program:
prctl$PR_MCE_KILL(0x21, 0x1, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000540)={[{@noblock_validity}, {}, {@sysvgroups}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nolazytime}, {@quota}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nouid32}, {@mblk_io_submit}, {@i_version}]}, 0x1, 0x746, &(0x7f0000000f40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x6)
creat(&(0x7f0000000380)='./bus\x00', 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000})
r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x20000008)
rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file1\x00')
pwritev2(r2, &(0x7f0000000a40)=[{&(0x7f0000000600)="a21ac11bb893195342dea9972597a4754e656b222a3acc425107e9988a2a7cb89cab6c73c478e016085b4c051e20747ae32d81781be4ce66d9e8b0c72b39344c7dfdaffeda0cf31ec7cc165ee558698e56e36ac0fd556353ebd1b9814f38297a15ebd9f45dd6b6b454ab7b8f2900cf5907c19cd0506008cfd2cd571629d5c4fa582a75c296089806a5d78dc1fc272320b4c0", 0x92}, {&(0x7f0000000200)="173feafd5530d1aaf934ea4c56e50bbbd02ce485a0184dc99c9903dcc924ae93bb4dc2b8ee3cdaa8f64755bca9d388f21eacb2283629cd04ed66821b5d758f11027403b6c89f9e19409e6540817587cf7dafbc85d074806426597b2d952fd4851e07d62d51406a2ed5c0ee219cd548d1f0409bab5b8e95fb", 0x78}, {&(0x7f00000007c0)="59efe4e3646ec438ea9185abafd094126fcbfd32725857d8a3bd13853d5cb6662c8a29514ecc72be22c2d74dceae0070395dabb0f4233d8b1fcbcf4feb2c7185b8b7929232bc93d44f8b1c838b4d6699cef1410337f946eb5c4053f14688f9f91fcabfbf5c5a5aee9f1b3bfc3149470983af1c0739ec407c683ee92ad95ebc6e263857e08026c6c6a767372484561fbf5bd2be48d6afb001a615c0dcdeb3ca2e58afb25243399dbfd74d", 0xaa}, {&(0x7f00000004c0)="5cb2cc90d944f6007b27f1c80d523c19d10d8b72370ac048a9c95a272c56007893dea1e554b8a4e90343d1400344d507e816acd2bda9c5fa394e22439d1d1218298d0beafad1e5738b632976802d2f8b16e84bd15cf0fd8bcd41147aa3d03be88ae1174997b0ab4c724d117e0b44fd74d12c3344c2", 0x75}, {&(0x7f0000000880)="980c0a7109aa036af37c6d23e23c8566cb92683c8ea79ccaef8df874f804a425636092bf9a8d10a3d0be139f7ad24a254b10d5b3f922421a2fc3b5fe3a146b3e043c97f346d8dd1cc34196a48b3e83373c70624aeb20591da6c32b37052737eb08521964190615630eab3a6bd63631ed74448e93bec51c7ceee476a2c592bb9d3a039cd25f960f15082edf1931a40f28faeef16a52dc384d44b6ba8d2ca99456084af9bf1f237b12decc65b6e7faa0c8e0af6e32b4ee53279bb392624e8030bb28ed402670d5eece3bd26302b8c96495261dd3c35cea", 0xd6}, {&(0x7f0000000980)="2c69d50ea865a1c14e1c17b25bd526d26ba5f5a5e4e31c387f6a4ba470d5294e0cfc75bf26c2aec17503da1ea95d3e12366db4b9492252855491dbe68a0f29c46eaa0253b6c2a46da2c0b97cf9d6728addae954940d69465ff0ced4d308889367b1702845d36b8ea83fa6738a4d212ae423380fb6c86c495dde05507cb1539d2296e20cedc8c4faafa93252239ef081d16fd89e2b61c5b299372e43469f141d59364f1fd6869ee80489319b0415169e387", 0xb1}], 0x6, 0x7, 0x6, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6}, {0x0, [0x61, 0x0, 0x2e, 0x61]}}, 0x0, 0x1e, 0x0, 0x0, 0x5}, 0x28)
[ 110.075433][ T4666] Bluetooth: hci0: command tx timeout
[ 110.678923][ T5322] loop0: detected capacity change from 0 to 1024
[ 110.745591][ T5322] EXT4-fs: Ignoring removed orlov option
[ 110.748463][ T5322] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 110.778969][ T5322] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 110.908971][ T5322] loop0: detected capacity change from 1024 to 64
[ 110.966925][ T5323] ==================================================================
[ 110.971634][ T5323] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x9c1/0x1e20
