program: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x88c0, &(0x7f00000007c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c0050890e1d2cc1bbbdf08d08fe06ff2766758d8955927fab01a7ccdecfc59b2041a9461723f1db971e775e0e358c03b00c510998283ed6f1dba0502d352e58b65a28492b0a7053e14eccd84ac5b3452602d77c0ca06fcbf3756ab0c1000b6cd9257f69726afcec2859414f3e35e002dcdf2b18b581c33cd87be229bc4302b017e3c3"], 0x1, 0x442a, &(0x7f0000008940)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40042, 0x0) pwrite64(r2, &(0x7f0000000540)="9e", 0x1, 0xfecf) r3 = open(&(0x7f000001f580)='./file1\x00', 0x145142, 0x0) ftruncate(r3, 0x96ef) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000100)=ANY=[], 0xb, 0x0, &(0x7f0000000100)) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r5, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0)) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000680)) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000880)={"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"}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x13, r6, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5, 0x6, 0x0, 0xfffffffffffffffd]}) r7 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f33301020301090212"], 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='$\x00', 0x2) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 75.331102][ T5302] Bluetooth: hci0: command tx timeout [ 75.576204][ T5322] loop0: detected capacity change from 0 to 32768 [ 75.583823][ T5322] ======================================================= [ 75.583823][ T5322] WARNING: The mand mount option has been deprecated and [ 75.583823][ T5322] and is ignored by this kernel. Remove the mand [ 75.583823][ T5322] option from the mount to silence this warning. [ 75.583823][ T5322] ======================================================= [ 75.650312][ T5322] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 75.690269][ T5322] (syz.0.0,5322,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 75.711289][ T5322] loop0: detected capacity change from 32768 to 64 [ 75.725525][ T5322] (syz.0.0,5322,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 75.728795][ T5322] (syz.0.0,5322,0):ocfs2_assign_bh:2417 ERROR: status = -12 [ 75.741514][ T5322] (syz.0.0,5322,0):ocfs2_inode_lock_full_nested:2512 ERROR: status = -12 [ 75.744996][ T5322] (syz.0.0,5322,0):ocfs2_inode_lock_atime:2602 ERROR: status = -12 [ 75.748302][ T5322] (syz.0.0,5322,0):ocfs2_mmap_prepare:170 ERROR: status = -12 [ 75.755211][ T5322] (syz.0.0,5322,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 75.758437][ T5322] (syz.0.0,5322,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 75.764339][ T5322] (syz.0.0,5322,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 75.767798][ T5322] (syz.0.0,5322,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880436fcfb8, block: 0 [ 75.772744][ T5322] (syz.0.0,5322,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 75.776124][ T5322] (syz.0.0,5322,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 75.779285][ T5322] (syz.0.0,5322,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 75.783321][ T5322] (syz.0.0,5322,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880436fcfb8, block: 0 [ 75.788247][ T5322] (syz.0.0,5322,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 75.792276][ T5322] (syz.0.0,5322,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 75.795497][ T5322] (syz.0.0,5322,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 75.799099][ T5322] (syz.0.0,5322,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880436fcfb8, block: 1 [ 75.804131][ T5322] (syz.0.0,5322,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 75.807336][ T5322] (syz.0.0,5322,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 75.810692][ T5322] (syz.0.0,5322,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 75.815316][ T5322] (syz.0.0,5322,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880436fcfb8, block: 2 [ 75.819702][ T5322] (syz.0.0,5322,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 75.823190][ T5322] (syz.0.0,5322,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 75.826188][ T5322] (syz.0.0,5322,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 