program: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000010, &(0x7f0000000280)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x81, 0x7a5, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000200"/28], 0x48) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r2, 0x26, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f00000002c0)=r3, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000940)={r3, 0x0, 0x0}, 0x10) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x3, 0x8005, 0x0, 0x0, 0x18, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8, 0x1]}) pwrite64(r0, &(0x7f0000000080)='3', 0x1, 0xfeca) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000010, &(0x7f0000000280)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x81, 0x7a5, &(0x7f0000000f80)="$eJzs3c9rXNUeAPDvnfxq0r6XPHjwXl0FBA2UTkyNrYKLigsRLBR0bRsm01AzyZTMpDQh0BYR3AgqLgTddO2PunPrj63+Fy6kpWparLiQkTuZSSbNTJq0mZlgPh+4uefcc2/O+c65P87MvcwEcGCNpn8yEUcj4v0kYri2PImIvmqqN+L02nr3V1dy6ZREpfL6r0l1nXurK7lo2CZ1uJb5f0R8907EsczWektLy7NThUJ+oZYfL89dGi8tLR+/ODc1k5/Jz5+cmJw8ceq5Uyf3Ltbff1w+cvuDV57+8vSfb//v5nvfJ3E6jtTKGuPYK6MxWntN+tKXcJOX97qyLku63QAeSXpo9qwd5XE0hqOnmmphsJMtAwDa5WpEVACAAyZx/QeAA6b+OcC91ZVcferuJxKddeeliDi0Fn/9/uZaSW/tnt2h6n3QoXvJpjsjSUSM7EH9oxHx6ddvfp5O0ab7kADNXLseEedHRree/5Mtzyzs1jPbFVYGqrPRBxY7/0HnfJOOf55vNv7LrI9/osn4Z6DJsfsoHn78Z27tQTUtpeO/FxuebbvfEH/NSE8t96/qmK8vuXCxkE/Pbf+OiLHoG0jzE9VVmz8FNXb3r7ut6m8c//324VufpfWn8401Mrd6BzZvMz1VnnrcuOvuXI94ordZ/Ml6/yctxr9nd1jHqy+8+0mrsjT+NN76tDX+9qrciHiqaf9v9GWy7fOJ49XdYby+UzTx1U8fD7Wqf6P/B6rztP76e4FOSPt/aPv4R5LG5zVLu6/jhxvD37Yqa9z/m8fffP/vT96opvtry65MlcsLExH9yWtbl5/Y2Laer6+fxj/2ZPPjv9X+n6k9G3t+Pbe93tu/fFH7V03jr7rWKv72SuOf3lX/b5Oo1LZ5oOjm/dmeVvXvrP8nq6mx2pKdnP8e0tLH2JsBAAAAAAAAAAAAAAAAAAAAAAAAYPcyEXEkkkx2PZ3JZLNrv+H93xjKFIql8rELxcX56aj+VvZI9GXqX3U53PB9qBO178Ov5088kH82Iv4TER8NDFbz2VyxMN3t4AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg5vDm3/+/ms6y2bWynwe63ToAoG0OdbsBAEDHuf4DwMGzu+v/YNvaAQB0zq7f/1eS9jQEAOiYHV//z7e3HQBA57j/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJudPXMmnSp/rK7k0vz05aXF2eLl49P50mx2bjGXzRUXLmVnisWZQj6bK861/EfX1maFYvHSZMwvXhkv50vl8dLS8rm54uJ8+dzFuamZ/Ll8X8ciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICdKy0tz04VCvkFiW0Tg/ujGfsm0Rv7ohn/+ER/12pvPEsMdu8EBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDP/R0AAP//aHclQg==") (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000200"/28], 0x48) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r2, 0x26, 0x0, @void}, 0x10) (async) bpf$LINK_DETACH(0x22, &(0x7f00000002c0)=r3, 0x4) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000940)={r3, 0x0, 0x0}, 0x10) (async) creat(&(0x7f0000000380)='./bus\x00', 0x0) (async) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x3, 0x8005, 0x0, 0x0, 0x18, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8, 0x1]}) (async) pwrite64(r0, &(0x7f0000000080)='3', 0x1, 0xfeca) (async) [ 84.515129][ T5283] Bluetooth: hci0: command tx