[ 110.992001][ T5323] Read of size 18446744073709551600 at addr ffff888055dd42d0 by task syz.0.0/5323
[ 111.009187][ T5323]
[ 111.010355][ T5323] CPU: 0 UID: 0 PID: 5323 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 111.010381][ T5323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 111.010391][ T5323] Call Trace:
[ 111.010400][ T5323]
[ 111.010407][ T5323] dump_stack_lvl+0xe8/0x150
[ 111.010437][ T5323] print_report+0xba/0x230
[ 111.010454][ T5323] ? ext4_xattr_set_entry+0x9c1/0x1e20
[ 111.010471][ T5323] kasan_report+0x117/0x150
[ 111.010488][ T5323] ? ext4_xattr_set_entry+0x9c1/0x1e20
[ 111.010501][ T5323] ? ext4_xattr_set_entry+0x9c1/0x1e20
[ 111.010515][ T5323] kasan_check_range+0x264/0x2c0
[ 111.010532][ T5323] ? ext4_xattr_set_entry+0x9c1/0x1e20
[ 111.010548][ T5323] __asan_memmove+0x29/0x70
[ 111.010570][ T5323] ext4_xattr_set_entry+0x9c1/0x1e20
[ 111.010587][ T5323] ext4_xattr_ibody_set+0x254/0x6a0
[ 111.010602][ T5323] ext4_destroy_inline_data_nolock+0x23a/0x5e0
[ 111.010624][ T5323] ? __pfx_ext4_destroy_inline_data_nolock+0x10/0x10
[ 111.010647][ T5323] ? trace_kmalloc+0x2a/0x110
[ 111.010665][ T5323] ? __asan_memcpy+0x40/0x70
[ 111.010683][ T5323] ? ext4_read_inline_data+0x103/0x2c0
[ 111.010710][ T5323] ext4_convert_inline_data_nolock+0x208/0x990
[ 111.010732][ T5323] ? __pfx_ext4_convert_inline_data_nolock+0x10/0x10
[ 111.010749][ T5323] ? down_write+0x16d/0x200
[ 111.010837][ T5323] ? ext4_get_inode_loc+0xc5/0xf0
[ 111.010849][ T5323] ext4_convert_inline_data+0x4ce/0x600
[ 111.010868][ T5323] ? __pfx_ext4_convert_inline_data+0x10/0x10
[ 111.010884][ T5323] ? down_write+0x16d/0x200
[ 111.010900][ T5323] ext4_fallocate+0x1e2/0x3d0
[ 111.010917][ T5323] vfs_fallocate+0x669/0x7e0
[ 111.010931][ T5323] ? __pfx_vfs_fallocate+0x10/0x10
[ 111.010945][ T5323] file_ioctl+0x6e6/0x860
[ 111.010958][ T5323] ? __pfx_file_ioctl+0x10/0x10
[ 111.010973][ T5323] ? kasan_quarantine_put+0xbb/0x1f0
[ 111.010991][ T5323] ? tomoyo_path_number_perm+0x219/0x630
[ 111.011052][ T5323] ? tomoyo_path_number_perm+0x219/0x630
[ 111.011069][ T5323] do_vfs_ioctl+0xc26/0x1530
[ 111.011082][ T5323] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 111.011101][ T5323] ? __fget_files+0x2a/0x420
[ 111.011118][ T5323] ? __fget_files+0x2a/0x420
[ 111.011134][ T5323] ? __fget_files+0x3a0/0x420
[ 111.011149][ T5323] ? __fget_files+0x2a/0x420
[ 111.011164][ T5323] ? bpf_lsm_file_ioctl+0x9/0x20
[ 111.011179][ T5323] __se_sys_ioctl+0x82/0x170
[ 111.011194][ T5323] do_syscall_64+0x14d/0xf80
[ 111.011208][ T5323] ? trace_irq_disable+0x3b/0x150
[ 111.011230][ T5323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 111.011245][ T5323] ? clear_bhb_loop+0x40/0x90
[ 111.011261][ T5323] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 111.011276][ T5323] RIP: 0033:0x7ff1a9f9c799
[ 111.011292][ T5323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 111.011302][ T5323] RSP: 002b:00007ff1aad94fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 111.011318][ T5323] RAX: ffffffffffffffda RBX: 00007ff1aa216090 RCX: 00007ff1a9f9c799
[ 111.011329][ T5323] RDX: 0000200000000040 RSI: 0000000040305839 RDI: 0000000000000006
[ 111.011338][ T5323] RBP: 00007ff1aa032c99 R08: 0000000000000000 R09: 0000000000000000
[ 111.011346][ T5323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 111.011353][ T5323] R13: 00007ff1aa216128 R14: 00007ff1aa216090 R15: 00007fff89963858
[ 111.011366][ T5323]
[ 111.011371][ T5323]