75.829561][ T5322] (syz.0.0,5322,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880436fcfb8, block: 3 [ 75.835218][ T5322] (syz.0.0,5322,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 75.838419][ T5322] (syz.0.0,5322,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 75.841691][ T5322] (syz.0.0,5322,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 75.844564][ T5322] (syz.0.0,5322,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880436fcfb8, block: 4 [ 75.848876][ T5322] (syz.0.0,5322,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 75.852132][ T5322] (syz.0.0,5322,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 75.854663][ T5322] (syz.0.0,5322,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 75.857360][ T5322] (syz.0.0,5322,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880436fcfb8, block: 5 [ 75.862571][ T5322] (syz.0.0,5322,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 75.865578][ T5322] (syz.0.0,5322,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 75.869239][ T5322] (syz.0.0,5322,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 75.873863][ T5322] (syz.0.0,5322,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880436fcfb8, block: 6 [ 75.878186][ T5322] (syz.0.0,5322,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 75.881627][ T5322] (syz.0.0,5322,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 75.885302][ T5322] (syz.0.0,5322,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 75.889270][ T5322] (syz.0.0,5322,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880436fcfb8, block: 7 [ 75.894766][ T5322] (syz.0.0,5322,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 75.897803][ T5322] (syz.0.0,5322,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 75.900806][ T5322] (syz.0.0,5322,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 75.904910][ T5322] (syz.0.0,5322,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880436fcfb8, block: 0 [ 75.909770][ T5322] (syz.0.0,5322,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 75.913313][ T5322] (syz.0.0,5322,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 75.916555][ T5322] (syz.0.0,5322,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 75.920229][ T5322] (syz.0.0,5322,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880436fcfb8, block: 1 [ 75.926331][ T5322] (syz.0.0,5322,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 75.929598][ T5322] (syz.0.0,5322,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 75.933378][ T5322] (syz.0.0,5322,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 75.936989][ T5322] (syz.0.0,5322,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880436fcfb8, block: 2 [ 75.942004][ T5322] (syz.0.0,5322,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 75.945740][ T5322] (syz.0.0,5322,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 75.949692][ T5322] (syz.0.0,5322,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 75.954260][ T5322] (syz.0.0,5322,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880436fcfb8, block: 3 [ 75.959062][ T5322] (syz.0.0,5322,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 75.963199][ T5322] (syz.0.0,5322,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 75.967111][ T5322] (syz.0.0,5322,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 75.970493][ T5322] (syz.0.0,5322,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880436fcfb8, block: 4 [ 75.976433][ T5322] (syz.0.0,5322,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 75.979681][ T5322] (syz.0.0,5322,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 75.984197][ T5322] (syz.0.0,5322,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 75.987572][ T5322] (syz.0.0,5322,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880436fcfb8, block: 5 [ 75.992948][ T5322] (syz.0.0,5322,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 75.996389][ T5322] (syz.0.0,5322,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 75.999802][ T5322] (syz.0.0,5322,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 76.004428][ T5322] (syz.0.0,5322,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880436fcfb8, block: 6 [ 76.008687][ T5322] (syz.0.0,5322,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 76.012522][ T5322] (syz.0.0,5322,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 76.016292][ T5322] (syz.0.0,5322,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 76.019921][ T5322] (syz.0.0,5322,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880436fcfb8, block: 7 [ 76.026221][ T5322] (syz.0.0,5322,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 76.029500][ T5322] (syz.0.0,5322,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 76.034382][ T5322] (syz.0.0,5322,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 76.038461][ T5322] (syz.0.0,5322,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880436fcfb8, block: 0 [ 76.043698][ T5322] (syz.0.0,5322,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 76.047341][ T5322] (syz.0.0,5322,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 76.050593][ T5322] (syz.0.0,5322,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 76.054735][ T5322] (syz.0.0,5322,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880436fcfb8, block: 1 [ 76.059565][ T5322] (syz.0.0,5322,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 76.063137][ T5322] (syz.0.0,5322,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 76.066403][ T5322] (syz.0.0,5322,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 76.078554][ T5322] (syz.0.0,5322,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880436fcfb8, block: 2 [ 76.088934][ T5322] (syz.0.0,5322,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 76.093059][ T5322] (syz.0.0,5322,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 76.098903][ T5322] (syz.0.0,5322,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 76.110310][ T5322] (syz.0.0,5322,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880436fcfb8, block: 3 [ 76.128476][ T5322] (syz.0.0,5322,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 76.133282][ T5322] (syz.0.0,5322,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 76.136609][ T5322] (syz.0.0,5322,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 76.140100][ T5322] (syz.0.0,5322,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880436fcfb8, block: 4 [ 76.146936][ T5322] (syz.0.0,5322,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 76.150267][ T5322] (syz.0.0,5322,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 76.156626][ T5322] (syz.0.0,5322,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 76.160446][ T5322] (syz.0.0,5322,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880436fcfb8, block: 5 [ 76.165401][ T5322] (syz.0.0,5322,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 76.168584][ T5322] (syz.0.0,5322,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 76.172994][ T5322] (syz.0.0,5322,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 76.177325][ T5322] (syz.0.0,5322,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880436fcfb8, block: 6 [ 76.182022][ T5322] (syz.0.0,5322,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 76.185513][ T5322] (syz.0.0,5322,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 76.188537][ T5322] (syz.0.0,5322,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 76.192390][ T5322] (syz.0.0,5322,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880436fcfb8, block: 7 [ 76.197291][ T5322] (syz.0.0,5322,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 76.200413][ T5322] (syz.0.0,5322,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 76.204576][ T5322] (syz.0.0,5322,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 76.207569][ T5322] (syz.0.0,5322,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880436fcfb8, block: 0 [ 76.212099][ T5322] (syz.0.0,5322,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 76.215220][ T5322] (syz.0.0,5322,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 76.218412][ T5322] (syz.0.0,5322,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 76.222484][ T5322] (syz.0.0,5322,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880436fcfb8, block: 1 [ 76.227367][ T5322] (syz.0.0,5322,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 76.232885][ T5322] (syz.0.0,5322,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 