timeout [ 84.634946][ T5319] loop0: detected capacity change from 0 to 2048 [ 84.670042][ T5319] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.711360][ T5319] loop0: detected capacity change from 2048 to 64 [ 84.720500][ T5319] ================================================================== [ 84.723954][ T5319] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x92b/0x1ed0 [ 84.727352][ T5319] Read of size 18446744073709551600 at addr ffff88804cc90eb8 by task syz.0.0/5319 [ 84.731640][ T5319] [ 84.732904][ T5319] CPU: 0 UID: 0 PID: 5319 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 84.732921][ T5319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.732929][ T5319] Call Trace: [ 84.732936][ T5319] [ 84.732943][ T5319] dump_stack_lvl+0xe8/0x150 [ 84.732964][ T5319] print_address_description+0x55/0x1e0 [ 84.732978][ T5319] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 84.732993][ T5319] print_report+0x58/0x70 [ 84.733004][ T5319] kasan_report+0x117/0x150 [ 84.733025][ T5319] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 84.733040][ T5319] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 84.733054][ T5319] kasan_check_range+0x264/0x2c0 [ 84.733072][ T5319] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 84.733086][ T5319] __asan_memmove+0x29/0x70 [ 84.733101][ T5319] ext4_xattr_set_entry+0x92b/0x1ed0 [ 84.733122][ T5319] ext4_xattr_ibody_set+0x262/0x710 [ 84.733172][ T5319] ext4_destroy_inline_data_nolock+0x23a/0x5f0 [ 84.733194][ T5319] ? __pfx_ext4_destroy_inline_data_nolock+0x10/0x10 [ 84.733214][ T5319] ? down_write+0x16d/0x200 [ 84.734762][ T5319] ? ext4_journal_check_start+0x1cf/0x2b0 [ 84.734778][ T5319] ext4_destroy_inline_data+0x83/0xe0 [ 84.734794][ T5319] ext4_do_writepages+0x573/0x47a0 [ 84.734804][ T5319] ? rcu_is_watching+0x15/0xb0 [ 84.734818][ T5319] ? rcu_is_watching+0x15/0xb0 [ 84.734829][ T5319] ? trace_irq_enable+0x3b/0x140 [ 84.734847][ T5319] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 84.734861][ T5319] ? stack_depot_save_flags+0x3ec/0x800 [ 84.734913][ T5319] ? __es_insert_extent+0x6f0/0x1780 [ 84.734930][ T5319] ? kasan_save_track+0x4f/0x80 [ 84.734945][ T5319] ? kasan_save_track+0x3e/0x80 [ 84.734958][ T5319] ? __kasan_slab_alloc+0x6c/0x80 [ 84.734972][ T5319] ? kmem_cache_alloc_noprof+0x2b8/0x650 [ 84.734984][ T5319] ? __es_insert_extent+0x6f0/0x1780 [ 84.734999][ T5319] ? ext4_da_get_block_prep+0xb44/0x1320 [ 84.735010][ T5319] ? generic_perform_write+0x2d5/0x8f0 [ 84.735024][ T5319] ? ext4_buffered_write_iter+0xcb/0x370 [ 84.735034][ T5319] ? ext4_file_write_iter+0x947/0x1c70 [ 84.735043][ T5319] ? vfs_write+0x612/0xba0 [ 84.735058][ T5319] ? __x64_sys_pwrite64+0x196/0x220 [ 84.735067][ T5319] ? do_syscall_64+0x174/0x580 [ 84.735083][ T5319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.735097][ T5319] ? __pfx_ext4_do_writepages+0x10/0x10 [ 84.735112][ T5319] ? rcu_is_watching+0x15/0xb0 [ 