[ 111.371622][ T5323] The buggy address belongs to the physical page:
[ 111.375170][ T5323] page: refcount:3 mapcount:0 mapping:ffff88801cc2d900 index:0x2 pfn:0x55dd4
[ 111.394367][ T5323] memcg:ffff88801c6c0d40
[ 111.396771][ T5323] aops:def_blk_aops ino:700000 dentry name(?):""
[ 111.400513][ T5323] flags: 0x4fff18000004204(referenced|workingset|private|node=1|zone=1|lastcpupid=0x7ff)
[ 111.424515][ T5323] raw: 04fff18000004204 0000000000000000 dead000000000122 ffff88801cc2d900
[ 111.430591][ T5323] raw: 0000000000000002 ffff8880476fa1d0 00000003ffffffff ffff88801c6c0d40
[ 111.435742][ T5323] page dumped because: kasan: bad access detected
[ 111.439042][ T5323] page_owner tracks the page as allocated
[ 111.445711][ T5323] page last allocated via order 0, migratetype Movable, gfp_mask 0x148c48(GFP_NOFS|__GFP_MOVABLE|__GFP_NOFAIL|__GFP_COMP|__GFP_HARDWALL), pid 5323, tgid 5321 (syz.0.0), ts 110964563000, free_ts 110963178644
[ 111.470315][ T5323] post_alloc_hook+0x231/0x280
[ 111.473243][ T5323] get_page_from_freelist+0x24dc/0x2580
[ 111.478567][ T5323] __alloc_frozen_pages_noprof+0x18d/0x380
[ 111.494369][ T5323] alloc_pages_mpol+0x232/0x4a0
[ 111.497030][ T5323] alloc_pages_noprof+0xa8/0x190
[ 111.499729][ T5323] folio_alloc_noprof+0x1e/0x30
[ 111.514313][ T5323] filemap_alloc_folio_noprof+0x111/0x470
[ 111.518502][ T5323] __filemap_get_folio_mpol+0x3fc/0xb00
[ 111.521802][ T5323] bdev_getblk+0x1f6/0x6e0
[ 111.532001][ T5323] __ext4_get_inode_loc+0x528/0xfa0
[ 111.535665][ T5323] ext4_get_inode_loc+0x81/0xf0
[ 111.544267][ T5323] ext4_convert_inline_data+0x26e/0x600
[ 111.548445][ T5323] ext4_fallocate+0x1e2/0x3d0
[ 111.555309][ T5323] vfs_fallocate+0x669/0x7e0
[ 111.564348][ T5323] file_ioctl+0x6e6/0x860
[ 111.570185][ T5323] do_vfs_ioctl+0xc26/0x1530
[ 111.575842][ T5323] page last free pid 5297 tgid 5297 stack trace:
[ 111.584439][ T5323] free_unref_folios+0xed5/0x16d0
[ 111.587404][ T5323] folios_put_refs+0x789/0x8d0
[ 111.590242][ T5323] shmem_undo_range+0x52c/0x1660
[ 111.603702][ T5323] shmem_evict_inode+0x240/0x9e0
[ 111.612555][ T5323] evict+0x61e/0xb10
[ 111.615909][ T5323] __dentry_kill+0x1a2/0x5e0
[ 111.624198][ T5323] finish_dput+0xc9/0x480
[ 111.627428][ T5323] filename_renameat2+0x61e/0x9c0
[ 111.635243][ T5323] __se_sys_rename+0x55/0x2c0
[ 111.643475][ T5323] do_syscall_64+0x14d/0xf80
[ 111.650498][ T5323] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 111.657253][ T5323]
[ 111.658448][ T5323] Memory state around the buggy address:
[ 111.661112][ T5323] ffff888055dd4180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 111.675948][ T5323] ffff888055dd4200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 111.679383][ T5323] >ffff888055dd4280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 111.688505][ T5323] ^
[ 111.695931][ T5323] ffff888055dd4300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 111.706918][ T5323] ffff888055dd4380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 111.715271][ T5323] ==================================================================
[ 111.814894][ T5323] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 111.825746][ T5323] CPU: 0 UID: 0 PID: 5323 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 111.831142][ T5323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 111.854031][ T5323] Call Trace:
[ 111.856004][ T5323]
[ 111.857852][ T5323] vpanic+0x56c/0xa60
[ 111.860585][ T5323] ? __pfx_vpanic+0x10/0x10
[ 111.870630][ T5323] ? __pfx___schedule+0x10/0x10
