Warning: Permanently added '10.128.10.9' (ED25519) to the list of known hosts. executing program [ 44.461601][ T4294] loop0: detected capacity change from 0 to 32768 [ 44.482643][ T4294] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 44.489038][ T4294] ================================================================== [ 44.491334][ T4294] BUG: KASAN: use-after-free in ocfs2_claim_suballoc_bits+0x88c/0x1bfc [ 44.493482][ T4294] Read of size 4 at addr ffff0000e4eeb000 by task syz-executor310/4294 [ 44.495715][ T4294] [ 44.496341][ T4294] CPU: 0 PID: 4294 Comm: syz-executor310 Not tainted 6.1.140-syzkaller #0 [ 44.498616][ T4294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 44.501258][ T4294] Call trace: [ 44.502148][ T4294] dump_backtrace+0x1c8/0x1f4 [ 44.503393][ T4294] show_stack+0x2c/0x3c [ 44.504519][ T4294] __dump_stack+0x30/0x40 [ 44.505621][ T4294] dump_stack_lvl+0xf8/0x160 [ 44.506819][ T4294] print_address_description+0x88/0x220 [ 44.508356][ T4294] print_report+0x50/0x68 [ 44.509509][ T4294] kasan_report+0xa8/0x100 [ 44.510670][ T4294] __asan_report_load4_noabort+0x2c/0x38 [ 44.512152][ T4294] ocfs2_claim_suballoc_bits+0x88c/0x1bfc [ 44.513730][ T4294] ocfs2_claim_new_inode+0x2e8/0x700 [ 44.515138][ T4294] ocfs2_mknod_locked+0xfc/0x228 [ 44.516400][ T4294] ocfs2_mknod+0xe64/0x1f18 [ 44.517593][ T4294] ocfs2_mkdir+0x19c/0x4f0 [ 44.518794][ T4294] vfs_mkdir+0x314/0x4d4 [ 44.519947][ T4294] do_mkdirat+0x1b4/0x3e0 [ 44.521098][ T4294] __arm64_sys_mkdirat+0x90/0xa8 [ 44.522425][ T4294] invoke_syscall+0x98/0x2bc [ 44.523625][ T4294] el0_svc_common+0x138/0x258 [ 44.524871][ T4294] do_el0_svc+0x58/0x13c [ 44.526038][ T4294] el0_svc+0x58/0x138 [ 44.527071][ T4294] el0t_64_sync_handler+0x84/0xf0 [ 44.528440][ T4294] el0t_64_sync+0x18c/0x190 [ 44.529645][ T4294] [ 44.530243][ T4294] The buggy address belongs to the physical page: [ 44.531928][ T4294] page:000000006db476d7 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x124eeb [ 44.534677][ T4294] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 44.536546][ T4294] raw: 05ffc00000000000 fffffc000393bb08 ffff00019f730e20 0000000000000000 [ 44.538769][ T4294] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 44.540984][ T4294] page dumped because: kasan: bad access detected [ 44.542871][ T4294] [ 44.543515][ T4294] Memory state around the buggy address: [ 44.545017][ T4294] ffff0000e4eeaf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 44.547166][ T4294] ffff0000e4eeaf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 44.549335][ T4294] >ffff0000e4eeb000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 44.551527][ T4294] ^ [ 44.552594][ T4294] ffff0000e4eeb080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 44.554792][ T4294] ffff0000e4eeb100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 44.556967][ T4294] ================================================================== [ 44.559792][ T4294] Disabling lock debugging due to kernel taint [ 44.562530][ T4294] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #0 has bad signature  [ 44.566665][ T4294] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 44.569285][ T4294] OCFS2: File system is now read-only. [ 44.570651][ T4294] (syz-executor310,4294,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 44.573334][ T4294] (syz-executor310,4294,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 44.575551][ T4294] (syz-executor310,4294,0):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 44.577933][ T4294] (syz-executor310,4294,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 44.580401][ T4294] (syz-executor310,4294,0):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 44.582760][ T4294] (syz-executor310,4294,0):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 44.585170][ T4294] (syz-executor310,4294,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 44.587366][ T4294] (syz-executor310,4294,0):ocfs2_mknod:385 ERROR: status = -30 [ 44.589475][ T4294] (syz-executor310,4294,0):ocfs2_mknod:502 ERROR: status = -30 [ 44.591587][ T4294] (syz-executor310,4294,0):ocfs2_mkdir:659 ERROR: status = -30