Warning: Permanently added '[localhost]:18624' (ED25519) to the list of known hosts.
executing program
syzkaller login: [ 93.405537][ T5098] loop0: detected capacity change from 0 to 32768
[ 93.443138][ T5098] =======================================================
[ 93.443138][ T5098] WARNING: The mand mount option has been deprecated and
[ 93.443138][ T5098] and is ignored by this kernel. Remove the mand
[ 93.443138][ T5098] option from the mount to silence this warning.
[ 93.443138][ T5098] =======================================================
[ 93.517210][ T5098] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[ 93.570145][ T5097] ocfs2: Unmounting device (7,0) on (node local)
executing program
[ 94.025530][ T5102] loop0: detected capacity change from 0 to 32768
[ 94.085266][ T5102] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[ 94.097765][ T5097] ==================================================================
[ 94.101103][ T5097] BUG: KASAN: use-after-free in __ocfs2_flush_truncate_log+0x824/0x1250
[ 94.104518][ T5097] Read of size 4 at addr ffff888045f72ac0 by task syz-executor217/5097
[ 94.108516][ T5097]
[ 94.109414][ T5097] CPU: 0 UID: 0 PID: 5097 Comm: syz-executor217 Not tainted 6.12.0-rc1-syzkaller-00381-g2a130b7e1fcd #0
[ 94.113773][ T5097] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 94.118448][ T5097] Call Trace:
[ 94.119606][ T5097]
[ 94.120707][ T5097] dump_stack_lvl+0x241/0x360
[ 94.122448][ T5097] ? __pfx_dump_stack_lvl+0x10/0x10
[ 94.124335][ T5097] ? __pfx__printk+0x10/0x10
[ 94.126049][ T5097] ? _printk+0xd5/0x120
[ 94.127610][ T5097] ? __virt_addr_valid+0x183/0x530
[ 94.130051][ T5097] ? __virt_addr_valid+0x183/0x530
[ 94.132887][ T5097] print_report+0x169/0x550
[ 94.134942][ T5097] ? __virt_addr_valid+0x183/0x530
[ 94.136976][ T5097] ? __virt_addr_valid+0x183/0x530
[ 94.138987][ T5097] ? __virt_addr_valid+0x45f/0x530
[ 94.140896][ T5097] ? __phys_addr+0xba/0x170
[ 94.142621][ T5097] ? __ocfs2_flush_truncate_log+0x824/0x1250
[ 94.144758][ T5097] kasan_report+0x143/0x180
[ 94.146599][ T5097] ? __ocfs2_flush_truncate_log+0x824/0x1250
[ 94.149191][ T5097] __ocfs2_flush_truncate_log+0x824/0x1250
[ 94.151937][ T5097] ? __pfx___ocfs2_flush_truncate_log+0x10/0x10
[ 94.154702][ T5097] ? __pfx_lock_acquire+0x10/0x10
[ 94.156573][ T5097] ? ocfs2_sync_fs+0xf8/0x390
[ 94.158352][ T5097] ? down_write+0x18c/0x220
[ 94.160034][ T5097] ? __pfx_down_write+0x10/0x10
[ 94.161909][ T5097] ? do_raw_spin_unlock+0x58/0x8b0
[ 94.164020][ T5097] ocfs2_flush_truncate_log+0x4f/0x70
[ 94.166569][ T5097] ocfs2_sync_fs+0x125/0x390
[ 94.168799][ T5097] ? __pfx_ocfs2_sync_fs+0x10/0x10
[ 94.170909][ T5097] ? __dentry_kill+0x4e9/0x630
[ 94.172802][ T5097] ? get_nr_dirty_inodes+0x1b7/0x200
[ 94.174762][ T5097] sync_filesystem+0x1c8/0x230
[ 94.176794][ T5097] generic_shutdown_super+0x72/0x2d0
[ 94.179106][ T5097] kill_block_super+0x44/0x90
[ 94.181385][ T5097] deactivate_locked_super+0xc4/0x130
[ 94.183939][ T5097] cleanup_mnt+0x41f/0x4b0
[ 94.186025][ T5097] ? lockdep_hardirqs_on+0x99/0x150
[ 94.188039][ T5097] task_work_run+0x24f/0x310
[ 94.189769][ T5097] ? __pfx_task_work_run+0x10/0x10
[ 94.191720][ T5097] ? __x64_sys_umount+0x123/0x170
[ 94.193543][ T5097] ? syscall_exit_to_user_mode+0xa3/0x370
[ 94.195874][ T5097] syscall_exit_to_user_mode+0x168/0x370
[ 94.198668][ T5097] do_syscall_64+0x100/0x230
[ 94.200904][ T5097] ? clear_bhb_loop+0x35/0x90
[ 94.202928][ T5097] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.205392][ T5097] RIP: 0033:0x7f1d697cd447
[ 94.207108][ T5097] Code: 07 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8
[ 94.213669][ T5097] RSP: 002b:00007fffb3b22858 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6
