program: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000300), 0x3, 0x42f, &(0x7f00000017c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x10108c0, &(0x7f0000002080)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95\x00\x00ni_xlate=0,showexec,shortname=winnt,shortname=win95,nonumtairodir,nonumtail=0,shortname=mixed,nfs=nostale_ro,utf8=0,\x00', @ANYRESHEX, @ANYRES64=0x0, @ANYRES8, @ANYRES16], 0x1, 0x26c, &(0x7f0000000340)="$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") r0 = creat(&(0x7f0000000240)='./file1\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x200, &(0x7f0000000140)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x1c1) syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="73686f727461642c756e64656c6574652c73657373696f6e3d30303030000800003030303030303030303139302c6d6f64653d30303030303030303030303030303030303030303030352c726f6f746469723d30303030303030303030303030303030303030352c646d6f64653d30303030303030303030303030303030303030303030362c696f636861727365743d6370313235312c696f636861727365743d6b6f69382d722c6e6f7672732c0084f5b23d82aacbefd1de1daab7394a9b4696461da9ab46f2d71c895d8c", @ANYRESOCT], 0x9, 0xc41, &(0x7f00000006c0)="$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") setrlimit(0x1, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000001380)='./file1\x00', 0x20fdfffffe) r3 = syz_open_dev$loop(&(0x7f00000013c0), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000001400)={0x0, {}, 0x0, {}, 0x4, 0x4, 0xffffffff, 0x0, "22b7435b0a43852dbc3a9ada34cc97af10fd4faea15748328c53096c2f359e9ba743d30b59c491a7b3e74d9389515d1002374a1d61471af78d462ea537e61800", "0410b1617b6268917d94b72c2e9e13be3626fce20000f5da74161ccef2c5cf5e", [0x3, 0xffffffffffffffff]}) r4 = openat(0xffffffffffffffff, 0x0, 0x143441, 0x98) pwritev2(r4, 0x0, 0x0, 0xe7b, 0x0, 0x0) truncate(&(0x7f00000014c0)='./file1\x00', 0x20fffbfffc) pwritev2(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x3fffc, 0xfffff804, 0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0x2000}]) [ 107.486454][ T812] usb 5-1: device descriptor read/8, error -71 [ 103.441648][ T48] Bluetooth: hci0: command tx timeout [ 103.589109][ T5345] loop0: detected capacity change from 0 to 512 [ 103.625668][ T5345] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 103.625679][ T5345] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 103.625692][ T5345] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 103.664820][ T5345] EXT4-fs (loop0): 1 truncate cleaned up [ 103.666677][ T5345] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.733937][ T5345] loop0: detected capacity change from 512 to 511 [ 103.769999][ T5345] ================================================================== [ 103.770014][ T5345] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x92b/0x1ed0 [ 103.770228][ T5345] Read of size 18446744073709551600 at addr ffff88804f2d82b8 by task syz.0.0/5345 [ 103.770239][ T5345] [ 103.770269][ T5345] CPU: 0 UID: 0 PID: 5345 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 103.770283][ T5345] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.770290][ T5345] Call Trace: [ 103.770305][ T5345] [ 103.770311][ T5345] dump_stack_lvl+0xe8/0x150 [ 103.770356][ T5345] print_address_description+0x55/0x1e0 [ 103.770387][ T5345] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 103.770398][ T5345] print_report+0x58/0x70 [ 103.770413][ T5345] kasan_report+0x117/0x150 [ 103.770449][ T5345] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 103.770462][ T5345] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 103.770498][ T5345] kasan_check_range+0x264/0x2c0 [ 103.770513][ T5345] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 