3e0 [ 75.917879][ T30] blocking_notifier_call_chain+0x69/0x90 [ 75.919931][ T30] __inet_insert_ifa+0x9d4/0xc30 [ 75.921691][ T30] inet_rtm_newaddr+0xc15/0x1b20 [ 75.924275][ T30] rtnetlink_rcv_msg+0x73f/0xcf0 [ 75.926848][ T30] page last free pid 5314 tgid 5314 stack trace: [ 75.931613][ T30] free_unref_page+0xcfb/0xf20 [ 75.934642][ T30] __slab_free+0x31b/0x3d0 [ 75.938184][ T30] qlist_free_all+0x9a/0x140 [ 75.942293][ T30] kasan_quarantine_reduce+0x14f/0x170 [ 75.944953][ T30] __kasan_slab_alloc+0x23/0x80 [ 75.954524][ T30] kmem_cache_alloc_node_noprof+0x16b/0x320 [ 75.956888][ T30] __alloc_skb+0x1c3/0x440 [ 75.958797][ T30] netlink_sendmsg+0x638/0xcb0 [ 75.960735][ T30] __sock_sendmsg+0x221/0x270 [ 75.962586][ T30] __sys_sendto+0x39b/0x4f0 [ 75.977096][ T30] __x64_sys_sendto+0xde/0x100 [ 75.979055][ T30] do_syscall_64+0xf3/0x230 [ 75.980897][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.983297][ T30] [ 75.984293][ T30] Memory state around the buggy address: [ 75.986525][ T30] ffff888040235000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 75.989798][ T30] ffff888040235080: 04 fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 76.005265][ T30] >ffff888040235100: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.008396][ T30] ^ [ 76.011402][ T30] ffff888040235180: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 76.028613][ T30] ffff888040235200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.031806][ T30] ================================================================== [ 76.035030][ T30] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 76.038053][ T30] CPU: 0 UID: 0 PID: 30 Comm: kworker/u4:2 Not tainted 6.12.0-rc5-syzkaller-00181-g6c52d4da1c74 #0 [ 76.042482][ T30] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.063137][ T30] Workqueue: loop0 loop_rootcg_workfn [ 76.065493][ T30] Call Trace: [ 76.066919][ T30] [ 76.068143][ T30] dump_stack_lvl+0x241/0x360 [ 76.070079][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 76.088165][ T30] ? __pfx__printk+0x10/0x10 [ 76.090079][ T30] ? rcu_is_watching+0x15/0xb0 [ 76.092118][ T30] ? lock_release+0xbf/0xa30 [ 76.094046][ T30] ? vscnprintf+0x5d/0x90 [ 76.111568][ T30] panic+0x349/0x880 [ 76.113050][ T30] ? check_panic_on_warn+0x21/0xb0 [ 76.114939][ T30] ? __pfx_panic+0x10/0x10 [ 76.116603][ T30] ? do_raw_spin_unlock+0x58/0x8b0 [ 76.118469][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 76.120550][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 76.122832][ T30] ? print_report+0x502/0x550 [ 76.124591][ T30] check_panic_on_warn+0x86/0xb0 [ 76.139657][ T30] ? __lock_acquire+0x77/0x2050 [ 76.141623][ T30] end_report+0x77/0x160 [ 76.143876][ T30] kasan_report+0x154/0x180 [ 76.146492][ T30] ? __lock_acquire+0x77/0x2050 [ 76.149136][ T30] __lock_acquire+0x77/0x2050 [ 76.153119][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 76.156464][ T30] lock_acquire+0x1ed/0x550 [ 76.158931][ T30] ? __wake_up_common_lock+0x25/0x1e0 [ 76.161191][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 76.163059][ T30] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 76.165268][ T30] _raw_spin_lock_irqsave+0xd5/0x120 [ 76.167232][ T30] ? __wake_up_common_lock+0x25/0x1e0 [ 76.169177][ T30] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 76.171328][ T30] ? lbmIODone+0x2bf/0x1750 [ 76.173031][ T30] ? blkg_put+0x23/0x250 [ 76.174879][ T30] __wake_up_common_lock+0x25/0x1e0 [ 76.179936][ T30] ? bio_endio+0x83e/0x8a0 [ 76.182422][ T30] blk_update_request+0x5e5/0x1160 [ 76.187132][ T30] blk_mq_end_request+0x3e/0x70 [ 76.189773][ T30] loop_process_work+0x1c10/0x2170 [ 76.192518][ T30] ? __pfx_loop_process_work+0x10/0x10 [ 76.201192][ T30] ? register_lock_class+0x102/0x980 [ 76.205280][ T30] ? __pfx_register_lock_class+0x10/0x10 [ 76.208803][ T30] ? mark_lock+0x9a/0x360 [ 76.211232][ T30] ? debug_object_deactivate+0x2d5/0x390 [ 76.213302][ T30] ? __lock_acquire+0x1384/0x2050 [ 76.215176][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 76.217299][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 76.220623][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 76.224336][ T30] ? process_scheduled_works+0x976/0x1850 [ 76.227844][ T30] process_scheduled_works+0xa63/0x1850 [ 76.231427][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 76.239941][ T30] ? assign_work+0x364/0x3d0 [ 76.245637][ T30] worker_thread+0x870/0xd30 [ 76.250355][ T30] ? __kthread_parkme+0x169/0x1d0 [ 76.256023][ T30] ? __pfx_worker_thread+0x10/0x10 [ 76.261389][ T30] kthread+0x2f0/0x390 [ 76.264167][ T30] ? __pfx_worker_thread+0x10/0x10 [ 76.271289][ T30] ? __pfx_kthread+0x10/0x10 [ 76.276723][ T30] ret_from_fork+0x4b/0x80 [ 76.281546][ T30] ? __pfx_kthread+0x10/0x10 [ 76.286181][ T30] ret_from_fork_asm+0x1a/0x30 [ 76.290782][ T30] [ 76.295701][ T30] Kernel Offset: disabled [ 76.304870][ T30] Rebooting in 86400 seconds..