program: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r1 = syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f00000002c0)={[{@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@norecovery}]}, 0x1, 0x7b9, &(0x7f0000000f80)="$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") r2 = openat$incfs(r1, &(0x7f0000000200)='.pending_reads\x00', 0x589c00, 0x0) (async) openat(r1, &(0x7f00000001c0)='./file1\x00', 0x7c1042, 0x1c2) io_setup(0x1, &(0x7f00000004c0)=0x0) creat(&(0x7f0000000380)='./bus\x00', 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYRESOCT=r2], 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x20000001) (async) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x9, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x10d) io_submit(r3, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000140)='i', 0xa800, 0x1400}]) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) [ 94.448207][ T5288] Bluetooth: hci0: command tx timeout [ 94.599099][ T5326] loop0: detected capacity change from 0 to 2048 [ 94.780003][ T5326] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.794901][ T5335] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 94.816289][ T5336] netlink: 20 bytes leftover after parsing attributes in process `syz.0.0'. [ 94.842948][ T5325] loop0: detected capacity change from 2048 to 64 [ 94.866354][ T5326] ================================================================== [ 94.866366][ T5326] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x92b/0x1ed0 [ 94.867868][ T5326] Read of size 18446744073709551600 at addr ffff88804d63eeb8 by task syz.0.0/5326 [ 94.867878][ T5326] [ 94.867885][ T5326] CPU: 0 UID: 0 PID: 5326 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 94.867897][ T5326] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.867904][ T5326] Call Trace: [ 94.868201][ T5326] [ 94.868207][ T5326] dump_stack_lvl+0xe8/0x150 [ 94.868224][ T5326] print_address_description+0x55/0x1e0 [ 94.868238][ T5326] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 94.868250][ T5326] print_report+0x58/0x70 [ 94.868263][ T5326] kasan_report+0x117/0x150 [ 94.868275][ T5326] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 94.868289][ T5326] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 94.868305][ T5326] kasan_check_range+0x264/0x2c0 [ 94.868316][ T5326] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 94.868333][ T5326] __asan_memmove+0x29/0x70 [ 94.868347][ T5326] ext4_xattr_set_entry+0x92b/0x1ed0 [ 94.868365][ T5326] ext4_xattr_ibody_set+0x262/0x710 [ 94.868379][ T5326] ext4_destroy_inline_data_nolock+0x23a/0x5f0 [ 94.868398][ T5326] ? __pfx_ext4_destroy_inline_data_nolock+0x10/0x10 [ 94.868413][ T5326] ? lock_acquire+0x232/0x350 [ 94.868425][ T5326] ? down_write+0x16b/0x200 [ 94.868501][ T5326] ext4_destroy_inline_data+0x83/0xe0 [ 94.868516][ T5326] ext4_do_writepages+0x50a/0x4770 [ 94.868536][ T5326] ? __lock_acquire+0x747/0x2de0 [ 94.868546][ T5326] ? look_up_lock_class+0x57/0x110 [ 94.868569][ T5326] ? register_lock_class+0x31/0x2e0 [ 94.868579][ T5326] ? __pfx_ext4_do_writepages+0x10/0x10 [ 94.868590][ T5326] ? __lock_acquire+0x747/0x2de0 [ 94.868602][ T5326] ? lock_acquire+0x115/0x350 [ 94.868612][ T5326] ? count_memcg_event_mm+0x21/0x260 [ 94.868631][ T5326] ? lock_acquire+0x115/0x350 [ 