103.770526][ T5345] __asan_memmove+0x29/0x70 [ 103.770538][ T5345] ext4_xattr_set_entry+0x92b/0x1ed0 [ 103.770557][ T5345] ext4_xattr_ibody_set+0x262/0x710 [ 103.770570][ T5345] ext4_destroy_inline_data_nolock+0x23a/0x5f0 [ 103.770612][ T5345] ? __pfx_ext4_destroy_inline_data_nolock+0x10/0x10 [ 103.770631][ T5345] ? ext4_read_inline_folio+0x6fe/0x860 [ 103.770648][ T5345] ? __pfx_ext4_read_inline_folio+0x10/0x10 [ 103.770663][ T5345] ? down_write+0x166/0x200 [ 103.770779][ T5345] ? ext4_inode_journal_mode+0x18c/0x4d0 [ 103.770794][ T5345] ? ext4_fc_track_inode+0x4d/0x3f0 [ 103.770809][ T5345] ? ext4_fc_track_inode+0xf3/0x3f0 [ 103.770822][ T5345] ext4_convert_inline_data_to_extent+0x549/0xde0 [ 103.770842][ T5345] ? __pfx_ext4_convert_inline_data_to_extent+0x10/0x10 [ 103.770857][ T5345] ? ext4_file_write_iter+0xae4/0x1cd0 [ 103.770868][ T5345] ? vfs_writev+0x343/0x990 [ 103.770902][ T5345] ? ext4_inode_journal_mode+0x18c/0x4d0 [ 103.770914][ T5345] ? ext4_chunk_trans_extent+0x201/0x2a0 [ 103.770930][ T5345] ? ext4_try_to_write_inline_data+0x49/0x90 [ 103.770948][ T5345] ext4_write_begin+0x3bd/0x1900 [ 103.770978][ T5345] ? kasan_quarantine_put+0xbb/0x1f0 [ 103.770990][ T5345] ? __pfx_ext4_write_begin+0x10/0x10 [ 103.771007][ T5345] ? balance_dirty_pages_ratelimited_flags+0x8e4/0xd20 [ 103.771038][ T5345] generic_perform_write+0x2d5/0x8e0 [ 103.771056][ T5345] ? __pfx_generic_perform_write+0x10/0x10 [ 103.771073][ T5345] ? ext4_write_checks+0x1b7/0x220 [ 103.771086][ T5345] ext4_buffered_write_iter+0x139/0x540 [ 103.771099][ T5345] ext4_file_write_iter+0xae4/0x1cd0 [ 103.771117][ T5345] ? futex_unqueue+0x22/0x240 [ 103.771149][ T5345] ? __lock_acquire+0x747/0x2de0 [ 103.771177][ T5345] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 103.771190][ T5345] ? __pfx___futex_wait+0x10/0x10 [ 103.771206][ T5345] do_iter_readv_writev+0x612/0x8c0 [ 103.771219][ T5345] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 103.771248][ T5345] vfs_writev+0x343/0x990 [ 103.771265][ T5345] ? __pfx_vfs_writev+0x10/0x10 [ 103.771284][ T5345] ? __fget_files+0x3a2/0x420 [ 103.771296][ T5345] ? __fget_files+0x2a/0x420 [ 103.771306][ T5345] ? fdget+0x1ac/0x250 [ 103.771317][ T5345] __se_sys_pwritev2+0x177/0x2a0 [ 103.771330][ T5345] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 103.771344][ T5345] ? __x64_sys_pwritev2+0x20/0xc0 [ 103.771357][ T5345] do_syscall_64+0x166/0x520 [ 103.771374][ T5345] ? trace_irq_disable+0x3b/0x140 [ 103.771389][ T5345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.771416][ T5345] ? clear_bhb_loop+0x70/0xc0 [ 103.771429][ T5345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.771440][ T5345] RIP: 0033:0x7f7d3379f559 [ 103.771470][ T5345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.771480][ T5345] RSP: 002b:00007f7d346fffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 103.771495][ T5345] RAX: ffffffffffffffda RBX: 00007f7d33a25fa0 RCX: 00007f7d3379f559 [ 103.771504][ T5345] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005 [ 103.771511][ T5345] RBP: 00007f7d33836b20 R08: 00000000fffff804 R09: 0000000000000000 [ 103.771519][ T5345] R10: 000000000003fffc R11: 0000000000000246 R12: 0000000000000000 [ 103.771526][ T5345] R13: 00007f7d33a26038 R14: 00007f7d33a25fa0 R15: 00007fffc75d1d58 [ 103.771540][ T5345] [ 103.771544][ T5345] [ 103.771547][ T5345] The buggy address belongs to the physical page: [ 103.771553][ T5345] page: refcount:3 mapcount:0 mapping:ffff88801e425940 index:0x2 pfn:0x4f2d8 [ 103.771564][ T5345] memcg:ffff8880419dc380 [ 103.771571][ T5345] aops:def_blk_aops ino:700000 dentry name(?):"" [ 103.771670][ T5345] flags: 