[ 111.873671][ T5323] panic+0xc5/0xd0
[ 111.876343][ T5323] ? __pfx_panic+0x10/0x10
[ 111.883415][ T5323] ? preempt_schedule_thunk+0x16/0x30
[ 111.885960][ T5323] ? ext4_xattr_set_entry+0x9c1/0x1e20
[ 111.888428][ T5323] check_panic_on_warn+0x89/0xb0
[ 111.891080][ T5323] ? ext4_xattr_set_entry+0x9c1/0x1e20
[ 111.904830][ T5323] end_report+0x73/0x180
[ 111.913439][ T5323] ? ext4_xattr_set_entry+0x9c1/0x1e20
[ 111.917346][ T5323] kasan_report+0x128/0x150
[ 111.919778][ T5323] ? ext4_xattr_set_entry+0x9c1/0x1e20
[ 111.932737][ T5323] ? ext4_xattr_set_entry+0x9c1/0x1e20
[ 111.935617][ T5323] kasan_check_range+0x264/0x2c0
[ 111.938755][ T5323] ? ext4_xattr_set_entry+0x9c1/0x1e20
[ 111.954296][ T5323] __asan_memmove+0x29/0x70
[ 111.956479][ T5323] ext4_xattr_set_entry+0x9c1/0x1e20
[ 111.959165][ T5323] ext4_xattr_ibody_set+0x254/0x6a0
[ 111.972686][ T5323] ext4_destroy_inline_data_nolock+0x23a/0x5e0
[ 111.975860][ T5323] ? __pfx_ext4_destroy_inline_data_nolock+0x10/0x10
[ 111.978743][ T5323] ? trace_kmalloc+0x2a/0x110
[ 111.981164][ T5323] ? __asan_memcpy+0x40/0x70
[ 111.984358][ T5323] ? ext4_read_inline_data+0x103/0x2c0
[ 111.987497][ T5323] ext4_convert_inline_data_nolock+0x208/0x990
[ 112.007209][ T5323] ? __pfx_ext4_convert_inline_data_nolock+0x10/0x10
[ 112.010535][ T5323] ? down_write+0x16d/0x200
[ 112.013273][ T5323] ? ext4_get_inode_loc+0xc5/0xf0
[ 112.016047][ T5323] ext4_convert_inline_data+0x4ce/0x600
[ 112.025690][ T5323] ? __pfx_ext4_convert_inline_data+0x10/0x10
[ 112.035440][ T5323] ? down_write+0x16d/0x200
[ 112.038278][ T5323] ext4_fallocate+0x1e2/0x3d0
[ 112.043849][ T5323] vfs_fallocate+0x669/0x7e0
[ 112.052989][ T5323] ? __pfx_vfs_fallocate+0x10/0x10
[ 112.056752][ T5323] file_ioctl+0x6e6/0x860
[ 112.062785][ T5323] ? __pfx_file_ioctl+0x10/0x10
[ 112.066728][ T5323] ? kasan_quarantine_put+0xbb/0x1f0
[ 112.070382][ T5323] ? tomoyo_path_number_perm+0x219/0x630
[ 112.072818][ T5323] ? tomoyo_path_number_perm+0x219/0x630
[ 112.075395][ T5323] do_vfs_ioctl+0xc26/0x1530
[ 112.077713][ T5323] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 112.080175][ T5323] ? __fget_files+0x2a/0x420
[ 112.082904][ T5323] ? __fget_files+0x2a/0x420
[ 112.086627][ T5323] ? __fget_files+0x3a0/0x420
[ 112.091979][ T5323] ? __fget_files+0x2a/0x420
[ 112.094199][ T5323] ? bpf_lsm_file_ioctl+0x9/0x20
[ 112.096510][ T5323] __se_sys_ioctl+0x82/0x170
[ 112.104347][ T5323] do_syscall_64+0x14d/0xf80
[ 112.106745][ T5323] ? trace_irq_disable+0x3b/0x150
[ 112.114919][ T5323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 112.118516][ T5323] ? clear_bhb_loop+0x40/0x90
[ 112.136861][ T5323] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 112.140280][ T5323] RIP: 0033:0x7ff1a9f9c799
[ 112.143691][ T5323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 112.164626][ T5323] RSP: 002b:00007ff1aad94fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 112.170494][ T5323] RAX: ffffffffffffffda RBX: 00007ff1aa216090 RCX: 00007ff1a9f9c799
[ 112.186039][ T5323] RDX: 0000200000000040 RSI: 0000000040305839 RDI: 0000000000000006
[ 112.190468][ T5323] RBP: 00007ff1aa032c99 R08: 0000000000000000 R09: 0000000000000000
[ 112.204915][ T5323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 112.208653][ T5323] R13: 00007ff1aa216128 R14: 00007ff1aa216090 R15: 00007fff89963858
[ 112.223106][ T5323]
[ 112.225244][ T5323] Kernel Offset: disabled
[ 112.227595][ T5323] Rebooting in 86400 seconds..