76.236219][ T5322] (syz.0.0,5322,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 76.239267][ T5322] (syz.0.0,5322,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880436fcfb8, block: 2 [ 76.244165][ T5322] (syz.0.0,5322,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 76.247103][ T5322] (syz.0.0,5322,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 76.250052][ T5322] (syz.0.0,5322,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 76.254114][ T5322] (syz.0.0,5322,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880436fcfb8, block: 3 [ 76.259010][ T5322] (syz.0.0,5322,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 76.263048][ T5322] (syz.0.0,5322,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 76.266293][ T5322] (syz.0.0,5322,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 76.270041][ T5322] (syz.0.0,5322,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880436fcfb8, block: 4 [ 76.275321][ T5322] (syz.0.0,5322,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 76.278539][ T5322] (syz.0.0,5322,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 76.282212][ T5322] (syz.0.0,5322,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 76.285994][ T5322] (syz.0.0,5322,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880436fcfb8, block: 5 [ 76.292144][ T5322] (syz.0.0,5322,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 76.296784][ T5322] (syz.0.0,5322,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 76.301612][ T5322] (syz.0.0,5322,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 76.306216][ T5322] (syz.0.0,5322,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880436fcfb8, block: 6 [ 76.312530][ T5322] (syz.0.0,5322,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 76.315173][ T5322] (syz.0.0,5322,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 76.318046][ T5322] (syz.0.0,5322,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 76.322054][ T5322] (syz.0.0,5322,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880436fcfb8, block: 7 [ 76.327109][ T5322] (syz.0.0,5322,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 76.330219][ T5322] (syz.0.0,5322,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 76.334865][ T5322] (syz.0.0,5322,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 76.338743][ T5322] (syz.0.0,5322,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880436fcfb8, block: 0 [ 76.343792][ T5322] (syz.0.0,5322,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 76.346904][ T5322] (syz.0.0,5322,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 76.350010][ T5322] (syz.0.0,5322,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 76.353596][ T5322] (syz.0.0,5322,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880436fcfb8, block: 1 [ 76.358238][ T5322] (syz.0.0,5322,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 76.372108][ T5322] (syz.0.0,5322,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 76.375506][ T5322] (syz.0.0,5322,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 76.378743][ T5322] (syz.0.0,5322,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880436fcfb8, block: 2 [ 76.406460][ T5322] (syz.0.0,5322,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 76.409695][ T5322] (syz.0.0,5322,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 76.416676][ T5322] (syz.0.0,5322,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 76.420292][ T5322] (syz.0.0,5322,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880436fcfb8, block: 3 [ 76.428483][ T5322] (syz.0.0,5322,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 76.432275][ T5322] (syz.0.0,5322,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 76.437018][ T5322] (syz.0.0,5322,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 76.440208][ T5322] (syz.0.0,5322,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880436fcfb8, block: 4 [ 76.445129][ T5322] (syz.0.0,5322,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 76.448314][ T5322] (syz.0.0,5322,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 76.452130][ T5322] (syz.0.0,5322,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 76.455276][ T5322] (syz.0.0,5322,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880436fcfb8, block: 5 [ 76.459740][ T5322] (syz.0.0,5322,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 76.463844][ T5322] (syz.0.0,5322,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 76.466979][ T5322] (syz.0.0,5322,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 76.470337][ T5322] (syz.0.0,5322,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880436fcfb8, block: 6 [ 76.479377][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.482346][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.485992][ T5322] (syz.0.0,5322,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 76.489168][ T5322] (syz.0.0,5322,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 76.494096][ T5322] (syz.0.0,5322,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 76.497720][ T5322] (syz.0.0,5322,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880436fcfb8, block: 7 [ 76.505058][ T5322] (syz.0.0,5322,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 76.508236][ T5322] (syz.0.0,5322,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 76.511684][ T5322] (syz.0.0,5322,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 76.514787][ T5322] (syz.0.0,5322,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880436fcfb8, block: 0 [ 76.519241][ T5322] (syz.0.0,5322,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 76.522857][ T5322] (syz.0.0,5322,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 76.526085][ T5322] (syz.0.0,5322,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 76.529117][ T5322] (syz.0.0,5322,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880436fcfb8, block: 1 [ 76.534886][ T5322] (syz.0.0,5322,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 76.539224][ T5322] (syz.0.0,5322,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 76.542802][ T5322] (syz.0.0,5322,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 76.546339][ T5322] (syz.0.0,5322,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880436fcfb8, block: 2 [ 76.551259][ T5322] (syz.0.0,5322,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 76.554408][ T5322] (syz.0.0,5322,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 76.560939][ T5322] (syz.0.0,5322,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 76.564767][ T5322] (syz.0.0,5322,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880436fcfb8, block: 3 [ 76.584806][ T5322] (syz.0.0,5322,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 76.588286][ T5322] (syz.0.0,5322,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 76.593031][ T5322] (syz.0.0,5322,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 76.596577][ T5322] (syz.0.0,5322,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880436fcfb8, block: 4 [ 76.602321][ T5322] (syz.0.0,5322,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 76.605447][ T5322] (syz.0.0,5322,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 76.608451][ T5322] (syz.0.0,5322,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 76.613734][ T5322] (syz.0.0,5322,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880436fcfb8, block: 5 [ 76.619185][ T5322] (syz.0.0,5322,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 76.622675][ T5322] (syz.0.0,5322,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 76.625978][ T5322] (syz.0.0,5322,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 76.629656][ T5322] (syz.0.0,5322,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880436fcfb8, block: 6 [ 76.635207][ T5322] (syz.0.0,5322,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 76.638435][ T5322] (syz.0.0,5322,0):ocfs2_get_clusters:627 ERROR: status = -12 [ 76.643991][ T5322] (syz.0.0,5322,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -12 [ 76.647526][ T5322] (syz.0.0,5322,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff8880436fcfb8, block: 7 [ 76.652854][ T5322] ================================================================== [ 76.656339][ T5322] BUG: KASAN: slab-use-after-free in ocfs2_fault+0xd3/0x3f0 [ 76.659501][ T5322] Read of size 8 at addr ffff8880119cf918 by task syz.0.0/5322 [ 76.662722][ T5322] [ 76.663804][ T5322] CPU: 0 UID: 0 PID: 5322 