0x4fff18000000214(referenced|dirty|workingset|node=1|zone=1|lastcpupid=0x7ff) [ 103.771688][ T5345] raw: 04fff18000000214 0000000000000000 dead000000000122 ffff88801e425940 [ 103.771698][ T5345] raw: 0000000000000002 ffff8880458dad20 00000003ffffffff ffff8880419dc380 [ 103.771703][ T5345] page dumped because: kasan: bad access detected [ 103.771710][ T5345] page_owner tracks the page as allocated [ 103.771714][ T5345] page last allocated via order 0, migratetype Movable, gfp_mask 0x148c48(GFP_NOFS|__GFP_MOVABLE|__GFP_NOFAIL|__GFP_COMP|__GFP_HARDWALL), pid 5345, tgid 5344 (syz.0.0), ts 103749261705 [ 103.771733][ T5345] post_alloc_hook+0x1f9/0x250 [ 103.771751][ T5345] get_page_from_freelist+0x220f/0x2280 [ 103.771763][ T5345] __alloc_frozen_pages_noprof+0x1fc/0x400 [ 103.771774][ T5345] alloc_pages_mpol+0x21e/0x390 [ 103.771787][ T5345] alloc_pages_noprof+0xb1/0x2b0 [ 103.771800][ T5345] folio_alloc_noprof+0x1e/0x30 [ 103.771814][ T5345] filemap_alloc_folio_noprof+0x111/0x460 [ 103.771825][ T5345] __filemap_get_folio_mpol+0x3fd/0xff0 [ 103.771837][ T5345] bdev_getblk+0x1ec/0x670 [ 103.771860][ T5345] __ext4_get_inode_loc+0x56c/0xf40 [ 103.771873][ T5345] ext4_get_inode_loc+0x81/0xf0 [ 103.771885][ T5345] ext4_xattr_ibody_get+0x113/0x4b0 [ 103.771896][ T5345] ext4_xattr_get+0x121/0x690 [ 103.771905][ T5345] __vfs_getxattr+0x412/0x440 [ 103.771921][ T5345] cap_inode_need_killpriv+0x45/0x60 [ 103.771998][ T5345] security_inode_need_killpriv+0x85/0x240 [ 103.772023][ T5345] page last free pid 5345 tgid 5344 ts 103709936003 stack trace: [ 103.772031][ T5345] free_unref_folios+0xdc6/0x14e0 [ 103.772047][ T5345] folios_put_refs+0x9e9/0xb30 [ 103.772061][ T5345] shmem_undo_range+0x4f1/0x16d0 [ 103.772072][ T5345] shmem_evict_inode+0x240/0xb00 [ 103.772086][ T5345] evict+0x624/0xb50 [ 103.772097][ T5345] dentry_kill+0x1b9/0x910 [ 103.772116][ T5345] finish_dput+0x1a/0x260 [ 103.772132][ T5345] __fput+0x65b/0xa40 [ 103.772146][ T5345] fput_close_sync+0x11f/0x240 [ 103.772160][ T5345] __se_sys_close+0xa2/0x160 [ 103.772176][ T5345] do_syscall_64+0x166/0x520 [ 103.772191][ T5345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.772202][ T5345] [ 103.772205][ T5345] Memory state around the buggy address: [ 103.772211][ T5345] ffff88804f2d8180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 103.772218][ T5345] ffff88804f2d8200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 103.772225][ T5345] >ffff88804f2d8280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 103.772230][ T5345] ^ [ 103.772236][ T5345] ffff88804f2d8300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 103.772243][ T5345] ffff88804f2d8380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 103.772249][ T5345] ================================================================== [ 104.129517][ T5345] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 104.132737][ T5345] CPU: 0 UID: 0 PID: 5345 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 104.136543][ T5345] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.140858][ T5345] Call Trace: [ 104.142396][ T5345] [ 104.143705][ T5345] vpanic+0x56d/0xa60 [ 104.145456][ T5345] ? __pfx_vpanic+0x10/0x10 [ 104.147474][ T5345] panic+0xc5/0xd0 [ 104.149318][ T5345] ? __pfx_panic+0x10/0x10 [ 104.151303][ T5345] ? preempt_schedule_thunk+0x16/0x40 [ 104.153629][ T5345] ? preempt_schedule_thunk+0x16/0x40 [ 104.155965][ T5345] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 104.158328][ T5345] check_panic_on_warn+0x89/0xb0 [ 104.160501][ T5345] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 104.162778][ T5345] end_report+0x73/0x170 [ 104.164583][ T5345] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 104.166981][ T5345] kasan_report+0x128/0x150 [ 104.168954][ T5345] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 104.171301][ T5345] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 104.173614][ T5345] kasan_check_range+0x264/0x2c0 [ 104.175750][ T5345] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 104.178155][ T5345] __asan_memmove+0x29/0x70 [ 104.180163][ T5345] ext4_xattr_set_entry+0x92b/0x1ed0 [ 104.182533][ T5345] ext4_xattr_ibody_set+0x262/0x710 [ 104.184809][ T5345] ext4_destroy_inline_data_nolock+0x23a/0x5f0 [ 104.187544][ T5345] ? __pfx_ext4_destroy_inline_data_nolock+0x10/0x10 [ 104.190525][ T5345] ? ext4_read_inline_folio+0x6fe/0x860 [ 104.192866][ T5345] ? __pfx_ext4_read_inline_folio+0x10/0x10 [ 104.195423][ T5345] ? down_write+0x166/0x200 [ 104.197355][ T5345] ? ext4_inode_journal_mode+0x18c/0x4d0 [ 104.199831][ T5345] ? ext4_fc_track_inode+0x4d/0x3f0 [ 104.202463][ T5345] ? ext4_fc_track_inode+0xf3/0x3f0 [ 104.205069][ T5345] ext4_convert_inline_data_to_extent+0x549/0xde0 [ 104.208021][ T5345] ? __pfx_ext4_convert_inline_data_to_extent+0x10/0x10 [ 104.210995][ T5345] ? ext4_file_write_iter+0xae4/0x1cd0 [ 104.213329][ T5345] ? vfs_writev+0x343/0x990 [ 104.215274][ T5345] ? ext4_inode_journal_mode+0x18c/0x4d0 [ 104.217581][ T5345] ? ext4_chunk_trans_extent+0x201/0x2a0 [ 104.220980][ T5345] ? ext4_try_to_write_inline_data+0x49/0x90 [ 104.223648][ T5345] ext4_write_begin+0x3bd/0x1900 [ 104.225578][ T5345] ? kasan_quarantine_put+0xbb/0x1f0 [ 104.227863][ T5345] ? __pfx_ext4_write_begin+0x10/0x10 [ 104.230237][ T5345] ? balance_dirty_pages_ratelimited_flags+0x8e4/0xd20 [ 104.233161][ T5345] generic_perform_write+0x2d5/0x8e0 [ 104.235494][ T5345] ? __pfx_generic_perform_write+0x10/0x10 [ 104.238065][ T5345] ? ext4_write_checks+0x1b7/0x220 [ 104.240279][ T5345] ext4_buffered_write_iter+0x139/0x540 [ 104.242686][ T5345] ext4_file_write_iter+0xae4/0x1cd0 [ 104.245052][ T5345] ? futex_unqueue+0x22/0x240 [ 104.247102][ T5345] ? __lock_acquire+0x747/0x2de0 [ 104.249250][ T5345] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 104.251808][ T5345] ? __pfx___futex_wait+0x10/0x10 [ 104.253972][ T5345] do_iter_readv_writev+0x612/0x8c0 [ 104.256120][ T5345] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 104.258579][ T5345] vfs_writev+0x343/0x990 [ 104.260432][ T5345] ? __pfx_vfs_writev+0x10/0x10 [ 104.262460][ T5345] ? __fget_files+0x3a2/0x420 [ 104.264467][ T5345] ? __fget_files+0x2a/0x420 [ 104.266434][ T5345] ? fdget+0x1ac/0x250 [ 104.268194][ T5345] __se_sys_pwritev2+0x177/0x2a0 [ 104.270515][ T5345] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 104.272838][ T5345] ? __x64_sys_pwritev2+0x20/0xc0 [ 104.274983][ T5345] do_syscall_64+0x166/0x520 [ 104.276966][ T5345] ? trace_irq_disable+0x3b/0x140 [ 104.279205][ T5345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.281738][ T5345] ? clear_bhb_loop+0x70/0xc0 [ 104.283692][ T5345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.286242][ T5345] RIP: 0033:0x7f7d3379f559 [ 104.288234][ T5345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.296472][ T5345] RSP: 002b:00007f7d346fffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 104.300196][ T5345] RAX: ffffffffffffffda RBX: 00007f7d33a25fa0 RCX: 00007f7d3379f559 [ 104.303680][ T5345] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005 [ 104.307218][ T5345] RBP: 00007f7d33836b20 R08: 00000000fffff804 R09: 0000000000000000 [ 104.311060][ T5345] R10: 000000000003fffc R11: 0000000000000246 R12: 0000000000000000 [ 104.314776][ T5345] R13: 00007f7d33a26038 R14: 00007f7d33a25fa0 R15: 00007fffc75d1d58 [ 104.318365][ T5345] [ 104.320097][ T5345] Kernel Offset: disabled [ 104.321823][ T5345] Rebooting in 86400 seconds..