[ 94.216787][ T5097] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f1d697cd447
[ 94.220459][ T5097] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffb3b22910
[ 94.223669][ T5097] RBP: 00007fffb3b22910 R08: 0000000000000000 R09: 0000000000000000
[ 94.226471][ T5097] R10: 00000000ffffffff R11: 0000000000000202 R12: 00007fffb3b23970
[ 94.229144][ T5097] R13: 0000555578e356c0 R14: 0000000000000002 R15: 431bde82d7b634db
[ 94.232395][ T5097]
[ 94.233800][ T5097]
[ 94.234889][ T5097] The buggy address belongs to the physical page:
[ 94.237676][ T5097] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x7f1d6984b pfn:0x45f72
[ 94.241496][ T5097] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff)
[ 94.244203][ T5097] raw: 04fff00000000000 ffffea000117dcc8 ffffea000117de88 0000000000000000
[ 94.247281][ T5097] raw: 00000007f1d6984b 0000000000000000 00000000ffffffff 0000000000000000
[ 94.250909][ T5097] page dumped because: kasan: bad access detected
[ 94.254208][ T5097] page_owner tracks the page as freed
[ 94.256295][ T5097] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 5102, tgid 5102 (syz-executor217), ts 94089830818, free_ts 94090713208
[ 94.263252][ T5097] post_alloc_hook+0x1f3/0x230
[ 94.265236][ T5097] get_page_from_freelist+0x3045/0x3190
[ 94.268329][ T5097] __alloc_pages_noprof+0x256/0x6c0
[ 94.270873][ T5097] alloc_pages_mpol_noprof+0x3e8/0x680
[ 94.273164][ T5097] vma_alloc_folio_noprof+0x12e/0x230
[ 94.274823][ T5097] folio_prealloc+0x31/0x170
[ 94.276408][ T5097] do_wp_page+0x11c4/0x52d0
[ 94.278080][ T5097] handle_pte_fault+0x10e3/0x6800
[ 94.279924][ T5097] handle_mm_fault+0x1106/0x1bb0
[ 94.281832][ T5097] exc_page_fault+0x459/0x8c0
[ 94.283671][ T5097] asm_exc_page_fault+0x26/0x30
[ 94.285628][ T5097] page last free pid 5102 tgid 5102 stack trace:
[ 94.288559][ T5097] free_unref_folios+0xf12/0x18d0
[ 94.290810][ T5097] folios_put_refs+0x76c/0x860
[ 94.292875][ T5097] free_pages_and_swap_cache+0x2ea/0x690
[ 94.295275][ T5097] tlb_flush_mmu+0x3a3/0x680
[ 94.296878][ T5097] tlb_finish_mmu+0xd4/0x200
[ 94.298647][ T5097] exit_mmap+0x496/0xc40
[ 94.300288][ T5097] __mmput+0x115/0x390
[ 94.301913][ T5097] exit_mm+0x220/0x310
[ 94.303582][ T5097] do_exit+0x9b2/0x28e0
[ 94.305171][ T5097] do_group_exit+0x207/0x2c0
[ 94.306786][ T5097] __x64_sys_exit_group+0x3f/0x40
[ 94.308470][ T5097] x64_sys_call+0x2634/0x2640
[ 94.310278][ T5097] do_syscall_64+0xf3/0x230
[ 94.312183][ T5097] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.314703][ T5097]
[ 94.315824][ T5097] Memory state around the buggy address:
[ 94.318292][ T5097] ffff888045f72980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 94.321587][ T5097] ffff888045f72a00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 94.324640][ T5097] >ffff888045f72a80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 94.327623][ T5097] ^
[ 94.330072][ T5097] ffff888045f72b00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 94.333902][ T5097] ffff888045f72b80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 94.338680][ T5097] ==================================================================
[ 94.601417][ T5097] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 94.604681][ T5097] CPU: 0 UID: 0 PID: 5097 Comm: syz-executor217 Not tainted 6.12.0-rc1-syzkaller-00381-g2a130b7e1fcd #0
[ 94.610100][ T5097] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 94.614279][ T5097] Call Trace:
[ 94.615717][ T5097]
[ 94.617004][ T5097] dump_stack_lvl+0x241/0x360
[ 94.619021][ T5097] ? __pfx_dump_stack_lvl+0x10/0x10
[ 94.621145][ T5097] ? __pfx__printk+0x10/0x10
[ 94.623042][ T5097] ? preempt_schedule+0xe1/0xf0
[ 94.625160][ T5097] ? vscnprintf+0x5d/0x90
[ 94.627015][ T5097] panic+0x349/0x880