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 76.663821][ T5322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.663830][ T5322] Call Trace: [ 76.663838][ T5322] [ 76.663843][ T5322] dump_stack_lvl+0x189/0x250 [ 76.663860][ T5322] ? __kasan_check_byte+0x12/0x40 [ 76.663876][ T5322] ? __pfx_dump_stack_lvl+0x10/0x10 [ 76.663888][ T5322] ? lock_release+0x4b/0x3e0 [ 76.663902][ T5322] ? __virt_addr_valid+0x4a5/0x5c0 [ 76.663915][ T5322] print_report+0xca/0x240 [ 76.663927][ T5322] ? ocfs2_fault+0xd3/0x3f0 [ 76.663962][ T5322] kasan_report+0x118/0x150 [ 76.663975][ T5322] ? ocfs2_fault+0xd3/0x3f0 [ 76.663988][ T5322] ocfs2_fault+0xd3/0x3f0 [ 76.664004][ T5322] ? __pfx_ocfs2_fault+0x10/0x10 [ 76.664020][ T5322] __do_fault+0x138/0x390 [ 76.664031][ T5322] __handle_mm_fault+0x35e3/0x5400 [ 76.664050][ T5322] ? __pfx___handle_mm_fault+0x10/0x10 [ 76.664067][ T5322] ? find_vma+0xe7/0x160 [ 76.664080][ T5322] ? __pfx_find_vma+0x10/0x10 [ 76.664093][ T5322] handle_mm_fault+0x40a/0x8e0 [ 76.664108][ T5322] do_user_addr_fault+0x764/0x1380 [ 76.664122][ T5322] exc_page_fault+0x82/0x100 [ 76.664183][ T5322] asm_exc_page_fault+0x26/0x30 [ 76.664194][ T5322] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 76.664207][ T5322] Code: 35 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 4f 35 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 76.664217][ T5322] RSP: 0018:ffffc9000f5b79d8 EFLAGS: 00050206 [ 76.664228][ T5322] RAX: 00007ffffffff001 RBX: 0000000000000068 RCX: 0000000000000068 [ 76.664240][ T5322] RDX: 0000000000000001 RSI: 0000200000000680 RDI: ffffc9000f5b7a40 [ 76.664247][ T5322] RBP: ffffc9000f5b7e98 R08: ffffc9000f5b7aa7 R09: 1ffff92001eb6f54 [ 76.664258][ T5322] R10: dffffc0000000000 R11: fffff52001eb6f55 R12: 1ffff92001eb6f44 [ 76.664265][ T5322] R13: ffff888032f2da02 R14: ffffc9000f5b7a40 R15: 0000200000000680 [ 76.664276][ T5322] _copy_from_user+0x7a/0xb0 [ 76.664292][ T5322] kvm_vm_ioctl+0x5e4/0xc60 [ 76.664305][ T5322] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 76.664327][ T5322] ? kasan_quarantine_put+0xdd/0x220 [ 76.664342][ T5322] ? lockdep_hardirqs_on+0x9c/0x150 [ 76.664359][ T5322] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 76.664374][ T5322] ? do_vfs_ioctl+0xbe8/0x1430 [ 76.664385][ T5322] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 76.664397][ T5322] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 76.664413][ T5322] ? __might_fault+0xb0/0x130 [ 76.664433][ T5322] ? __fget_files+0x2a/0x420 [ 76.664443][ T5322] ? __fget_files+0x3a0/0x420 [ 76.664455][ T5322] ? __fget_files+0x2a/0x420 [ 76.664468][ T5322] ? bpf_lsm_file_ioctl+0x9/0x20 [ 76.664479][ T5322] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 76.664491][ T5322] __se_sys_ioctl+0xfc/0x170 [ 76.664504][ T5322] do_syscall_64+0xfa/0xfa0 [ 76.664514][ T5322] ? lockdep_hardirqs_on+0x9c/0x150 [ 76.664529][ T5322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.664539][ T5322] ? clear_bhb_loop+0x60/0xb0 [ 76.664550][ T5322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.664560][ T5322] RIP: 0033:0x7f1cf9f8eec9 [ 76.664571][ T5322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.664579][ T5322] RSP: 002b:00007f1cfadac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.664590][ T5322] RAX: ffffffffffffffda RBX: 00007f1cfa1e5fa0 RCX: 00007f1cf9f8eec9 [ 76.664597][ T5322] RDX: 0000200000000680 RSI: 000000004068aea3 RDI: 0000000000000004 [ 76.664604][ T5322] RBP: 00007f1cfa011f91 R08: 0000000000000000 R09: 0000000000000000 [ 76.664610][ T5322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.664619][ T5322] R13: 00007f1cfa1e6038 R14: 00007f1cfa1e5fa0 R15: 00007fffedd9c848 [ 76.664629][ T5322] [ 76.664633][ T5322] [ 76.827749][ T5322] Allocated by task 5322: [ 76.829605][ T5322] kasan_save_track+0x3e/0x80 [ 76.831617][ T5322] __kasan_slab_alloc+0x6c/0x80 [ 76.833688][ T5322] kmem_cache_alloc_noprof+0x367/0x6e0 [ 76.836050][ T5322] vm_area_alloc+0x24/0x140 [ 76.837991][ T5322] mmap_region+0xdcd/0x2110 [ 76.840016][ T5322] do_mmap+0xc45/0x10d0 [ 76.841858][ T5322] vm_mmap_pgoff+0x2a6/0x4d0 [ 76.843973][ T5322] ksys_mmap_pgoff+0x51f/0x760 [ 76.846026][ T5322] do_syscall_64+0xfa/0xfa0 [ 76.848064][ T5322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.850581][ T5322] [ 76.851558][ T5322] Freed by task 5322: [ 76.853258][ T5322] kasan_save_track+0x3e/0x80 [ 76.855158][ T5322] __kasan_save_free_info+0x46/0x50 [ 76.857701][ T5322] __kasan_slab_free+0x5c/0x80 [ 76.859800][ T5322] slab_free_after_rcu_debug+0x12c/0x2a0 [ 76.862155][ T5322] rcu_core+0xcab/0x1770 [ 76.863969][ T5322] handle_softirqs+0x286/0x870 [ 76.866010][ T5322] __irq_exit_rcu+0xca/0x1f0 [ 76.868014][ T5322] irq_exit_rcu+0x9/0x30 [ 76.869859][ T5322] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 76.872243][ T5322] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 76.874818][ T5322] [ 76.875894][ T5322] Last potentially related work creation: [ 76.878356][ T5322] kasan_save_stack+0x3e/0x60 [ 76.880332][ T5322] kasan_record_aux_stack+0xbd/0xd0 [ 76.882526][ T5322] kmem_cache_free+0x4a2/0x690 [ 76.884633][ T5322] vms_complete_munmap_vmas+0x626/0x8a0 [ 76.886924][ T5322] mmap_region+0x11e1/0x2110 [ 76.888807][ T5322] do_mmap+0xc45/0x10d0 [ 76.890598][ T5322] vm_mmap_pgoff+0x2a6/0x4d0 [ 76.892569][ T5322] ksys_mmap_pgoff+0x51f/0x760 [ 76.894477][ T5322] do_syscall_64+0xfa/0xfa0 [ 76.896515][ T5322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.899081][ T5322] [ 76.900196][ T5322] The buggy address belongs to the object at ffff8880119cf8c0 [ 76.900196][ T5322] which belongs to the cache vm_area_struct of size 256 [ 76.906392][ T5322] The buggy address is located 88 bytes inside of [ 76.906392][ T5322] freed 256-byte region [ffff8880119cf8c0, ffff8880119cf9c0) [ 76.912191][ T5322] [ 76.913284][ T5322] The buggy address belongs to the physical page: [ 76.916135][ T5322] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x119cf [ 76.919848][ T5322] memcg:ffff888011a93e81 [ 76.921773][ T5322] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 76.924777][ T5322] page_type: f5(slab) [ 76.926561][ T5322] raw: 00fff00000000000 ffff88801b6d5b40 ffffea00004622c0 dead000000000002 [ 76.930264][ T5322] raw: 0000000000000000 00000000000c000c 00000000f5000000 ffff888011a93e81 [ 76.933961][ T5322] page dumped because: kasan: bad access detected [ 76.936666][ T5322] page_owner tracks the page as allocated [ 76.939150][ T5322] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 4697, tgid 4697 (hostname), ts 26894959096, free_ts 26356755048 [ 76.946910][ T5322] post_alloc_hook+0x240/0x2a0 [ 76.949018][ T5322] get_page_from_freelist+0x2365/0x2440 [ 76.951408][ T5322] __alloc_frozen_pages_noprof+0x181/0x370 [ 76.953937][ T5322] alloc_pages_mpol+0x232/0x4a0 [ 76.956027][ T5322] allocate_slab+0x96/0x3a0 [ 76.958003][ T5322] ___slab_alloc+0xe94/0x18a0 [ 76.960047][ T5322] __kmem_cache_alloc_bulk+0x1e2/0x590 [ 76.962384][ T5322] __pcs_replace_empty_main+0x292/0x540 [ 76.964669][ T5322] kmem_cache_alloc_noprof+0x453/0x6e0 [ 76.966963][ T5322] vm_area_dup+0x2b/0x680 [ 76.968808][ T5322] __split_vma+0x1a9/0xa00 [ 76.970741][ T5322] vms_gather_munmap_vmas+0x4c6/0x12e0 [ 76.973091][ T5322] mmap_region+0x722/0x2110 [ 76.975019][ T5322] do_mmap+0xc45/0x10d0 [ 76.976775][ T5322] vm_mmap_pgoff+0x2a6/0x4d0 [ 76.978739][ T5322] ksys_mmap_pgoff+0x51f/0x760 [ 76.980729][ T5322] page last free pid 1 tgid 1 stack trace: [ 76.983165][ T5322] __free_frozen_pages+0xbc4/0xd30 [ 76.985406][ T5322] free_reserved_page+0xce/0x120 [ 76.987585][ T5322] free_reserved_area+0x90/0x190 [ 76.989777][ T5322] free_kernel_image_pages+0xa2/0x100 [ 76.992249][ T5322] kernel_init+0x31/0x1d0 [ 76.994605][ T5322] ret_from_fork+0x4bc/0x870 [ 76.996792][ T5322] ret_from_fork_asm+0x1a/0x30 [ 76.998912][ T5322] [ 76.999925][ T5322] Memory state around the buggy address: [ 77.002220][ T5322] ffff8880119cf800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 77.005671][ T5322] ffff8880119cf880: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 77.009213][ T5322] >ffff8880119cf900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 77.012678][ T5322] ^ [ 77.014794][ T5322] ffff8880119cf980: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 77.018190][ T5322] ffff8880119cfa00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 77.021882][ T5322] ================================================================== [ 77.044816][ T5322] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 