program: syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./bus\x00', 0xc802, &(0x7f0000001980)=ANY=[@ANYBLOB="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"], 0x1, 0x5f85, &(0x7f0000008340)="$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") creat(&(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f283e6d60200000000000000000000000100", [0x208]}) mkdir(&(0x7f00000000c0)='./file0\x00', 0xe4) [ 74.079268][ T5310] Bluetooth: hci0: command tx timeout [ 74.433092][ T5331] loop0: detected capacity change from 0 to 32768 [ 74.529997][ T5331] loop0: detected capacity change from 32768 to 64 [ 74.537206][ T5331] syz.0.0: attempt to access beyond end of device [ 74.537206][ T5331] loop0: rw=8388609, sector=360, nr_sectors = 8 limit=64 [ 74.561267][ T5331] metapage_write_end_io: I/O error [ 74.563818][ T5331] ERROR: (device loop0): release_metapage: metapage_write_one() failed [ 74.563818][ T5331] [ 74.579900][ T5331] ERROR: (device loop0): remounting filesystem as read-only [ 74.602553][ T5331] ================================================================== [ 74.606772][ T5331] BUG: KASAN: slab-use-after-free in release_metapage+0x760/0xac0 [ 74.610553][ T5331] Read of size 8 at addr ffff888043e74eb0 by task syz.0.0/5331 [ 74.613866][ T5331] [ 74.614932][ T5331] CPU: 0 UID: 0 PID: 5331 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 74.614948][ T5331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.614955][ T5331] Call Trace: [ 74.614962][ T5331] [ 74.614968][ T5331] dump_stack_lvl+0x189/0x250 [ 74.614986][ T5331] ? __virt_addr_valid+0x1c8/0x5c0 [ 74.615003][ T5331] ? rcu_is_watching+0x15/0xb0 [ 74.615017][ T5331] ? __kasan_check_byte+0x12/0x40 [ 74.615054][ T5331] ? __pfx_dump_stack_lvl+0x10/0x10 [ 74.615069][ T5331] ? rcu_is_watching+0x15/0xb0 [ 74.615081][ T5331] ? lock_release+0x4b/0x3b0 [ 74.615092][ T5331] ? __virt_addr_valid+0x1c8/0x5c0 [ 74.615109][ T5331] ? __virt_addr_valid+0x4a5/0x5c0 [ 74.615123][ T5331] print_report+0xca/0x240 [ 74.615136][ T5331] ? release_metapage+0x760/0xac0 [ 74.615151][ T5331] kasan_report+0x118/0x150 [ 74.615163][ T5331] ? release_metapage+0x760/0xac0 [ 74.615180][ T5331] release_metapage+0x760/0xac0 [ 74.615199][ T5331] diAllocAG+0x1749/0x1df0 [ 74.615215][ T5331] ? __pfx_diAllocAG+0x10/0x10 [ 74.615226][ T5331] ? dbNextAG+0x52e/0x640 [ 74.615238][ T5331] ? do_raw_spin_lock+0x121/0x290 [ 74.615255][ T5331] diAlloc+0x1d5/0x1680 [ 74.615265][ T5331] ? do_raw_spin_unlock+0x4d/0x240 [ 74.615280][ T5331] ? new_inode+0x150/0x170 [ 74.615311][ T5331] ialloc+0x8c/0x8f0 [ 74.615334][ T5331] jfs_mkdir+0x193/0xa70 [ 74.615354][ T5331] ? __pfx_jfs_mkdir+0x10/0x10 [ 74.615376][ T5331] ? make_vfsuid+0x49/0xa0 [ 74.615409][ T5331] ? generic_permission+0x2e5/0x690 [ 74.615424][ T5331] ? inode_permission+0x2fd/0x5f0 [ 74.615435][ T5331] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 74.615471][ T5331] vfs_mkdir+0x512/0x5b0 [ 74.615489][ T5331] do_mkdirat+0x276/0x4b0 [ 74.615507][ T5331] ? __pfx_do_mkdirat+0x10/0x10 [ 74.615521][ T5331] ? getname_flags+0x1e5/0x540 [ 74.615532][ T5331] __x64_sys_mkdir+0x6c/0x80 [ 74.615545][ T5331] do_syscall_64+0xfa/0xf80 [ 74.615608][ T5331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.615618][ T5331] ? clear_bhb_loop+0x60/0xb0 [ 74.615627][ T5331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.615634][ T5331] RIP: 0033:0x7f37ac38f7c9 [ 74.615643][ T5331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.615649][ T5331] RSP: 002b:00007f37ad29c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 74.615659][ T5331] RAX: ffffffffffffffda RBX: 00007f37ac5e5fa0 RCX: 00007f37ac38f7c9 [ 74.615665][ T5331] RDX: 0000000000000000 RSI: 00000000000000e4 RDI: 00002000000000c0 [ 74.615669][ T5331] RBP: 00007f37ac413f91 R08: 0000000000000000 R09: 0000000000000000 [ 74.615674][ T5331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.615678][ T5331] R13: 00007f37ac5e6038 R14: 00007f37ac5e5fa0 R15: 00007ffdabe68f58 [ 74.615688][ T5331] [ 74.615692][ T5331] [ 74.739535][ T5331] Allocated by task 5331: [ 74.741462][ T5331] kasan_save_track+0x3e/0x80 [ 74.743477][ T5331] __kasan_slab_alloc+0x6c/0x80 [ 74.745536][ T5331] kmem_cache_alloc_noprof+0x37d/0x710 [ 74.747879][ T5331] mempool_alloc_noprof+0x1c9/0x2f0 [ 74.750181][ T5331] __get_metapage+0x50c/0xde0 [ 74.752295][ T5331] diAllocAG+0x1666/0x1df0 [ 74.754248][ T5331] diAlloc+0x1d5/0x1680 [ 74.755993][ T5331] ialloc+0x8c/0x8f0 [ 74.757736][ T5331] jfs_mkdir+0x193/0xa70 [ 74.759579][ T5331] vfs_mkdir+0x512/0x5b0 [ 74.761464][ T5331] do_mkdirat+0x276/0x4b0 [ 74.763472][ T5331] __x64_sys_mkdir+0x6c/0x80 [ 74.765355][ T5331] do_syscall_64+0xfa/0xf80 [ 74.767219][ T5331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.769781][ T5331] [ 74.770858][ T5331] Freed by task 78: [ 74.772413][ T5331] kasan_save_track+0x3e/0x80 [ 74.774588][ T5331] kasan_save_free_info+0x46/0x50 [ 74.777009][ T5331] __kasan_slab_free+0x5c/0x80 [ 74.779227][ T5331] kmem_cache_free+0x197/0x620 [ 74.781324][ T5331] mempool_free+0xec/0x130 [ 74.783328][ T5331] metapage_release_folio+0x40e/0x540 [ 74.785704][ T5331] shrink_folio_list+0x20a9/0x4a10 [ 74.788085][ T5331] evict_folios+0x471e/0x57c0 [ 74.790329][ T5331] try_to_shrink_lruvec+0x8a3/0xb50 [ 74.792736][ T5331] shrink_one+0x25c/0x720 [ 74.794779][ T5331] shrink_node+0x2f7d/0x35b0 [ 74.796841][ T5331] kswapd+0x145a/0x2820 [ 74.798742][ T5331] kthread+0x711/0x8a0 [ 74.800537][ T5331] ret_from_fork+0x599/0xb30 [ 74.802530][ T5331] ret_from_fork_asm+0x1a/0x30 [ 74.804637][ T5331] [ 74.805721][ T5331] The buggy address belongs to the object at ffff888043e74e88 [ 74.805721][ T5331] which belongs to the cache jfs_mp of size 184 [ 74.811561][ T5331] The buggy address is located 40 bytes inside of [ 74.811561][ T5331] freed 184-byte region [ffff888043e74e88, ffff888043e74f40) [ 74.817605][ T5331] [ 74.818983][ T5331] The buggy address belongs to the physical page: [ 74.822662][ T5331] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x43e74 [ 74.827346][ T5331] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 74.830983][ T5331] page_type: f5(slab) [ 74.832669][ T5331] raw: 04fff00000000000 ffff888031b92dc0 dead000000000122 0000000000000000 [ 74.836368][ T5331] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 74.839826][ T5331] page dumped because: kasan: bad access detected [ 74.842770][ T5331] page_owner tracks the page as allocated [ 74.845322][ T5331] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5331, tgid 5330 (syz.0.0), ts 74460625978, free_ts 74229091912 [ 74.853458][ T5331] post_alloc_hook+0x234/0x290 [ 74.855641][ T5331] get_page_from_freelist+0x2365/0x2440 [ 74.858130][ T5331] __alloc_frozen_pages_noprof+0x181/0x370 [ 74.860711][ T5331] alloc_pages_mpol+0x232/0x4a0 [ 74.862908][ T5331] allocate_slab+0x86/0x3b0 [ 74.864956][ T5331] ___slab_alloc+0xf2b/0x1960 [ 74.867034][ T5331] __slab_alloc+0x65/0x100 [ 74.869235][ T5331] kmem_cache_alloc_noprof+0x40f/0x710 [ 74.871660][ T5331] mempool_alloc_noprof+0x1c9/0x2f0 [ 74.873912][ T5331] __get_metapage+0x50c/0xde0 [ 74.876000][ T5331] diReadSpecial+0x25b/0x710 [ 74.878157][ T5331] jfs_mount+0x73/0x870 [ 74.880000][ T5331] jfs_fill_super+0x6bc/0xd80 [ 74.882030][ T5331] get_tree_bdev_flags+0x40e/0x4d0 [ 74.884413][ T5331] vfs_get_tree+0x92/0x2a0 [ 74.886359][ T5331] do_new_mount+0x302/0xa10 [ 74.888445][ T5331] page last free pid 15 tgid 15 stack trace: [ 74.891541][ T5331] __free_frozen_pages+0xbc8/0xd30 [ 74.894276][ T5331] rcu_core+0xd70/0x1870 [ 74.896307][ T5331] handle_softirqs+0x27d/0x850 [ 74.898507][ T5331] run_ksoftirqd+0x9b/0x100 [ 74.900515][ T5331] smpboot_thread_fn+0x542/0xa60 [ 74.902750][ T5331] kthread+0x711/0x8a0 [ 74.904595][ T5331] ret_from_fork+0x599/0xb30 [ 74.906652][ T5331] ret_from_fork_asm+0x1a/0x30 [ 74.908719][ T5331] [ 74.909803][ T5331] Memory state around the buggy address: [ 74.912404][ T5331] ffff888043e74d80: fc fc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 74.915689][ T5331] ffff888043e74e00: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 74.919209][ T5331] >ffff888043e74e80: fc fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 74.922524][ T5331] ^ [ 74.924926][ T5331] ffff888043e74f00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 74.928506][ T5331] ffff888043e74f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 74.931968][ T5331] ================================================================== [ 74.983554][ T5331] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 74.986779][ T5331] CPU: 0 UID: 0 PID: 5331 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 74.990642][ T5331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.994956][ T5331] Call Trace: [ 74.996630][ T5331] [ 74.997883][ T5331] dump_stack_lvl+0x99/0x250 [ 74.999900][ T5331] ? __asan_memcpy+0x40/0x70 [ 75.002173][ T5331] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.004627][ T5331] ? __pfx__printk+0x10/0x10 [ 75.006831][ T5331] vpanic+0x237/0x6d0 [ 75.008524][ T5331] ? __pfx_vpanic+0x10/0x10 [ 75.010398][ T5331] ? preempt_schedule_common+0x83/0xd0 [ 75.012582][ T5331] ? preempt_schedule+0xae/0xc0 [ 75.014545][ T5331] panic+0xb9/0xc0 [ 75.015883][ T5331] ? __pfx_panic+0x10/0x10 [ 75.017714][ T5331] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 75.020369][ T5331] ? release_metapage+0x760/0xac0 [ 75.022458][ T5331] check_panic_on_warn+0x89/0xb0 [ 75.024561][ T5331] ? release_metapage+0x760/0xac0 [ 75.026758][ T5331] end_report+0x6f/0x140 [ 75.028637][ T5331] kasan_report+0x129/0x150 [ 75.030697][ T5331] ? release_metapage+0x760/0xac0 [ 75.032782][ T5331] release_metapage+0x760/0xac0 [ 75.034897][ T5331] diAllocAG+0x1749/0x1df0 [ 75.036857][ T5331] ? __pfx_diAllocAG+0x10/0x10 [ 75.038926][ T5331] ? dbNextAG+0x52e/0x640 [ 75.040761][ T5331] ? do_raw_spin_lock+0x121/0x290 [ 75.043042][ T5331] diAlloc+0x1d5/0x1680 [ 75.044912][ T5331] ? do_raw_spin_unlock+0x4d/0x240 [ 75.047101][ T5331] ? new_inode+0x150/0x170 [ 75.048868][ T5331] ialloc+0x8c/0x8f0 [ 75.050396][ T5331] jfs_mkdir+0x193/0xa70 [ 75.052233][ T5331] ? __pfx_jfs_mkdir+0x10/0x10 [ 75.054229][ T5331] ? make_vfsuid+0x49/0xa0 [ 75.056203][ T5331] ? generic_permission+0x2e5/0x690 [ 75.058455][ T5331] ? inode_permission+0x2fd/0x5f0 [ 75.060368][ T5331] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 75.062323][ T5331] vfs_mkdir+0x512/0x5b0 [ 75.064023][ T5331] do_mkdirat+0x276/0x4b0 [ 75.065709][ T5331] ? __pfx_do_mkdirat+0x10/0x10 [ 75.067654][ T5331] ? getname_flags+0x1e5/0x540 [ 75.069533][ T5331] __x64_sys_mkdir+0x6c/0x80 [ 75.071350][ T5331] do_syscall_64+0xfa/0xf80 [ 75.073222][ T5331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.075760][ T5331] ? clear_bhb_loop+0x60/0xb0 [ 75.077742][ T5331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.080664][ T5331] RIP: 0033:0x7f37ac38f7c9 [ 75.082771][ T5331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.091060][ T5331] RSP: 002b:00007f37ad29c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 75.094612][ T5331] RAX: ffffffffffffffda RBX: 00007f37ac5e5fa0 RCX: 00007f37ac38f7c9 [ 75.097832][ T5331] RDX: 0000000000000000 RSI: 00000000000000e4 RDI: 00002000000000c0 [ 75.101001][ T5331] RBP: 00007f37ac413f91 R08: 0000000000000000 R09: 0000000000000000 [ 75.104156][ T5331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.107593][ T5331] R13: 00007f37ac5e6038 R14: 00007f37ac5e5fa0 R15: 00007ffdabe68f58 [ 75.111080][ T5331] [ 75.112826][ T5331] Kernel Offset: disabled [ 75.114745][ T5331] Rebooting in 86400 seconds..