[ 94.628728][ T5097] ? check_panic_on_warn+0x21/0xb0
[ 94.630986][ T5097] ? __pfx_panic+0x10/0x10
[ 94.632876][ T5097] ? _raw_spin_unlock_irqrestore+0x130/0x140
[ 94.635466][ T5097] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 94.638120][ T5097] ? print_report+0x502/0x550
[ 94.640098][ T5097] check_panic_on_warn+0x86/0xb0
[ 94.642159][ T5097] ? __ocfs2_flush_truncate_log+0x824/0x1250
[ 94.644864][ T5097] end_report+0x77/0x160
[ 94.647064][ T5097] kasan_report+0x154/0x180
[ 94.649085][ T5097] ? __ocfs2_flush_truncate_log+0x824/0x1250
[ 94.651666][ T5097] __ocfs2_flush_truncate_log+0x824/0x1250
[ 94.653912][ T5097] ? __pfx___ocfs2_flush_truncate_log+0x10/0x10
[ 94.656335][ T5097] ? __pfx_lock_acquire+0x10/0x10
[ 94.658492][ T5097] ? ocfs2_sync_fs+0xf8/0x390
[ 94.660754][ T5097] ? down_write+0x18c/0x220
[ 94.662906][ T5097] ? __pfx_down_write+0x10/0x10
[ 94.665155][ T5097] ? do_raw_spin_unlock+0x58/0x8b0
[ 94.667354][ T5097] ocfs2_flush_truncate_log+0x4f/0x70
[ 94.669506][ T5097] ocfs2_sync_fs+0x125/0x390
[ 94.671382][ T5097] ? __pfx_ocfs2_sync_fs+0x10/0x10
[ 94.673478][ T5097] ? __dentry_kill+0x4e9/0x630
[ 94.675549][ T5097] ? get_nr_dirty_inodes+0x1b7/0x200
[ 94.678045][ T5097] sync_filesystem+0x1c8/0x230
[ 94.680244][ T5097] generic_shutdown_super+0x72/0x2d0
[ 94.682609][ T5097] kill_block_super+0x44/0x90
[ 94.684440][ T5097] deactivate_locked_super+0xc4/0x130
[ 94.686462][ T5097] cleanup_mnt+0x41f/0x4b0
[ 94.688199][ T5097] ? lockdep_hardirqs_on+0x99/0x150
[ 94.690258][ T5097] task_work_run+0x24f/0x310
[ 94.692120][ T5097] ? __pfx_task_work_run+0x10/0x10
[ 94.694329][ T5097] ? __x64_sys_umount+0x123/0x170
[ 94.696759][ T5097] ? syscall_exit_to_user_mode+0xa3/0x370
[ 94.699273][ T5097] syscall_exit_to_user_mode+0x168/0x370
[ 94.701378][ T5097] do_syscall_64+0x100/0x230
[ 94.703083][ T5097] ? clear_bhb_loop+0x35/0x90
[ 94.704804][ T5097] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.707352][ T5097] RIP: 0033:0x7f1d697cd447
[ 94.709651][ T5097] Code: 07 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8
[ 94.717546][ T5097] RSP: 002b:00007fffb3b22858 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6
[ 94.720751][ T5097] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f1d697cd447
[ 94.723768][ T5097] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffb3b22910
[ 94.727239][ T5097] RBP: 00007fffb3b22910 R08: 0000000000000000 R09: 0000000000000000
[ 94.731118][ T5097] R10: 00000000ffffffff R11: 0000000000000202 R12: 00007fffb3b23970
[ 94.734294][ T5097] R13: 0000555578e356c0 R14: 0000000000000002 R15: 431bde82d7b634db
[ 94.737260][ T5097]
[ 94.738820][ T5097] Kernel Offset: disabled
[ 94.740750][ T5097] Rebooting in 86400 seconds..
VM DIAGNOSIS:
09:18:41 Registers:
info registers vcpu 0
CPU#0
RAX=0000000000000020 RBX=ffffffff9a711e40 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=0000000000000000 RSP=ffffc90002d5f1b0
R8 =ffffffff85498efb R9 =1ffff11006766046 R10=dffffc0000000000 R11=ffffffff85498eb0
R12=dffffc0000000000 R13=ffffffff9a40cf09 R14=0000000000000020 R15=00000000000003f8
RIP=ffffffff85498f2e RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555578e34380 ffffffff 00c00000
GS =0000 ffff88801fc00000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=0000555578e3d6f8 CR3=0000000011c26000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000040000021 Opmask01=0000000000000001 Opmask02=00000000fff7ffff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffb3b22860 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e006a64615f6572 6f63735f6d6f6f2f 666c65732f636f72 702f003030303100
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0b004f41445f4057 4a46565f484a4a0a 434940560a464a57 550a001515151400
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000