77.047968][ T5322] CPU: 0 UID: 0 PID: 5322 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 77.051790][ T5322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.056423][ T5322] Call Trace: [ 77.057891][ T5322] [ 77.059136][ T5322] dump_stack_lvl+0x99/0x250 [ 77.061118][ T5322] ? __asan_memcpy+0x40/0x70 [ 77.063198][ T5322] ? __pfx_dump_stack_lvl+0x10/0x10 [ 77.065462][ T5322] ? __pfx__printk+0x10/0x10 [ 77.067564][ T5322] vpanic+0x237/0x6d0 [ 77.069354][ T5322] ? __pfx_vpanic+0x10/0x10 [ 77.071519][ T5322] ? preempt_schedule+0xae/0xc0 [ 77.073651][ T5322] ? __pfx_preempt_schedule+0x10/0x10 [ 77.076058][ T5322] panic+0xb9/0xc0 [ 77.077765][ T5322] ? __pfx_panic+0x10/0x10 [ 77.079789][ T5322] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 77.082526][ T5322] ? ocfs2_fault+0xd3/0x3f0 [ 77.084487][ T5322] check_panic_on_warn+0x89/0xb0 [ 77.086688][ T5322] ? ocfs2_fault+0xd3/0x3f0 [ 77.088914][ T5322] end_report+0x78/0x160 [ 77.090767][ T5322] kasan_report+0x129/0x150 [ 77.092888][ T5322] ? ocfs2_fault+0xd3/0x3f0 [ 77.095048][ T5322] ocfs2_fault+0xd3/0x3f0 [ 77.097002][ T5322] ? __pfx_ocfs2_fault+0x10/0x10 [ 77.099247][ T5322] __do_fault+0x138/0x390 [ 77.101179][ T5322] __handle_mm_fault+0x35e3/0x5400 [ 77.103441][ T5322] ? __pfx___handle_mm_fault+0x10/0x10 [ 77.105855][ T5322] ? find_vma+0xe7/0x160 [ 77.107719][ T5322] ? __pfx_find_vma+0x10/0x10 [ 77.109802][ T5322] handle_mm_fault+0x40a/0x8e0 [ 77.111982][ T5322] do_user_addr_fault+0x764/0x1380 [ 77.114210][ T5322] exc_page_fault+0x82/0x100 [ 77.116240][ T5322] asm_exc_page_fault+0x26/0x30 [ 77.118260][ T5322] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 77.120744][ T5322] Code: 35 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 4f 35 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 77.128854][ T5322] RSP: 0018:ffffc9000f5b79d8 EFLAGS: 00050206 [ 77.131478][ T5322] RAX: 00007ffffffff001 RBX: 0000000000000068 RCX: 0000000000000068 [ 77.134966][ T5322] RDX: 0000000000000001 RSI: 0000200000000680 RDI: ffffc9000f5b7a40 [ 77.138327][ T5322] RBP: ffffc9000f5b7e98 R08: ffffc9000f5b7aa7 R09: 1ffff92001eb6f54 [ 77.141794][ T5322] R10: dffffc0000000000 R11: fffff52001eb6f55 R12: 1ffff92001eb6f44 [ 77.145184][ T5322] R13: ffff888032f2da02 R14: ffffc9000f5b7a40 R15: 0000200000000680 [ 77.148743][ T5322] _copy_from_user+0x7a/0xb0 [ 77.150765][ T5322] kvm_vm_ioctl+0x5e4/0xc60 [ 77.152691][ T5322] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 77.154859][ T5322] ? kasan_quarantine_put+0xdd/0x220 [ 77.157122][ T5322] ? lockdep_hardirqs_on+0x9c/0x150 [ 77.159399][ T5322] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 77.161846][ T5322] ? do_vfs_ioctl+0xbe8/0x1430 [ 77.163837][ T5322] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 77.166188][ T5322] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 77.168388][ T5322] ? __might_fault+0xb0/0x130 [ 77.170409][ T5322] ? __fget_files+0x2a/0x420 [ 77.172447][ T5322] ? __fget_files+0x3a0/0x420 [ 77.174454][ T5322] ? __fget_files+0x2a/0x420 [ 77.176417][ T5322] ? bpf_lsm_file_ioctl+0x9/0x20 [ 77.178471][ T5322] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 77.180609][ T5322] __se_sys_ioctl+0xfc/0x170 [ 77.182640][ T5322] do_syscall_64+0xfa/0xfa0 [ 77.184655][ T5322] ? lockdep_hardirqs_on+0x9c/0x150 [ 77.186874][ T5322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.189463][ T5322] ? clear_bhb_loop+0x60/0xb0 [ 77.191475][ T5322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.193973][ T5322] RIP: 0033:0x7f1cf9f8eec9 [ 77.195822][ T5322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.203846][ T5322] RSP: 002b:00007f1cfadac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 77.207449][ T5322] RAX: ffffffffffffffda RBX: 00007f1cfa1e5fa0 RCX: 00007f1cf9f8eec9 [ 77.210867][ T5322] RDX: 0000200000000680 RSI: 000000004068aea3 RDI: 0000000000000004 [ 77.214386][ T5322] RBP: 00007f1cfa011f91 R08: 0000000000000000 R09: 0000000000000000 [ 77.217770][ T5322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.221241][ T5322] R13: 00007f1cfa1e6038 R14: 00007f1cfa1e5fa0 R15: 00007fffedd9c848 [ 77.224645][ T5322] [ 77.226301][ T5322] Kernel Offset: disabled [ 77.228193][ T5322] Rebooting in 86400 seconds..