program: syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x4446, &(0x7f00000088c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000340)={[{@shortname_winnt}, {@uni_xlate}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@fat=@codepage={'codepage', 0x3d, '864'}}, {@fat=@nocase}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}]}, 0x1, 0x221, &(0x7f0000000680)="$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") (async) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000340)={[{@shortname_winnt}, {@uni_xlate}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@fat=@codepage={'codepage', 0x3d, '864'}}, {@fat=@nocase}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}]}, 0x1, 0x221, &(0x7f0000000680)="$eJzs2j+LXFUcBuDfXSOJGzYz4j8SEA9aqM0lM7VFFklAHFA0I0RBcuPe0WGuM8vcYWFEzFba+hGsxdJOkJQ22/gJLOy22TKFeCWZaHbDWISwO2Kep5kXzrzccziXwynu/hvffj4a1PmgmMValsXapdiN21m0Yy3+thuvv3rtlxffv/bh25u93uX3UrqyebXTTSmde+nnj7784eVbs7Mf/Hjup9Ox1/54/6D7+97ze+f3/7z62bBOwzqNJ7NUpBuTyay4UZVpa1iP8pTercqiLtNwXJfTI+ODarK9PU/FeGtjfXta1nUqxvM0KudpNkmz6TwVnxbDccrzPG2sB4+i//3tpomD5snr0TTNU9/F2Vux8Vu0Ins6Zc9cyp67nr2wm50/aJrWqqfKsbD/j7dDh/qZiOqbnf5Of/G7GN8cxDCqKONitOKPuPOa3LPIV97qXb6Y7mrH19XNe/2bO/0njvY70Yr28n5n0U9H+6dj/XC/G614dnm/u7R/Jl575VA/j1b8+klMooqtuNO93/+qk9Kb7/Qe6F+4+z8AgP+bPP1j6f0tz/9tfNF/iPvhA/erU3Hh1GrXTkQ9/2JUVFU5PfawfoLPEgTh0cKqTyZOwv1NX/VMAAAAAAAAAAAAeBgn8TnhqtcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8t/0VAAD//88U1PU=") r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='.\x00', 0x108020, &(0x7f00000004c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1c, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x51}, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r5, &(0x7f0000000300)="ab", 0x34000, 0x64, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) syz_emit_vhci(&(0x7f0000005740)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0x0, 0x41c}}}, 0x7) write$FUSE_INIT(r0, &(0x7f00000000c0)={0xfffffffffffffe5a, 0x0, 0x0, {0x7, 0x2b, 0xf6, 0x44000000, 0x6, 0xd06, 0x4, 0xe5, 0x0, 0x0, 0x40, 0xfffffc00}}, 0x50) (async) write$FUSE_INIT(r0, &(0x7f00000000c0)={0xfffffffffffffe5a, 0x0, 0x0, {0x7, 0x2b, 0xf6, 0x44000000, 0x6, 0xd06, 0x4, 0xe5, 0x0, 0x0, 0x40, 0xfffffc00}}, 0x50) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) read$FUSE(r6, &(0x7f0000005780)={0x2020}, 0x2020) (async) read$FUSE(r6, &(0x7f0000005780)={0x2020}, 0x2020) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$rds(0x15, 0x5, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r8, 0x0, 0x486, 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}]}], {0x14}}, 0xac}}, 0x0) lsm_set_self_attr(0x69, &(0x7f00000007c0)={0x68, 0x0, 0x20}, 0x20, 0x0) (async) lsm_set_self_attr(0x69, &(0x7f00000007c0)={0x68, 0x0, 0x20}, 0x20, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) syz_emit_ethernet(0x52, &(0x7f0000000600)={@random="5970aa64a2dc", @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a27f2", 0x1c, 0x2c, 0x0, @remote, @local, {[@dstopts={0x2f}], {{0x8000, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) fallocate(r0, 0x0, 0x0, 0xffff) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) read$FUSE(r0, &(0x7f0000001a40)={0x2020}, 0x2020) (async) read$FUSE(r0, &(0x7f0000001a40)={0x2020}, 0x2020) [ 67.961134][ T4701] Bluetooth: hci0: command tx timeout [ 68.315954][ T5350] loop0: detected capacity change from 0 to 32768 [ 68.328456][ T5350] ======================================================= [ 68.328456][ T5350] WARNING: The mand mount option has been deprecated and [ 68.328456][ T5350] and is ignored by this kernel. Remove the mand [ 68.328456][ T5350] option from the mount to silence this warning. [ 68.328456][ T5350] ======================================================= [ 68.396712][ T5350] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 68.433174][ T5351] ocfs2: Unknown parameter 'fd' [ 68.462028][ T5350] (syz.0.0,5350,0):ocfs2_change_extent_flag:5216 ERROR: Owner 17058 tried to clear 1 flags on an extent that didn't have them [ 68.468433][ T5350] (syz.0.0,5350,0):ocfs2_mark_extent_written:5280 ERROR: status = -5 [ 68.472356][ T5350] (syz.0.0,5350,0):ocfs2_write_cluster:1142 ERROR: status = -5 [ 68.475410][ T5350] (syz.0.0,5350,0):ocfs2_write_cluster_by_desc:1226 ERROR: status = -5 [ 68.479072][ T5350] (syz.0.0,5350,0):ocfs2_write_begin_nolock:1799 ERROR: status = -5 [ 68.483493][ T5350] (syz.0.0,5350,0):ocfs2_write_begin:1887 ERROR: status = -5 [ 68.488573][ T5354] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 68.498865][ T5354] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 68.504727][ T5354] OCFS2: File system is now read-only. [ 68.507082][ T5354] (syz.0.0,5354,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 68.511235][ T5354] (syz.0.0,5354,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 68.514714][ T5354] (syz.0.0,5354,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff88805250c178, block: 8 [ 68.522935][ T5354] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 68.532695][ T5354] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 68.537513][ T5354] (syz.0.0,5354,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 68.542987][ T5354] (syz.0.0,5354,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 68.546404][ T5354] (syz.0.0,5354,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff88805250c178, block: 9 [ 68.552257][ T5354] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 68.561657][ T5354] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 68.565688][ T5354] (syz.0.0,5354,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 68.568825][ T5354] (syz.0.0,5354,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 68.573371][ T5354] (syz.0.0,5354,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff88805250c178, block: 10 [ 68.584707][ T5354] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 68.595007][ T5354] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 68.599040][ T5354] (syz.0.0,5354,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 68.603408][ T5354] (syz.0.0,5354,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 68.607032][ T5354] (syz.0.0,5354,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff88805250c178, block: 11 [ 68.613946][ T5354] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 68.623955][ T5354] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 68.628494][ T5354] (syz.0.0,5354,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 68.632614][ T5354] (syz.0.0,5354,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 68.636278][ T5354] (syz.0.0,5354,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff88805250c178, block: 12 [ 68.642800][ T5354] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 68.652410][ T5354] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 68.656645][ T5354] (syz.0.0,5354,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 68.659846][ T5354] (syz.0.0,5354,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 68.664562][ T5354] (syz.0.0,5354,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff88805250c178, block: 13 [ 68.669402][ T5354] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 68.678660][ T5354] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 68.684046][ T5354] (syz.0.0,5354,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 68.687272][ T5354] (syz.0.0,5354,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 68.691246][ T5354] (syz.0.0,5354,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff88805250c178, block: 14 [ 68.695907][ T5354] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 68.705442][ T5354] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 68.709729][ T5354] (syz.0.0,5354,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 68.713626][ T5354] (syz.0.0,5354,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 68.717482][ T5354] (syz.0.0,5354,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff88805250c178, block: 15 [ 68.724441][ T5350] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 68.733383][ T5354] ================================================================== [ 68.736804][ T5354] BUG: KASAN: slab-use-after-free in ocfs2_fault+0xd3/0x3f0 [ 68.739927][ T5354] Read of size 8 at addr ffff8880114bc918 by task syz.0.0/5354 [ 68.743107][ T5354] [ 68.744134][ T5354] CPU: 0 UID: 0 PID: 5354 Comm: syz.0.0 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(full) [ 68.744147][ T5354] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.744154][ T5354] Call Trace: [ 68.744160][ T5354] [ 68.744166][ T5354] dump_stack_lvl+0x189/0x250 [ 68.744183][ T5354] ? __kasan_check_byte+0x12/0x40 [ 68.744197][ T5354] ? __pfx_dump_stack_lvl+0x10/0x10 [ 68.744208][ T5354] ? lock_release+0x4b/0x3e0 [ 68.744224][ T5354] ? __virt_addr_valid+0x4a5/0x5c0 [ 68.744237][ T5354] print_report+0xca/0x240 [ 68.744247][ T5354] ? ocfs2_fault+0xd3/0x3f0 [ 68.744259][ T5354] kasan_report+0x118/0x150 [ 68.744270][ T5354] ? ocfs2_fault+0xd3/0x3f0 [ 68.744281][ T5354] ocfs2_fault+0xd3/0x3f0 [ 68.744292][ T5354] ? __pfx_ocfs2_fault+0x10/0x10 [ 68.744305][ T5354] __do_fault+0x138/0x390 [ 68.744319][ T5354] __handle_mm_fault+0x3611/0x5440 [ 68.744332][ T5354] ? __pfx___handle_mm_fault+0x10/0x10 [ 68.744346][ T5354] ? follow_page_pte+0x7ef/0x13e0 [ 68.744359][ T5354] handle_mm_fault+0x40a/0x8e0 [ 68.744372][ T5354] __get_user_pages+0x1699/0x2ce0 [ 68.744389][ T5354] populate_vma_page_range+0x29f/0x3a0 [ 68.744399][ T5354] ? __pfx_populate_vma_page_range+0x10/0x10 [ 68.744408][ T5354] ? userfaultfd_unmap_complete+0x278/0x2d0 [ 68.744421][ T5354] ? down_read+0x1ad/0x2e0 [ 68.744479][ T5354] __mm_populate+0x24c/0x380 [ 68.744489][ T5354] ? __pfx___mm_populate+0x10/0x10 [ 68.744505][ T5354] ? up_write+0x1c4/0x420 [ 68.744513][ T5354] vm_mmap_pgoff+0x387/0x4d0 [ 68.744520][ T5354] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 68.744526][ T5354] ? __fget_files+0x2a/0x420 [ 68.744536][ T5354] ? __fget_files+0x3a0/0x420 [ 68.744543][ T5354] ? __fget_files+0x2a/0x420 [ 68.744552][ T5354] ksys_mmap_pgoff+0x51f/0x760 [ 68.744564][ T5354] do_syscall_64+0xfa/0x3b0 [ 68.744575][ T5354] ? lockdep_hardirqs_on+0x9c/0x150 [ 68.744586][ T5354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.744596][ T5354] ? clear_bhb_loop+0x60/0xb0 [ 68.744607][ T5354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.744617][ T5354] RIP: 0033:0x7f85f6d8ebe9 [ 68.744628][ T5354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.744636][ T5354] RSP: 002b:00007f85f7b9b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 68.744645][ T5354] RAX: ffffffffffffffda RBX: 00007f85f6fb6180 RCX: 00007f85f6d8ebe9 [ 68.744650][ T5354] RDX: 00000000027ffff7 RSI: 0000000000600000 RDI: 0000200000000000 [ 68.744654][ T5354] RBP: 00007f85f6e11e19 R08: 0000000000000004 R09: 0000000000000000 [ 68.744658][ T5354] R10: 0000000004012011 R11: 0000000000000246 R12: 0000000000000000 [ 68.744662][ T5354] R13: 00007f85f6fb6218 R14: 00007f85f6fb6180 R15: 00007ffc0fd3dab8 [ 68.744669][ T5354] [ 68.744671][ T5354] [ 68.865614][ T5354] Allocated by task 5354: [ 68.867416][ T5354] kasan_save_track+0x3e/0x80 [ 68.869403][ T5354] __kasan_slab_alloc+0x6c/0x80 [ 68.871564][ T5354] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 68.873861][ T5354] vm_area_alloc+0x24/0x140 [ 68.875768][ T5354] mmap_region+0xdc7/0x20c0 [ 68.877708][ T5354] do_mmap+0xc45/0x10d0 [ 68.879372][ T5354] vm_mmap_pgoff+0x2a6/0x4d0 [ 68.881428][ T5354] ksys_mmap_pgoff+0x51f/0x760 [ 68.883423][ T5354] do_syscall_64+0xfa/0x3b0 [ 68.885362][ T5354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.887811][ T5354] [ 68.888915][ T5354] Freed by task 5349: [ 68.890712][ T5354] kasan_save_track+0x3e/0x80 [ 68.892715][ T5354] kasan_save_free_info+0x46/0x50 [ 68.894852][ T5354] __kasan_slab_free+0x5b/0x80 [ 68.896803][ T5354] slab_free_after_rcu_debug+0x129/0x2a0 [ 68.899211][ T5354] rcu_core+0xca8/0x1770 [ 68.901147][ T5354] handle_softirqs+0x283/0x870 [ 68.903262][ T5354] __irq_exit_rcu+0xca/0x1f0 [ 68.905281][ T5354] irq_exit_rcu+0x9/0x30 [ 68.907097][ T5354] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 68.909622][ T5354] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 68.912255][ T5354] [ 68.913342][ T5354] Last potentially related work creation: [ 68.915619][ T5354] kasan_save_stack+0x3e/0x60 [ 68.917677][ T5354] kasan_record_aux_stack+0xbd/0xd0 [ 68.919947][ T5354] kmem_cache_free+0x2f6/0x400 [ 68.922052][ T5354] vms_complete_munmap_vmas+0x626/0x8a0 [ 68.924480][ T5354] mmap_region+0x11db/0x20c0 [ 68.926517][ T5354] do_mmap+0xc45/0x10d0 [ 68.928342][ T5354] vm_mmap_pgoff+0x2a6/0x4d0 [ 68.930508][ T5354] ksys_mmap_pgoff+0x51f/0x760 [ 68.932606][ T5354] do_syscall_64+0xfa/0x3b0 [ 68.934561][ T5354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.937141][ T5354] [ 68.938191][ T5354] The buggy address belongs to the object at ffff8880114bc8c0 [ 68.938191][ T5354] which belongs to the cache vm_area_struct of size 256 [ 68.944164][ T5354] The buggy address is located 88 bytes inside of [ 68.944164][ T5354] freed 256-byte region [ffff8880114bc8c0, ffff8880114bc9c0) [ 68.949661][ T5354] [ 68.950709][ T5354] The buggy address belongs to the physical page: [ 68.953267][ T5354] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x114bc [ 68.956966][ T5354] memcg:ffff888011a40e01 [ 68.958752][ T5354] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 68.961763][ T5354] page_type: f5(slab) [ 68.963510][ T5354] raw: 00fff00000000000 ffff888030413b40 dead000000000100 dead000000000122 [ 68.966877][ T5354] raw: 0000000000000000 00000000800c000c 00000000f5000000 ffff888011a40e01 [ 68.970206][ T5354] page dumped because: kasan: bad access detected [ 68.972695][ T5354] page_owner tracks the page as allocated [ 68.974866][ T5354] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5087, tgid 5087 (dhcpcd-run-hook), ts 43452186673, free_ts 43451168222 [ 68.982186][ T5354] post_alloc_hook+0x240/0x2a0 [ 68.984290][ T5354] get_page_from_freelist+0x21e4/0x22c0 [ 68.986809][ T5354] __alloc_frozen_pages_noprof+0x181/0x370 [ 68.989740][ T5354] alloc_pages_mpol+0x232/0x4a0 [ 68.992099][ T5354] allocate_slab+0x8a/0x370 [ 68.994119][ T5354] ___slab_alloc+0xbeb/0x1410 [ 68.996133][ T5354] kmem_cache_alloc_noprof+0x283/0x3c0 [ 68.998479][ T5354] vm_area_dup+0x2b/0x680 [ 69.000295][ T5354] __split_vma+0x1a9/0xa00 [ 69.002270][ T5354] vms_gather_munmap_vmas+0x2ea/0x12f0 [ 69.004603][ T5354] mmap_region+0x724/0x20c0 [ 69.006643][ T5354] do_mmap+0xc45/0x10d0 [ 69.008568][ T5354] vm_mmap_pgoff+0x2a6/0x4d0 [ 69.010720][ T5354] ksys_mmap_pgoff+0x51f/0x760 [ 69.013066][ T5354] do_syscall_64+0xfa/0x3b0 [ 69.015115][ T5354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.017752][ T5354] page last free pid 15 tgid 15 stack trace: [ 69.020406][ T5354] __free_frozen_pages+0xbc4/0xd30 [ 69.022689][ T5354] __tlb_remove_table+0x2d2/0x3b0 [ 69.025134][ T5354] tlb_remove_table_rcu+0x85/0x100 [ 69.027610][ T5354] rcu_core+0xca8/0x1770 [ 69.029401][ T5354] handle_softirqs+0x283/0x870 [ 69.031462][ T5354] run_ksoftirqd+0x9b/0x100 [ 69.033526][ T5354] smpboot_thread_fn+0x53f/0xa60 [ 69.035683][ T5354] kthread+0x70e/0x8a0 [ 69.037487][ T5354] ret_from_fork+0x3fc/0x770 [ 69.039461][ T5354] ret_from_fork_asm+0x1a/0x30 [ 69.041588][ T5354] [ 69.042669][ T5354] Memory state around the buggy address: [ 69.045603][ T5354] ffff8880114bc800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 69.049469][ T5354] ffff8880114bc880: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 69.053229][ T5354] >ffff8880114bc900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 69.056712][ T5354] ^ [ 69.058836][ T5354] ffff8880114bc980: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 69.062268][ T5354] ffff8880114bca00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 69.065689][ T5354] ================================================================== [ 69.094766][ T5350] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 69.099429][ T5350] (syz.0.0,5350,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 69.119527][ T5350] (syz.0.0,5350,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 69.124560][ T5350] (syz.0.0,5350,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff88805250c178, block: 8 [ 69.129872][ T5350] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 69.139798][ T5350] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 69.145261][ T5350] (syz.0.0,5350,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 69.148540][ T5350] (syz.0.0,5350,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 69.153024][ T5350] (syz.0.0,5350,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff88805250c178, block: 9 [ 69.158834][ T5350] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 69.167933][ T5350] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 69.172962][ T5350] (syz.0.0,5350,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 69.176163][ T5350] (syz.0.0,5350,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 69.179799][ T5350] (syz.0.0,5350,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff88805250c178, block: 10 [ 69.186861][ T5350] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 69.195844][ T5350] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 69.199988][ T5350] (syz.0.0,5350,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 69.203765][ T5350] (syz.0.0,5350,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 69.207629][ T5350] (syz.0.0,5350,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff88805250c178, block: 11 [ 69.214215][ T5350] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 69.223643][ T5350] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 69.228653][ T5350] (syz.0.0,5350,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 69.232693][ T5350] (syz.0.0,5350,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 69.236336][ T5350] (syz.0.0,5350,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff88805250c178, block: 12 [ 69.241627][ T5350] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 69.251704][ T5350] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 69.255783][ T5350] (syz.0.0,5350,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 69.259926][ T5350] (syz.0.0,5350,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 69.263992][ T5350] (syz.0.0,5350,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff88805250c178, block: 13 [ 69.268508][ T5350] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 69.279292][ T5350] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 69.284182][ T5350] (syz.0.0,5350,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 69.288555][ T5350] (syz.0.0,5350,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 69.294742][ T5350] (syz.0.0,5350,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff88805250c178, block: 14 [ 69.299122][ T5350] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) [ 69.307944][ T5350] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 69.313957][ T5350] (syz.0.0,5350,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 69.317368][ T5350] (syz.0.0,5350,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 69.321438][ T5350] (syz.0.0,5350,0):ocfs2_get_block:153 ERROR: get_blocks() failed, inode: 0xffff88805250c178, block: 15 [ 69.326530][ T5354] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 69.329886][ T5354] CPU: 0 UID: 0 PID: 5354 Comm: syz.0.0 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(full) [ 69.334997][ T5354] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.339885][ T5354] Call Trace: [ 69.341312][ T5354] [ 69.342522][ T5354] dump_stack_lvl+0x99/0x250 [ 69.344528][ T5354] ? __asan_memcpy+0x40/0x70 [ 69.346581][ T5354] ? __pfx_dump_stack_lvl+0x10/0x10 [ 69.348738][ T5354] ? __pfx__printk+0x10/0x10 [ 69.351055][ T5354] vpanic+0x281/0x750 [ 69.353108][ T5354] ? preempt_schedule+0xae/0xc0 [ 69.355283][ T5354] ? __pfx_vpanic+0x10/0x10 [ 69.357406][ T5354] ? preempt_schedule_common+0x83/0xd0 [ 69.359695][ T5354] ? preempt_schedule+0xae/0xc0 [ 69.361753][ T5354] ? __pfx_preempt_schedule+0x10/0x10 [ 69.364050][ T5354] panic+0xb9/0xc0 [ 69.365957][ T5354] ? __pfx_panic+0x10/0x10 [ 69.368096][ T5354] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 69.370905][ T5354] ? ocfs2_fault+0xd3/0x3f0 [ 69.372921][ T5354] check_panic_on_warn+0x89/0xb0 [ 69.375034][ T5354] ? ocfs2_fault+0xd3/0x3f0 [ 69.377078][ T5354] end_report+0x78/0x160 [ 69.379047][ T5354] kasan_report+0x129/0x150 [ 69.380963][ T5354] ? ocfs2_fault+0xd3/0x3f0 [ 69.382911][ T5354] ocfs2_fault+0xd3/0x3f0 [ 69.384887][ T5354] ? __pfx_ocfs2_fault+0x10/0x10 [ 69.387110][ T5354] __do_fault+0x138/0x390 [ 69.388957][ T5354] __handle_mm_fault+0x3611/0x5440 [ 69.391178][ T5354] ? __pfx___handle_mm_fault+0x10/0x10 [ 69.393558][ T5354] ? follow_page_pte+0x7ef/0x13e0 [ 69.395701][ T5354] handle_mm_fault+0x40a/0x8e0 [ 69.398008][ T5354] __get_user_pages+0x1699/0x2ce0 [ 69.400547][ T5354] populate_vma_page_range+0x29f/0x3a0 [ 69.403693][ T5354] ? __pfx_populate_vma_page_range+0x10/0x10 [ 69.406897][ T5354] ? userfaultfd_unmap_complete+0x278/0x2d0 [ 69.409510][ T5354] ? down_read+0x1ad/0x2e0 [ 69.411276][ T5354] __mm_populate+0x24c/0x380 [ 69.413206][ T5354] ? __pfx___mm_populate+0x10/0x10 [ 69.415345][ T5354] ? up_write+0x1c4/0x420 [ 69.417390][ T5354] vm_mmap_pgoff+0x387/0x4d0 [ 69.419680][ T5354] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 69.422363][ T5354] ? __fget_files+0x2a/0x420 [ 69.424400][ T5354] ? __fget_files+0x3a0/0x420 [ 69.426493][ T5354] ? __fget_files+0x2a/0x420 [ 69.428614][ T5354] ksys_mmap_pgoff+0x51f/0x760 [ 69.430813][ T5354] do_syscall_64+0xfa/0x3b0 [ 69.432917][ T5354] ? lockdep_hardirqs_on+0x9c/0x150 [ 69.435337][ T5354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.438094][ T5354] ? clear_bhb_loop+0x60/0xb0 [ 69.440382][ T5354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.443466][ T5354] RIP: 0033:0x7f85f6d8ebe9 [ 69.445535][ T5354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.453854][ T5354] RSP: 002b:00007f85f7b9b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 69.457522][ T5354] RAX: ffffffffffffffda RBX: 00007f85f6fb6180 RCX: 00007f85f6d8ebe9 [ 69.461204][ T5354] RDX: 00000000027ffff7 RSI: 0000000000600000 RDI: 0000200000000000 [ 69.465196][ T5354] RBP: 00007f85f6e11e19 R08: 0000000000000004 R09: 0000000000000000 [ 69.469008][ T5354] R10: 0000000004012011 R11: 0000000000000246 R12: 0000000000000000 [ 69.472457][ T5354] R13: 00007f85f6fb6218 R14: 00007f85f6fb6180 R15: 00007ffc0fd3dab8 [ 69.475825][ T5354] [ 69.477482][ T5354] Kernel Offset: disabled [ 69.479434][ T5354] Rebooting in 86400 seconds..