program: r0 = socket$kcm(0x10, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000010, &(0x7f0000000280)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x81, 0x7a5, &(0x7f0000000f80)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) pwrite64(r1, &(0x7f0000000080)='3', 0x1, 0xfeca) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4060040}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000011000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000040000000c001a8008000580"], 0x2c}}, 0x800) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) splice(r3, 0x0, r5, 0x0, 0x4ffe2, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r8, 0xc1105518, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24000000) r9 = io_uring_setup(0x8a8, &(0x7f00000005c0)={0x0, 0xd046, 0x100, 0x2, 0x18}) io_uring_register$IORING_UNREGISTER_RING_FDS(r9, 0x15, &(0x7f0000006a00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)}, {0x0, 0x0, 0x0, 0x0, 0x0}], 0x2) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) listxattr(&(0x7f0000000200)='./file1\x00', &(0x7f00000004c0)=""/250, 0xfa) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=@delchain={0x24, 0x11, 0x400, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r12, {0x10, 0x1}, {0x0, 0xc}, {0x4, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) recvfrom$packet(r11, &(0x7f0000000300)=""/76, 0x4c, 0x2, &(0x7f00000001c0)={0x11, 0x19, r12, 0x1, 0x7, 0x6, @multicast}, 0x14) [ 90.98268[ 90.979982][ T5334] loop0: detected capacity change from 0 to 2048 [ 90.987738][ T4660] Bluetooth: hci0: command tx timeout [ 91.158086][ T5334] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.226852][ T5334] loop0: detected capacity change from 2048 to 64 [ 91.249410][ T5334] EXT4-fs error (device loop0): xattr_find_entry:337: inode #15: comm syz.0.0: corrupted xattr entries [ 91.257114][ T5334] EXT4-fs error (device loop0): get_max_inline_xattr_value_size:74: inode #15: comm syz.0.0: corrupt xattr in inline inode [ 91.264763][ T5334] EXT4-fs error (device loop0): xattr_find_entry:337: inode #15: comm syz.0.0: corrupted xattr entries [ 91.272873][ T5334] EXT4-fs error (device loop0): ext4_ind_map_blocks:604: inode #15: comm syz.0.0: Can't allocate blocks for non-extent mapped inodes with bigalloc [ 91.283335][ T5334] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 117 [ 91.288946][ T5334] EXT4-fs (loop0): This should not happen!! Data will be lost [ 91.288946][ T5334] [ 91.351209][ T5335] netlink: 'syz.0.0': attribute type 2 has an invalid length. [ 91.357740][ T5335] ================================================================== [ 91.361149][ T5335] BUG: KASAN: use-after-free in ext4_xattr_list_entries+0x302/0x3d0 [ 91.364377][ T5335] Read of size 4 at addr ffff888054ea7014 by task syz.0.0/5335 [ 91.367471][ T5335] [ 91.368630][ T5335] CPU: 0 UID: 0 PID: 5335 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 91.368645][ T5335] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 91.368654][ T5335] Call Trace: [ 91.368662][ T5335] [ 91.368667][ T5335] dump_stack_lvl+0xe8/0x150 [ 91.368684][ T5335] print_address_description+0x55/0x1e0 [ 91.368696][ T5335] ? ext4_xattr_list_entries+0x302/0x3d0 [ 91.368709][ T5335] print_report+0x58/0x70 [ 91.368720][ T5335] kasan_report+0x117/0x150 [ 91.368738][ T5335] ? ext4_xattr_list_entries+0x302/0x3d0 [ 91.368751][ T5335] ext4_xattr_list_entries+0x302/0x3d0 [ 91.368763][ T5335] ? ext4_get_inode_loc+0xc5/0xf0 [ 91.368779][ T5335] ext4_listxattr+0x221/0x670 [ 91.368796][ T5335] ? rcu_is_watching+0x15/0xb0 [ 91.368812][ T5335] ? __pfx_ext4_listxattr+0x10/0x10 [ 91.368827][ T5335] ? listxattr+0x51/0x2a0 [ 91.368841][ T5335] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 91.368857][ T5335] ? __pfx_ext4_listxattr+0x10/0x10 [ 91.368871][ T5335] listxattr+0x112/0x2a0 [ 91.368886][ T5335] path_listxattrat+0x1a3/0x3f0 [ 91.368900][ T5335] ? __pfx_path_listxattrat+0x10/0x10 [ 91.368915][ T5335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.368925][ T5335] do_syscall_64+0x174/0x580 [ 91.368982][ T5335] ? trace_irq_disable+0x3b/0x140 [ 91.369001][ T5335] ? clear_bhb_loop+0x40/0x90 [ 91.369014][ T5335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.369027][ T5335] RIP: 0033:0x7f770139ce59 [ 91.369040][ T5335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.369049][ T5335] RSP: 002b:00007f77022ccfe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000c2 [ 91.369064][ T5335] RAX: ffffffffffffffda RBX: 00007f7701616090 RCX: 00007f770139ce59 [ 91.369072][ T5335] RDX: 00000000000000fa RSI: 00002000000004c0 RDI: 0000200000000200 [ 91.369089][ T5335] RBP: 00007f7701432d6f R08: 0000000000000000 R09: 0000000000000000 [ 91.369096][ T5335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.369104][ T5335] R13: 00007f7701616128 R14: 00007f7701616090 R15: 00007fff5c421e28 [ 91.369116][ T5335] [ 91.369119][ T5335] [ 91.455422][ T5335] The buggy address belongs to the physical page: [ 91.458065][ T5335] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x7f52521e5 pfn:0x54ea7 [ 91.461840][ T5335] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 91.464900][ T5335] raw: 04fff00000000000 ffffea00015337c8 ffffea000153a748 0000000000000000 [ 91.468552][ T5335] raw: 00000007f52521e5 0000000000000000 00000000ffffffff 0000000000000000 [ 91.472111][ T5335] page dumped because: kasan: bad access detected [ 91.474656][ T5335] page_owner tracks the page as freed [ 91.476838][ T5335] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 5336, tgid 5336 (dhcpcd), ts 89257909293, free_ts 91218540152 [ 91.483584][ T5335] post_alloc_hook+0x22d/0x280 [ 91.485618][ T5335] get_page_from_freelist+0x2593/0x2610 [ 91.488015][ T5335] __alloc_frozen_pages_noprof+0x18d/0x380 [ 91.490434][ T5335] alloc_pages_mpol+0x235/0x490 [ 91.492876][ T5335] folio_alloc_mpol_noprof+0x39/0x160 [ 91.494925][ T5335] vma_alloc_folio_noprof+0xe1/0x1e0 [ 91.497032][ T5335] do_wp_page+0x118a/0x4cc0 [ 91.498770][ T5335] handle_mm_fault+0x1698/0x3170 [ 91.500663][ T5335] do_user_addr_fault+0xa73/0x1340 [ 91.502623][ T5335] exc_page_fault+0x6a/0xc0 [ 91.504535][ T5335] asm_exc_page_fault+0x26/0x30 [ 91.506665][ T5335] page last free pid 5336 tgid 5336 stack trace: [ 91.509530][ T5335] free_unref_folios+0xd9f/0x14c0 [ 91.511730][ T5335] folios_put_refs+0x9ff/0xb40 [ 91.513807][ T5335] free_pages_and_swap_cache+0x2b9/0x490 [ 91.516292][ T5335] tlb_flush_mmu+0x6d3/0xa30 [ 91.518334][ T5335] tlb_finish_mmu+0xf9/0x230 [ 91.520249][ T5335] exit_mmap+0x498/0x9e0 [ 91.522070][ T5335] __mmput+0x118/0x430 [ 91.523733][ T5335] exit_mm+0x1f6/0x2d0 [ 91.525432][ T5335] do_exit+0x6a2/0x22c0 [ 91.527299][ T5335] do_group_exit+0x21b/0x2d0 [ 91.529405][ T5335] __x64_sys_exit_group+0x3f/0x40 [ 91.531638][ T5335] x64_sys_call+0x221a/0x2240 [ 91.533680][ T5335] do_syscall_64+0x174/0x580 [ 91.535714][ T5335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.538329][ T5335] [ 91.539370][ T5335] Memory state around the buggy address: [ 91.541740][ T5335] ffff888054ea6f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 91.545410][ T5335] ffff888054ea6f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 91.548736][ T5335] >ffff888054ea7000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 91.551863][ T5335] ^ [ 91.554007][ T5335] ffff888054ea7080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 91.557432][ T5335] ffff888054ea7100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 91.560893][ T5335] ================================================================== [ 91.579932][ T5335] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 91.583160][ T5335] CPU: 0 UID: 0 PID: 5335 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 91.587169][ T5335] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 91.591518][ T5335] Call Trace: [ 91.592970][ T5335] [ 91.594210][ T5335] vpanic+0x56c/0xa60 [ 91.595842][ T5335] ? __pfx_vpanic+0x10/0x10 [ 91.597713][ T5335] panic+0xc5/0xd0 [ 91.599288][ T5335] ? __pfx_panic+0x10/0x10 [ 91.601177][ T5335] ? preempt_schedule_thunk+0x16/0x30 [ 91.603259][ T5335] ? ext4_xattr_list_entries+0x302/0x3d0 [ 91.605612][ T5335] ? preempt_schedule_thunk+0x16/0x30 [ 91.607997][ T5335] ? ext4_xattr_list_entries+0x302/0x3d0 [ 91.610392][ T5335] check_panic_on_warn+0x89/0xb0 [ 91.612470][ T5335] ? ext4_xattr_list_entries+0x302/0x3d0 [ 91.614842][ T5335] end_report+0x73/0x170 [ 91.616687][ T5335] ? ext4_xattr_list_entries+0x302/0x3d0 [ 91.619076][ T5335] kasan_report+0x128/0x150 [ 91.621066][ T5335] ? ext4_xattr_list_entries+0x302/0x3d0 [ 91.623418][ T5335] ext4_xattr_list_entries+0x302/0x3d0 [ 91.625660][ T5335] ? ext4_get_inode_loc+0xc5/0xf0 [ 91.627753][ T5335] ext4_listxattr+0x221/0x670 [ 91.629779][ T5335] ? rcu_is_watching+0x15/0xb0 [ 91.631789][ T5335] ? __pfx_ext4_listxattr+0x10/0x10 [ 91.633886][ T5335] ? listxattr+0x51/0x2a0 [ 91.635727][ T5335] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 91.638190][ T5335] ? __pfx_ext4_listxattr+0x10/0x10 [ 91.640400][ T5335] listxattr+0x112/0x2a0 [ 91.642114][ T5335] path_listxattrat+0x1a3/0x3f0 [ 91.644297][ T5335] ? __pfx_path_listxattrat+0x10/0x10 [ 91.646664][ T5335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.649315][ T5335] do_syscall_64+0x174/0x580 [ 91.651296][ T5335] ? trace_irq_disable+0x3b/0x140 [ 91.653384][ T5335] ? clear_bhb_loop+0x40/0x90 [ 91.655373][ T5335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.657892][ T5335] RIP: 0033:0x7f770139ce59 [ 91.659803][ T5335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.667929][ T5335] RSP: 002b:00007f77022ccfe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000c2 [ 91.671471][ T5335] RAX: ffffffffffffffda RBX: 00007f7701616090 RCX: 00007f770139ce59 [ 91.674795][ T5335] RDX: 00000000000000fa RSI: 00002000000004c0 RDI: 0000200000000200 [ 91.678105][ T5335] RBP: 00007f7701432d6f R08: 0000000000000000 R09: 0000000000000000 [ 91.681447][ T5335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.684657][ T5335] R13: 00007f7701616128 R14: 00007f7701616090 R15: 00007fff5c421e28 [ 91.687853][ T5335] [ 91.689398][ T5335] Kernel Offset: disabled [ 91.691298][ T5335] Rebooting in 86400 seconds..