84.735124][ T5319] ? ext4_writepages+0x205/0x3b0 [ 84.735138][ T5319] ? rcu_is_watching+0x15/0xb0 [ 84.735150][ T5319] ? lock_acquire+0x5f/0x350 [ 84.735163][ T5319] ? preempt_count_add+0x91/0x190 [ 84.735181][ T5319] ext4_writepages+0x241/0x3b0 [ 84.735194][ T5319] ? lock_release+0x4b/0x3c0 [ 84.735203][ T5319] ? __pfx_ext4_writepages+0x10/0x10 [ 84.735220][ T5319] ? rcu_is_watching+0x15/0xb0 [ 84.735231][ T5319] ? __pfx_ext4_writepages+0x10/0x10 [ 84.735245][ T5319] do_writepages+0x338/0x560 [ 84.735261][ T5319] ? rcu_is_watching+0x15/0xb0 [ 84.735274][ T5319] ? do_raw_spin_unlock+0x4d/0x210 [ 84.735290][ T5319] file_write_and_wait_range+0x36e/0x440 [ 84.735303][ T5319] ? __pfx_file_write_and_wait_range+0x10/0x10 [ 84.735321][ T5319] ? __css_rstat_updated+0x235/0x540 [ 84.735347][ T5319] ? __pfx_filemap_get_entry+0x10/0x10 [ 84.735359][ T5319] ? folio_mkclean+0x2dc/0x3f0 [ 84.735382][ T5319] mmb_fsync_noflush+0x73/0x1d0 [ 84.735395][ T5319] ext4_sync_file+0x41a/0xd00 [ 84.735407][ T5319] ? __pfx_ext4_sync_file+0x10/0x10 [ 84.735428][ T5319] ? __pfx_generic_perform_write+0x10/0x10 [ 84.735442][ T5319] ? sync_lazytime+0x5a/0x4c0 [ 84.735455][ T5319] ext4_buffered_write_iter+0x2c7/0x370 [ 84.735467][ T5319] ? preempt_schedule_common+0x82/0xd0 [ 84.735482][ T5319] ext4_file_write_iter+0x947/0x1c70 [ 84.735496][ T5319] ? rcu_is_watching+0x15/0xb0 [ 84.735507][ T5319] ? lock_acquire+0x5f/0x350 [ 84.735518][ T5319] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 84.735532][ T5319] vfs_write+0x612/0xba0 [ 84.735549][ T5319] ? __pfx_vfs_write+0x10/0x10 [ 84.735572][ T5319] ? __fget_files+0x2a/0x420 [ 84.735589][ T5319] __x64_sys_pwrite64+0x196/0x220 [ 84.735601][ T5319] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 84.735613][ T5319] ? rcu_is_watching+0x15/0xb0 [ 84.735625][ T5319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.735635][ T5319] do_syscall_64+0x174/0x580 [ 84.735650][ T5319] ? trace_irq_disable+0x3b/0x140 [ 84.735666][ T5319] ? clear_bhb_loop+0x40/0x90 [ 84.735677][ T5319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.735688][ T5319] RIP: 0033:0x7feabd39ce59 [ 84.735702][ T5319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.735711][ T5319] RSP: 002b:00007feabe239fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 84.735723][ T5319] RAX: ffffffffffffffda RBX: 00007feabd615fa0 RCX: 00007feabd39ce59 [ 84.735731][ T5319] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000004 [ 84.735738][ T5319] RBP: 00007feabd432e6f R08: 0000000000000000 R09: 0000000000000000 [ 84.735745][ T5319] R10: 000000000000feca R11: 0000000000000246 R12: 0000000000000000 [ 84.735752][ T5319] R13: 00007feabd616038 R14: 00007feabd615fa0 R15: 00007ffedc7eadf8 [ 84.735763][ T5319] [ 84.735767][ T5319] [ 84.968286][ T5319] The buggy address belongs to the physical page: [ 84.970943][ T5319] page: refcount:3 mapcount:0 mapping:ffff88801cc25940 index:0x2 pfn:0x4cc90 [ 84.974727][ T5319] memcg:ffff88803f116680 [ 84.976776][ T5319] aops:def_blk_aops ino:700000 dentry name(?):"" [ 84.980000][ T5319] flags: 0x4fff18000004214(referenced|dirty|workingset|private|node=1|zone=1|lastcpupid=0x7ff) [ 84.984198][ T5319] raw: 04fff18000004214 0000000000000000 dead000000000122 ffff88801cc25940 [ 84.987847][ T5319] raw: 0000000000000002 ffff8880422eda80 00000003ffffffff ffff88803f116680 [ 84.992369][ T5319] page dumped because: kasan: bad access detected [ 84.995468][ T5319] page_owner tracks the page as allocated [ 84.997844][ T5319] page last allocated via order 0, migratetype Movable, gfp_mask 0x148c48(GFP_NOFS|__GFP_MOVABLE|__GFP_NOFAIL|__GFP_COMP|__GFP_HARDWALL), pid 5319, tgid 5318 (syz.0.0), ts 84719111803, free_ts 84697913230 [ 85.006402][ T5319] post_alloc_hook+0x1f9/0x250 [ 85.008562][ T5319] get_page_from_freelist+0x21fa/0x2270 [ 85.011975][ T5319] __alloc_frozen_pages_noprof+0x18d/0x380 [ 85.016202][ T5319] alloc_pages_mpol+0x212/0x380 [ 85.018404][ T5319] alloc_pages_noprof+0xac/0x2a0 [ 85.020483][ T5319] folio_alloc_noprof+0x1e/0x30 [ 85.022629][ T5319] filemap_alloc_folio_noprof+0x111/0x470 [ 85.025034][ T5319] __filemap_get_folio_mpol+0x402/0x1000 [ 85.027225][ T5319] bdev_getblk+0x1f4/0x6e0 [ 85.028936][ T5319] __ext4_get_inode_loc+0x56c/0xf40 [ 85.030993][ T5319] ext4_get_inode_loc+0x81/0xf0 [ 85.033246][ T5319] ext4_xattr_ibody_get+0x113/0x4b0 [ 85.035546][ T5319] ext4_xattr_get+0x121/0x690 [ 85.037349][ T5319] __vfs_getxattr+0x412/0x440 [ 85.039230][ T5319] cap_inode_need_killpriv+0x45/0x60 [ 85.041511][ T5319] security_inode_need_killpriv+0x85/0x240 [ 85.044170][ T5319] page last free pid 4699 tgid 4699 stack trace: [ 85.047321][ T5319] __free_frozen_pages+0xc1f/0xd10 [ 85.049575][ T5319] __folio_put+0x4b3/0x590 [ 85.051405][ T5319] __free_zspage+0x33d/0x5b0 [ 85.053443][ T5319] zs_free+0x751/0x990 [ 85.055303][ T5319] zswap_entry_free+0x318/0x510 [ 85.057524][ T5319] zswap_load+0x3ca/0x4c0 [ 85.059726][ T5319] swap_read_folio+0x8ad/0x2800 [ 85.062187][ T5319] swap_cache_read_folio+0x8b/0x120 [ 85.064373][ T5319] swap_cluster_readahead+0x3a0/0x640 [ 85.066542][ T5319] swapin_readahead+0x19a/0xc10 [ 85.068326][ T5319] do_swap_page+0x455/0x5060 [ 85.070207][ T5319] handle_mm_fault+0x124c/0x3080 [ 85.072427][ T5319] do_user_addr_fault+0xa4d/0x1340 [ 85.074728][ T5319] exc_page_fault+0x6a/0xc0 [ 85.077004][ T5319] asm_exc_page_fault+0x26/0x30 [ 85.079782][ T5319] [ 85.081166][ T5319] Memory state around the buggy address: [ 85.083853][ T5319] ffff88804cc90d80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 85.087253][ T5319] ffff88804cc90e00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 85.090636][ T5319] >ffff88804cc90e80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 85.094117][ T5319] ^ [ 85.096793][ T5319] ffff88804cc90f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 85.100463][ T5319] ffff88804cc90f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 