94.868645][ T5326] ext4_writepages+0x241/0x3b0 [ 94.868659][ T5326] ? __lock_acquire+0x747/0x2de0 [ 94.868670][ T5326] ? __pfx_ext4_writepages+0x10/0x10 [ 94.868687][ T5326] ? do_raw_spin_unlock+0x4d/0x200 [ 94.868701][ T5326] ? __pfx_ext4_writepages+0x10/0x10 [ 94.868714][ T5326] do_writepages+0x338/0x560 [ 94.868732][ T5326] ? do_raw_spin_unlock+0x4d/0x200 [ 94.868746][ T5326] file_write_and_wait_range+0x36e/0x440 [ 94.868759][ T5326] ? __pfx_file_write_and_wait_range+0x10/0x10 [ 94.868780][ T5326] ext4_sync_file+0x252/0xa40 [ 94.868794][ T5326] ext4_buffered_write_iter+0x2d0/0x380 [ 94.868807][ T5326] ext4_file_write_iter+0xae4/0x1cd0 [ 94.868819][ T5326] ? io_submit_one+0x134/0x13d0 [ 94.868834][ T5326] ? kasan_save_track+0x4f/0x80 [ 94.868849][ T5326] ? kasan_save_track+0x3e/0x80 [ 94.868864][ T5326] ? lock_acquire+0x115/0x350 [ 94.868874][ T5326] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 94.868886][ T5326] ? aio_write+0x54a/0x870 [ 94.868896][ T5326] aio_write+0x5d0/0x870 [ 94.868906][ T5326] ? __pfx_aio_write+0x10/0x10 [ 94.868924][ T5326] io_submit_one+0x798/0x13d0 [ 94.868940][ T5326] ? lockdep_hardirqs_on+0x7b/0x110 [ 94.868950][ T5326] ? irqentry_exit+0x218/0x910 [ 94.868960][ T5326] ? __pfx_io_submit_one+0x10/0x10 [ 94.868974][ T5326] ? lock_acquire+0x115/0x350 [ 94.868988][ T5326] ? __might_fault+0xaf/0x130 [ 94.869000][ T5326] __se_sys_io_submit+0x195/0x340 [ 94.869015][ T5326] ? __pfx___se_sys_io_submit+0x10/0x10 [ 94.869031][ T5326] do_syscall_64+0x166/0x520 [ 94.869042][ T5326] ? trace_irq_disable+0x3b/0x140 [ 94.869052][ T5326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.869063][ T5326] ? clear_bhb_loop+0x70/0xc0 [ 94.869075][ T5326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.869084][ T5326] RIP: 0033:0x7f2df0b9e159 [ 94.869095][ T5326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.869104][ T5326] RSP: 002b:00007f2df19e8fe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 94.869117][ T5326] RAX: ffffffffffffffda RBX: 00007f2df0e26090 RCX: 00007f2df0b9e159 [ 94.869125][ T5326] RDX: 00002000000002c0 RSI: 0000000000000001 RDI: 00007f2df19c8000 [ 94.869132][ T5326] RBP: 00007f2df0c3503b R08: 0000000000000000 R09: 0000000000000000 [ 94.869139][ T5326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.869145][ T5326] R13: 00007f2df0e26128 R14: 00007f2df0e26090 R15: 00007ffe73b9bdb8 [ 94.869157][ T5326] [ 94.869160][ T5326] [ 94.869163][ T5326] The buggy address belongs to the physical page: [ 94.869168][ T5326] page: refcount:2 mapcount:0 mapping:ffff88801d025940 index:0x2 pfn:0x4d63e [ 94.869190][ T5326] memcg:ffff8880440fc880 [ 94.869196][ T5326] aops:def_blk_aops ino:700000 dentry name(?):"" [ 94.869268][ T5326] flags: 0x4fff20000004020(lru|private|node=1|zone=1|lastcpupid=0x7ff) [ 94.869293][ T5326] raw: 04fff20000004020 ffff888030448ac0 ffffea000135d148 ffff88801d025940 [ 94.869302][ T5326] raw: 0000000000000002 ffff88801d09e460 00000002ffffffff ffff8880440fc880 [ 94.869307][ T5326] page dumped because: kasan: bad access detected [ 94.869312][ T5326] page_owner tracks the page as allocated [ 94.869316][ T5326] page last allocated via order 0, migratetype Movable, gfp_mask 0x148c48(GFP_NOFS|__GFP_MOVABLE|__GFP_NOFAIL|__GFP_COMP|__GFP_HARDWALL), pid 5326, tgid 5324 (syz.0.0), ts 94827900804 [ 94.869332][ T5326] post_alloc_hook+0x1f9/0x250 [ 94.869345][ T5326] get_page_from_freelist+0x2209/0x2280 [ 94.869359][ T5326] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 94.869373][ T5326] alloc_pages_mpol+0x21e/0x390 [ 94.869383][ T5326] alloc_pages_noprof+0xb1/0x2b0 [ 94.869393][ T5326] folio_alloc_noprof+0x1e/0x30 [ 94.869402][ T5326] filemap_alloc_folio_noprof+0x111/0x460 [ 94.869411][ T5326] __filemap_get_folio_mpol+0x402/0x1000 [ 94.869421][ T5326] bdev_getblk+0x1f4/0x6e0 [ 94.869430][ T5326] __ext4_get_inode_loc+0x56c/0xf40 [ 94.869441][ T5326] ext4_get_inode_loc+0x81/0xf0 [ 94.869451][ T5326] ext4_destroy_inline_data_nolock+0x140/0x5f0 [ 94.869465][ T5326] ext4_destroy_inline_data+0x83/0xe0 [ 94.869478][ T5326] ext4_do_writepages+0x50a/0x4770 [ 94.869488][ T5326] ext4_writepages+0x241/0x3b0 [ 94.869501][ T5326] do_writepages+0x338/0x560 [ 94.869513][ T5326] page last free pid 5325 tgid 5324 ts 94826948209 stack trace: [ 94.869520][ T5326] free_unref_folios+0xdc2/0x14e0 [ 94.869531][ T5326] folios_put_refs+0x9e9/0xb30 [ 94.869543][ T5326] mapping_try_invalidate+0x3b7/0x4b0 [ 94.869556][ T5326] loop_set_status+0x25d/0xd50 [ 94.869569][ T5326] lo_ioctl+0xc51/0x2010 [ 94.869579][ T5326] blkdev_ioctl+0x5e3/0x740 [ 94.869589][ T5326] __se_sys_ioctl+0xfc/0x170 [ 94.869601][ T5326] do_syscall_64+0x166/0x520 [ 94.869610][ T5326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.869624][ T5326] [ 94.869627][ T5326] Memory state around the buggy address: [ 94.869633][ T5326] ffff88804d63ed80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 94.869640][ T5326] ffff88804d63ee00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 94.869647][ T5326] >ffff88804d63ee80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 94.869652][ T5326] ^ [ 94.869657][ T5326] ffff88804d63ef00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 94.869663][ T5326] ffff88804d63ef80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 94.869668][ T5326] ================================================================== [ 94.869778][ T5326] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 95.179559][ T5326] CPU: 0 UID: 0 PID: 5326 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 95.182902][ T5326] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.186979][ T5326] Call Trace: [ 95.188487][ T5326] [ 95.189699][ T5326] vpanic+0x56d/0xa60 [ 95.191294][ T5326] ? __pfx_vpanic+0x10/0x10 [ 95.193207][ T5326] panic+0xc5/0xd0 [ 95.194849][ T5326] ? __pfx_panic+0x10/0x10 [ 95.196731][ T5326] ? preempt_schedule_thunk+0x16/0x40 [ 95.198975][ T5326] ? preempt_schedule_thunk+0x16/0x40 [ 95.201099][ T5326] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 95.203459][ T5326] check_panic_on_warn+0x89/0xb0 [ 95.205695][ T5326] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 95.208158][ T5326] end_report+0x73/0x170 [ 95.210131][ T5326] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 95.212559][ T5326] kasan_report+0x128/0x150 [ 95.214716][ T5326] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 95.217071][ T5326] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 95.219500][ T5326] kasan_check_range+0x264/0x2c0 [ 95.221506][ T5326] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 95.223610][ T5326] __asan_memmove+0x29/0x70 [ 95.225513][ T5326] ext4_xattr_set_entry+0x92b/0x1ed0 [ 95.227516][ T5326] ext4_xattr_ibody_set+0x262/0x710 [ 95.229752][ T5326] ext4_destroy_inline_data_nolock+0x23a/0x5f0 [ 95.232273][ T5326] ? __pfx_ext4_destroy_inline_data_nolock+0x10/0x10 [ 95.234920][ T5326] ? lock_acquire+0x232/0x350 [ 95.236791][ T5326] ? down_write+0x16b/0x200 [ 95.238770][ T5326] ext4_destroy_inline_data+0x83/0xe0 [ 95.241166][ T5326] ext4_do_writepages+0x50a/0x4770 [ 95.243410][ T5326] ? __lock_acquire+0x747/0x2de0 [ 95.245479][ T5326] ? look_up_lock_class+0x57/0x110 [ 95.247640][ T5326] ? register_lock_class+0x31/0x2e0 [ 95.249884][ T5326] ? __pfx_ext4_do_writepages+0x10/0x10 [ 95.252200][ T5326] ? __lock_acquire+0x747/0x2de0 [ 95.254382][ T5326] ? lock_acquire+0x115/0x350 [ 95.256355][ T5326] ? count_memcg_event_mm+0x21/0x260 [ 95.258584][ T5326] ? lock_acquire+0x115/0x350 [ 95.260610][ T5326] ext4_writepages+0x241/0x3b0 [ 95.262632][ T5326] ? __lock_acquire+0x747/0x2de0 [ 95.264694][ T5326] ? __pfx_ext4_writepages+0x10/0x10 [ 95.267008][ T5326] ? do_raw_spin_unlock+0x4d/0x200 [ 95.269220][ T5326] ? __pfx_ext4_writepages+0x10/0x10 [ 95.271453][ T5326] do_writepages+0x338/0x560 [ 95.273449][ T5326] ? do_raw_spin_unlock+0x4d/0x200 [ 95.275659][ T5326] file_write_and_wait_range+0x36e/0x440 [ 95.277986][ T5326] ? __pfx_file_write_and_wait_range+0x10/0x10 [ 95.280357][ T5326] ext4_sync_file+0x252/0xa40 [ 95.282220][ T5326] ext4_buffered_write_iter+0x2d0/0x380 [ 95.284402][ T5326] ext4_file_write_iter+0xae4/0x1cd0 [ 95.286406][ T5326] ? io_submit_one+0x134/0x13d0 [ 95.288370][ T5326] ? kasan_save_track+0x4f/0x80 [ 95.290441][ T5326] ? kasan_save_track+0x3e/0x80 [ 95.292520][ T5326] ? lock_acquire+0x115/0x350 [ 95.294602][ T5326] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 95.296983][ T5326] ? aio_write+0x54a/0x870 [ 95.298866][ T5326] aio_write+0x5d0/0x870 [ 95.300720][ T5326] ? __pfx_aio_write+0x10/0x10 [ 95.302832][ T5326] io_submit_one+0x798/0x13d0 [ 95.304899][ T5326] ? lockdep_hardirqs_on+0x7b/0x110 [ 95.307233][ T5326] ? irqentry_exit+0x218/0x910 [ 95.309356][ T5326] ? __pfx_io_submit_one+0x10/0x10 [ 95.311671][ T5326] ? lock_acquire+0x115/0x350 [ 95.313828][ T5326] ? __might_fault+0xaf/0x130 [ 95.316037][ T5326] __se_sys_io_submit+0x195/0x340 [ 95.318423][ T5326] ? __pfx___se_sys_io_submit+0x10/0x10 [ 95.321395][ T5326] do_syscall_64+0x166/0x520 [ 95.324008][ T5326] ? trace_irq_disable+0x3b/0x140 [ 95.326947][ T5326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.330472][ T5326] ? clear_bhb_loop+0x70/0xc0 [ 95.333052][ T5326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.336311][ T5326] RIP: 0033:0x7f2df0b9e159 [ 95.338532][ T5326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.347800][ T5326] RSP: 002b:00007f2df19e8fe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 95.352128][ T5326] RAX: ffffffffffffffda RBX: 00007f2df0e26090 RCX: 00007f2df0b9e159 [ 95.355679][ T5326] RDX: 00002000000002c0 RSI: 0000000000000001 RDI: 00007f2df19c8000 [ 95.359977][ T5326] RBP: 00007f2df0c3503b R08: 0000000000000000 R09: 0000000000000000 [ 95.364300][ T5326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.368761][ T5326] R13: 00007f2df0e26128 R14: 00007f2df0e26090 R15: 00007ffe73b9bdb8 [ 95.373381][ T5326] [ 95.375761][ T5326] Kernel Offset: disabled [ 95.378221][ T5326] Rebooting in 86400 seconds..