program: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file5\x00', 0x100, 0x7) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) (async) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) fcntl$setsig(r1, 0xa, 0x21) (async) fcntl$setsig(r1, 0xa, 0x21) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x6b142, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file5\x00', 0x2) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file5\x00', 0x2) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x5, "10af2ebcf100095ac9e45d166a88b9011fa1c711be4ac354e8c7300ed649391d", 0xffffffffffffffff}) dup2(r0, r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) (async) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x8) (async) listen(r0, 0x8) connect$inet(r3, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) accept$inet(r0, 0x0, 0x0) (async) accept$inet(r0, 0x0, 0x0) syz_clone(0x840400, &(0x7f0000000140)="fa79bc4eb00c73e67b8c621d66f25a0c2f949b618e2c2225eaeff8f124056d520f951ea7e31031dd36ea683470804e80de673b3589476f8890da6e97a1672db8cfb1b5b100fe13c778d3284c8b3f5046c2d0363ec834829a0d070cb5a9b7e0dc54a50d55666c35af160e5d40b20137919e130e8ac1dfbc76b5391c7c4b07d4ba5d5410e42e8d89", 0x87, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000380)="0aff316e96d42324bc40777d57d1d0248da04d9433c2ec4350e53b5ed1c4dff6bb589c61a3c7737e18d4ff5170427d3f59f44ea78b7dbe6c496dc55ef6ea8224594f8cb1f4e532158e470b2de6e685f6dfd31f631e38162a49136359bc669bb0b9711718da299cb7990a") (async) syz_clone(0x840400, &(0x7f0000000140)="fa79bc4eb00c73e67b8c621d66f25a0c2f949b618e2c2225eaeff8f124056d520f951ea7e31031dd36ea683470804e80de673b3589476f8890da6e97a1672db8cfb1b5b100fe13c778d3284c8b3f5046c2d0363ec834829a0d070cb5a9b7e0dc54a50d55666c35af160e5d40b20137919e130e8ac1dfbc76b5391c7c4b07d4ba5d5410e42e8d89", 0x87, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000380)="0aff316e96d42324bc40777d57d1d0248da04d9433c2ec4350e53b5ed1c4dff6bb589c61a3c7737e18d4ff5170427d3f59f44ea78b7dbe6c496dc55ef6ea8224594f8cb1f4e532158e470b2de6e685f6dfd31f631e38162a49136359bc669bb0b9711718da299cb7990a") bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x6, &(0x7f00000004c0)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0x1400e, &(0x7f0000000540)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x452, &(0x7f00000005c0)="$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") syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x18418, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRES8], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x40c040, &(0x7f0000000080)={[{@data_journal}]}, 0x3e, 0x517, &(0x7f00000013c0)="$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") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000100)='./file1\x00', 0x20fdfffffe) ioprio_get$pid(0x1, r4) (async) ioprio_get$pid(0x1, r4) syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x0) (async) r5 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r5, 0x4c02, &(0x7f0000000980)={0x0, {}, 0x0, {}, 0x4, 0x4, 0xffffffff, 0x18, "22b7435b0a43852dbc3a9ada34cc97af10fd4faea15748327e53096c2f359e9ba763b84a59c4a7ace74d9389515d10b74d75386676f1658d00", "0410b1617b6268917d94b72c2e9e13be3626fce20000f5da74161ccef2c5cf5e", [0xffffffffffffffff, 0xffffffffffffffff]}) truncate(&(0x7f0000000240)='./file1\x00', 0x3e1) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82) (async) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000040)={0x8, 0x40000cca8, 0x4010}) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) [ 94.486321][ T5282] Bluetooth: hci0: command tx timeout [ 94.756672][ T5319] loop0: detected capacity change from 0 to 512 [ 94.876486][ T5319] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 94.876501][ T5319] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 95.068050][ T5319] EXT4-fs (loop0): 1 truncate cleaned up [ 95.127910][ T5319] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.190291][ T5318] loop0: detected capacity change from 512 to 511 [ 95.240953][ T5318] ================================================================== [ 95.240968][ T5318] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x92b/0x1ed0 [ 95.241061][ T5318] Read of size 18446744073709551600 at addr ffff888052f9a2b8 by task syz.0.0/5318 [ 95.241072][ T5318] [ 95.241079][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 95.241091][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.241109][ T5318] Call Trace: [ 95.241114][ T5318] [ 95.241120][ T5318] dump_stack_lvl+0xe8/0x150 [ 95.241137][ T5318] print_address_description+0x55/0x1e0 [ 95.241152][ T5318] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 95.241181][ T5318] print_report+0x58/0x70 [ 95.241190][ T5318] kasan_report+0x117/0x150 [ 95.241198][ T5318] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 95.241211][ T5318] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 95.241224][ T5318] kasan_check_range+0x264/0x2c0 [ 95.241239][ T5318] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 95.241252][ T5318] __asan_memmove+0x29/0x70 [ 95.241267][ T5318] ext4_xattr_set_entry+0x92b/0x1ed0 [ 95.241287][ T5318] ext4_xattr_ibody_set+0x262/0x710 [ 95.241303][ T5318] ext4_destroy_inline_data_nolock+0x23a/0x5f0 [ 95.241322][ T5318] ? __pfx_ext4_destroy_inline_data_nolock+0x10/0x10 [ 95.241342][ T5318] ? __asan_memcpy+0x40/0x70 [ 95.241358][ T5318] ? ext4_read_inline_data+0x100/0x2b0 [ 95.241372][ T5318] ext4_convert_inline_data_nolock+0x208/0x980 [ 95.241389][ T5318] ? __pfx_ext4_convert_inline_data_nolock+0x10/0x10 [ 95.241405][ T5318] ? down_write+0x16b/0x200 [ 95.241467][ T5318] ext4_convert_inline_data+0x484/0x5c0 [ 95.241478][ T5318] ? __pfx_ext4_convert_inline_data+0x10/0x10 [ 95.241489][ T5318] ? setattr_prepare+0x228/0xb50 [ 95.241500][ T5318] ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0 [ 95.241512][ T5318] ? seqcount_lockdep_reader_access+0xea/0x100 [ 95.241524][ T5318] ext4_setattr+0xef1/0x1df0 [ 95.241538][ T5318] ? current_time+0x22f/0x380 [ 95.241551][ T5318] ? evm_inode_setattr+0x1ba/0x7c0 [ 95.241566][ T5318] ? try_break_deleg+0x5b/0x180 [ 95.241576][ T5318] ? __pfx_ext4_setattr+0x10/0x10 [ 95.241589][ T5318] notify_change+0xbba/0xea0 [ 95.241601][ T5318] do_truncate+0x1c2/0x250 [ 95.241616][ T5318] ? __pfx_do_truncate+0x10/0x10 [ 95.241629][ T5318] ? apparmor_path_truncate+0x230/0x2c0 [ 95.241645][ T5318] ? ima_iint_find+0x53/0x110 [ 95.241657][ T5318] ? ima_path_truncate+0x13c/0x190 [ 95.241671][ T5318] vfs_truncate+0x4b4/0x540 [ 95.241685][ T5318] ? __pfx_vfs_truncate+0x10/0x10 [ 95.241699][ T5318] ? do_getname+0x151/0x250 [ 95.241711][ T5318] ksys_truncate+0xf3/0x1c0 [ 95.241724][ T5318] ? __pfx_ksys_truncate+0x10/0x10 [ 95.241741][ T5318] __x64_sys_truncate+0x5b/0x70 [ 95.241755][ T5318] do_syscall_64+0x166/0x520 [ 95.241768][ T5318] ? trace_irq_disable+0x3b/0x140 [ 95.241779][ T5318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.241790][ T5318] ? clear_bhb_loop+0x70/0xc0 [ 95.241801][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.241812][ T5318] RIP: 0033:0x7f569119e159 [ 95.241822][ T5318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.241831][ T5318] RSP: 002b:00007f5691faffe8 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 95.241845][ T5318] RAX: ffffffffffffffda RBX: 00007f5691425fa0 RCX: 00007f569119e159 [ 95.241853][ T5318] RDX: 0000000000000000 RSI: 00000000000003e1 RDI: 0000200000000240 [ 95.241860][ T5318] RBP: 00007f569123506b R08: 0000000000000000 R09: 0000000000000000 [ 95.241866][ T5318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.241872][ T5318] R13: 00007f5691426038 R14: 00007f5691425fa0 R15: 00007ffe027d3428 [ 95.241883][ T5318] [ 95.241888][ T5318] [ 95.241891][ T5318] The buggy address belongs to the physical page: [ 95.241896][ T5318] page: refcount:2 mapcount:0 mapping:ffff88801d025940 index:0x2 pfn:0x52f9a [ 95.241907][ T5318] memcg:ffff888043e65400 [ 95.241913][ T5318] aops:def_blk_aops ino:700000 dentry name(?):"" [ 95.241993][ T5318] flags: 0x4fff58000004224(referenced|lru|workingset|private|node=1|zone=1|lastcpupid=0x7ff) [ 95.242009][ T5318] raw: 04fff58000004224 ffffea00010ce548 ffff888030448b60 ffff88801d025940 [ 95.242018][ T5318] raw: 0000000000000002 ffff88804414c1c0 00000002ffffffff ffff888043e65400 [ 95.242024][ T5318] page dumped because: kasan: bad access detected [ 95.242029][ T5318] page_owner tracks the page as allocated [ 95.242034][ T5318] page last allocated via order 0, migratetype Movable, gfp_mask 0x148c48(GFP_NOFS|__GFP_MOVABLE|__GFP_NOFAIL|__GFP_COMP|__GFP_HARDWALL), pid 5318, tgid 5317 (syz.0.0), ts 95212138430 [ 95.242050][ T5318] post_alloc_hook+0x1f9/0x250 [ 95.242064][ T5318] get_page_from_freelist+0x2209/0x2280 [ 95.242078][ T5318] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 95.242092][ T5318] alloc_pages_mpol+0x21e/0x390 [ 95.242103][ T5318] alloc_pages_noprof+0xb1/0x2b0 [ 95.242113][ T5318] folio_alloc_noprof+0x1e/0x30 [ 95.242123][ T5318] filemap_alloc_folio_noprof+0x111/0x460 [ 95.242133][ T5318] __filemap_get_folio_mpol+0x402/0x1000 [ 95.242144][ T5318] bdev_getblk+0x1f4/0x6e0 [ 95.242152][ T5318] __ext4_get_inode_loc+0x56c/0xf40 [ 95.242163][ T5318] ext4_get_inode_loc+0x81/0xf0 [ 95.242174][ T5318] ext4_xattr_ibody_get+0x113/0x4b0 [ 95.242186][ T5318] ext4_xattr_get+0x121/0x690 [ 95.242197][ T5318] __vfs_getxattr+0x412/0x440 [ 95.242207][ T5318] cap_inode_need_killpriv+0x45/0x60 [ 95.242222][ T5318] security_inode_need_killpriv+0x85/0x240 [ 95.242235][ T5318] page_owner free stack trace missing [ 95.242239][ T5318] [ 95.242241][ T5318] Memory state around the buggy address: [ 95.242247][ T5318] ffff888052f9a180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 95.242254][ T5318] ffff888052f9a200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 95.242261][ T5318] >ffff888052f9a280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 95.242266][ T5318] ^ [ 95.242271][ T5318] ffff888052f9a300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 95.242277][ T5318] ffff888052f9a380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 95.242282][ T5318] ================================================================== [ 95.398779][ T5319] syz.0.0: attempt to access beyond end of device [ 95.398779][ T5319] loop0: rw=8390659, sector=80, nr_sectors = 432 limit=511 [ 95.588047][ T5318] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 95.591117][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 95.595585][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.600016][ T5318] Call Trace: [ 95.601531][ T5318] [ 95.602813][ T5318] vpanic+0x56d/0xa60 [ 95.604266][ T5318] ? __pfx_vpanic+0x10/0x10 [ 95.605899][ T5318] panic+0xc5/0xd0 [ 95.607263][ T5318] ? __pfx_panic+0x10/0x10 [ 95.608864][ T5318] ? preempt_schedule_thunk+0x16/0x40 [ 95.610897][ T5318] ? preempt_schedule_thunk+0x16/0x40 [ 95.613006][ T5318] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 95.615470][ T5318] check_panic_on_warn+0x89/0xb0 [ 95.617690][ T5318] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 95.619977][ T5318] end_report+0x73/0x170 [ 95.621784][ T5318] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 95.624685][ T5318] kasan_report+0x128/0x150 [ 95.627190][ T5318] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 95.630217][ T5318] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 95.633227][ T5318] kasan_check_range+0x264/0x2c0 [ 95.635949][ T5318] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 95.638673][ T5318] __asan_memmove+0x29/0x70 [ 95.640729][ T5318] ext4_xattr_set_entry+0x92b/0x1ed0 [ 95.643068][ T5318] ext4_xattr_ibody_set+0x262/0x710 [ 95.645302][ T5318] ext4_destroy_inline_data_nolock+0x23a/0x5f0 [ 95.647873][ T5318] ? __pfx_ext4_destroy_inline_data_nolock+0x10/0x10 [ 95.650628][ T5318] ? __asan_memcpy+0x40/0x70 [ 95.652583][ T5318] ? ext4_read_inline_data+0x100/0x2b0 [ 95.654870][ T5318] ext4_convert_inline_data_nolock+0x208/0x980 [ 95.657551][ T5318] ? __pfx_ext4_convert_inline_data_nolock+0x10/0x10 [ 95.660453][ T5318] ? down_write+0x16b/0x200 [ 95.662467][ T5318] ext4_convert_inline_data+0x484/0x5c0 [ 95.664963][ T5318] ? __pfx_ext4_convert_inline_data+0x10/0x10 [ 95.667694][ T5318] ? setattr_prepare+0x228/0xb50 [ 95.669910][ T5318] ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0 [ 95.672647][ T5318] ? seqcount_lockdep_reader_access+0xea/0x100 [ 95.675475][ T5318] ext4_setattr+0xef1/0x1df0 [ 95.677516][ T5318] ? current_time+0x22f/0x380 [ 95.679600][ T5318] ? evm_inode_setattr+0x1ba/0x7c0 [ 95.681932][ T5318] ? try_break_deleg+0x5b/0x180 [ 95.684089][ T5318] ? __pfx_ext4_setattr+0x10/0x10 [ 95.686257][ T5318] notify_change+0xbba/0xea0 [ 95.688497][ T5318] do_truncate+0x1c2/0x250 [ 95.690910][ T5318] ? __pfx_do_truncate+0x10/0x10 [ 95.693668][ T5318] ? apparmor_path_truncate+0x230/0x2c0 [ 95.696450][ T5318] ? ima_iint_find+0x53/0x110 [ 95.698795][ T5318] ? ima_path_truncate+0x13c/0x190 [ 95.701333][ T5318] vfs_truncate+0x4b4/0x540 [ 95.703545][ T5318] ? __pfx_vfs_truncate+0x10/0x10 [ 95.705589][ T5318] ? do_getname+0x151/0x250 [ 95.707488][ T5318] ksys_truncate+0xf3/0x1c0 [ 95.709331][ T5318] ? __pfx_ksys_truncate+0x10/0x10 [ 95.711764][ T5318] __x64_sys_truncate+0x5b/0x70 [ 95.714506][ T5318] do_syscall_64+0x166/0x520 [ 95.716923][ T5318] ? trace_irq_disable+0x3b/0x140 [ 95.719515][ T5318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.722584][ T5318] ? clear_bhb_loop+0x70/0xc0 [ 95.724899][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.728103][ T5318] RIP: 0033:0x7f569119e159 [ 95.730567][ T5318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.739644][ T5318] RSP: 002b:00007f5691faffe8 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 95.743013][ T5318] RAX: ffffffffffffffda RBX: 00007f5691425fa0 RCX: 00007f569119e159 [ 95.746322][ T5318] RDX: 0000000000000000 RSI: 00000000000003e1 RDI: 0000200000000240 [ 95.749765][ T5318] RBP: 00007f569123506b R08: 0000000000000000 R09: 0000000000000000 [ 95.753217][ T5318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.756674][ T5318] R13: 00007f5691426038 R14: 00007f5691425fa0 R15: 00007ffe027d3428 [ 95.760053][ T5318] [ 95.761800][ T5318] Kernel Offset: disabled [ 95.763818][ T5318] Rebooting in 86400 seconds..