85.104098][ T5319] ================================================================== [ 85.154686][ T5319] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 85.157682][ T5319] CPU: 0 UID: 0 PID: 5319 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 85.161203][ T5319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.164950][ T5319] Call Trace: [ 85.166202][ T5319] [ 85.167291][ T5319] vpanic+0x56c/0xa60 [ 85.168999][ T5319] ? __pfx_vpanic+0x10/0x10 [ 85.171853][ T5319] ? rcu_is_watching+0x15/0xb0 [ 85.174722][ T5319] panic+0xc5/0xd0 [ 85.176382][ T5319] ? __pfx_panic+0x10/0x10 [ 85.177982][ T5319] ? preempt_schedule_thunk+0x16/0x40 [ 85.179923][ T5319] ? preempt_schedule_thunk+0x16/0x40 [ 85.182024][ T5319] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 85.184321][ T5319] check_panic_on_warn+0x89/0xb0 [ 85.186536][ T5319] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 85.189237][ T5319] end_report+0x73/0x170 [ 85.191549][ T5319] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 85.194114][ T5319] kasan_report+0x128/0x150 [ 85.196145][ T5319] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 85.198542][ T5319] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 85.201479][ T5319] kasan_check_range+0x264/0x2c0 [ 85.204145][ T5319] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 85.206864][ T5319] __asan_memmove+0x29/0x70 [ 85.208847][ T5319] ext4_xattr_set_entry+0x92b/0x1ed0 [ 85.211172][ T5319] ext4_xattr_ibody_set+0x262/0x710 [ 85.213390][ T5319] ext4_destroy_inline_data_nolock+0x23a/0x5f0 [ 85.216012][ T5319] ? __pfx_ext4_destroy_inline_data_nolock+0x10/0x10 [ 85.219535][ T5319] ? down_write+0x16d/0x200 [ 85.222082][ T5319] ? ext4_journal_check_start+0x1cf/0x2b0 [ 85.224602][ T5319] ext4_destroy_inline_data+0x83/0xe0 [ 85.226976][ T5319] ext4_do_writepages+0x573/0x47a0 [ 85.229154][ T5319] ? rcu_is_watching+0x15/0xb0 [ 85.231195][ T5319] ? rcu_is_watching+0x15/0xb0 [ 85.233796][ T5319] ? trace_irq_enable+0x3b/0x140 [ 85.236753][ T5319] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 85.239733][ T5319] ? stack_depot_save_flags+0x3ec/0x800 [ 85.242192][ T5319] ? __es_insert_extent+0x6f0/0x1780 [ 85.244533][ T5319] ? kasan_save_track+0x4f/0x80 [ 85.246691][ T5319] ? kasan_save_track+0x3e/0x80 [ 85.248824][ T5319] ? __kasan_slab_alloc+0x6c/0x80 [ 85.251063][ T5319] ? kmem_cache_alloc_noprof+0x2b8/0x650 [ 85.253579][ T5319] ? __es_insert_extent+0x6f0/0x1780 [ 85.256071][ T5319] ? ext4_da_get_block_prep+0xb44/0x1320 [ 85.258802][ T5319] ? generic_perform_write+0x2d5/0x8f0 [ 85.261658][ T5319] ? ext4_buffered_write_iter+0xcb/0x370 [ 85.264274][ T5319] ? ext4_file_write_iter+0x947/0x1c70 [ 85.266553][ T5319] ? vfs_write+0x612/0xba0 [ 85.268530][ T5319] ? __x64_sys_pwrite64+0x196/0x220 [ 85.270702][ T5319] ? do_syscall_64+0x174/0x580 [ 85.273090][ T5319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.276463][ T5319] ? __pfx_ext4_do_writepages+0x10/0x10 [ 85.279189][ T5319] ? rcu_is_watching+0x15/0xb0 [ 85.281165][ T5319] ? ext4_writepages+0x205/0x3b0 [ 85.283051][ T5319] ? rcu_is_watching+0x15/0xb0 [ 85.285014][ T5319] ? lock_acquire+0x5f/0x350 [ 85.286847][ T5319] ? preempt_count_add+0x91/0x190 [ 85.289283][ T5319] ext4_writepages+0x241/0x3b0 [ 85.291852][ T5319] ? lock_release+0x4b/0x3c0 [ 85.294315][ T5319] ? __pfx_ext4_writepages+0x10/0x10 [ 85.296731][ T5319] ? rcu_is_watching+0x15/0xb0 [ 85.298920][ T5319] ? __pfx_ext4_writepages+0x10/0x10 [ 85.301760][ T5319] do_writepages+0x338/0x560 [ 85.304235][ T5319] ? rcu_is_watching+0x15/0xb0 [ 85.306872][ T5319] ? do_raw_spin_unlock+0x4d/0x210 [ 85.309300][ T5319] file_write_and_wait_range+0x36e/0x440 [ 85.311880][ T5319] ? __pfx_file_write_and_wait_range+0x10/0x10 [ 85.314612][ T5319] ? __css_rstat_updated+0x235/0x540 [ 85.316971][ T5319] ? __pfx_filemap_get_entry+0x10/0x10 [ 85.319476][ T5319] ? folio_mkclean+0x2dc/0x3f0 [ 85.322026][ T5319] mmb_fsync_noflush+0x73/0x1d0 [ 85.324688][ T5319] ext4_sync_file+0x41a/0xd00 [ 85.326951][ T5319] ? __pfx_ext4_sync_file+0x10/0x10 [ 85.329388][ T5319] ? __pfx_generic_perform_write+0x10/0x10 [ 85.332010][ T5319] ? sync_lazytime+0x5a/0x4c0 [ 85.334360][ T5319] ext4_buffered_write_iter+0x2c7/0x370 [ 85.337362][ T5319] ? preempt_schedule_common+0x82/0xd0 [ 85.339882][ T5319] ext4_file_write_iter+0x947/0x1c70 [ 85.342311][ T5319] ? rcu_is_watching+0x15/0xb0 [ 85.344350][ T5319] ? lock_acquire+0x5f/0x350 [ 85.346368][ T5319] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 85.348824][ T5319] vfs_write+0x612/0xba0 [ 85.350847][ T5319] ? __pfx_vfs_write+0x10/0x10 [ 85.353712][ T5319] ? __fget_files+0x2a/0x420 [ 85.356648][ T5319] __x64_sys_pwrite64+0x196/0x220 [ 85.359325][ T5319] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 85.362230][ T5319] ? rcu_is_watching+0x15/0xb0 [ 85.364575][ T5319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.367897][ T5319] do_syscall_64+0x174/0x580 [ 85.370288][ T5319] ? trace_irq_disable+0x3b/0x140 [ 85.372451][ T5319] ? clear_bhb_loop+0x40/0x90 [ 85.374495][ T5319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.376917][ T5319] RIP: 0033:0x7feabd39ce59 [ 85.378802][ T5319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.387726][ T5319] RSP: 002b:00007feabe239fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 85.391587][ T5319] RAX: ffffffffffffffda RBX: 00007feabd615fa0 RCX: 00007feabd39ce59 [ 85.395108][ T5319] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000004 [ 85.398639][ T5319] RBP: 00007feabd432e6f R08: 0000000000000000 R09: 0000000000000000 [ 85.402645][ T5319] R10: 000000000000feca R11: 0000000000000246 R12: 0000000000000000 [ 85.406311][ T5319] R13: 00007feabd616038 R14: 00007feabd615fa0 R15: 00007ffedc7eadf8 [ 85.409889][ T5319] [ 85.411787][ T5319] Kernel Offset: disabled [ 85.413653][ T5319] Rebooting in 86400 seconds..