program: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000580)={[{@delalloc}, {}, {@nodioread_nolock}, {@norecovery}, {@dioread_nolock}, {@oldalloc}, {@oldalloc}, {@sysvgroups}, {@nodioread_nolock}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143841, 0x114) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f0000003280)=ANY=[], 0x1, 0xd99, &(0x7f0000006900)="$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") openat$nullb(0xffffffffffffff9c, 0x0, 0x44800, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x40c8, &(0x7f0000000280)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}]}, 0xfb, 0x496, &(0x7f0000000f40)="$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") chdir(&(0x7f0000000340)='./file0\x00') creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x40002101) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000640)={0x0, {}, 0x0, {}, 0x7fff, 0x3, 0x17, 0x0, "22536af39b7c7cb7435b0a43852dbc3a9ada34cc97af10fd4fcca15748328c53096c2f359e9ba743d30b59c491a7b3e74d938981061383374a1d79471a2d2dfe", "0410b15a7d62289113be3626f4e23806009c7416000000000019b0cff500", [0x3, 0xf9f]}) mount(0x0, 0x0, 0x0, 0x2390024, 0x0) syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x2200050, &(0x7f00000000c0)=ANY=[], 0xfe, 0x1be, &(0x7f0000000440)="$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") open(0x0, 0x14927e, 0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000000c0)={0x0, @can, @phonet, @nfc, 0x0, 0x0, 0x0, 0x0, 0x15, &(0x7f0000000080)='gre0\x00'}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000c00000095"], &(0x7f0000000240)='GPL\x00'}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='start_task_reaping\x00', r2}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r3, 0x58, &(0x7f0000000100)}, 0x10) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f0000000640)=@file={0x1, './file0/../file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004000}}], 0x2, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000003c0)={0x0, 0x2, 0x7fff, 0xffff}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) fallocate(r5, 0x10, 0x3, 0x7c27) write$usbip_server(r5, &(0x7f0000001b40)=@ret_submit={{0x3, 0x7, 0x0, 0x0, 0x3}, 0xf24, 0x0, 0x1, 0x0, 0x7fff}, 0x30) [ 94.509304][ T4649] Bluetooth: hci0: command tx timeout [ 94.726745][ T5322] loop0: detected capacity change from 0 to 1024 [ 94.748482][ T5322] EXT4-fs: Ignoring removed oldalloc option [ 94.748498][ T5322] EXT4-fs: Ignoring removed oldalloc option [ 94.792226][ T5322] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.902350][ T5322] loop0: detected capacity change from 1024 to 960 [ 94.954171][ T5322] ================================================================== [ 94.954183][ T5322] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x92b/0x1ed0 [ 94.954302][ T5322] Read of size 18446744073709551600 at addr ffff8880138a32b8 by task syz.0.0/5322 [ 94.954313][ T5322] [ 94.954321][ T5322] CPU: 0 UID: 0 PID: 5322 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 94.954334][ T5322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.954342][ T5322] Call Trace: [ 94.954348][ T5322] [ 94.954364][ T5322] dump_stack_lvl+0xe8/0x150 [ 94.954384][ T5322] print_address_description+0x55/0x1e0 [ 94.954401][ T5322] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 94.954416][ T5322] print_report+0x58/0x70 [ 94.954430][ T5322] kasan_report+0x117/0x150 [ 94.954444][ T5322] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 94.954461][ T5322] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 94.954475][ T5322] kasan_check_range+0x264/0x2c0 [ 94.954488][ T5322] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 94.954503][ T5322] __asan_memmove+0x29/0x70 [ 94.954518][ T5322] ext4_xattr_set_entry+0x92b/0x1ed0 [ 94.954537][ T5322] ext4_xattr_ibody_set+0x262/0x710 [ 94.954552][ T5322] ext4_destroy_inline_data_nolock+0x23a/0x5f0 [ 94.954571][ T5322] ? __pfx_ext4_destroy_inline_data_nolock+0x10/0x10 [ 94.954592][ T5322] ? __asan_memcpy+0x40/0x70 [ 94.954606][ T5322] ? ext4_read_inline_data+0x100/0x2b0 [ 94.954623][ T5322] ext4_convert_inline_data_nolock+0x208/0x980 [ 94.954641][ T5322] ? __pfx_ext4_convert_inline_data_nolock+0x10/0x10 [ 94.954657][ T5322] ? down_write+0x16b/0x200 [ 94.954714][ T5322] ext4_convert_inline_data+0x484/0x5c0 [ 94.954726][ T5322] ? __pfx_ext4_convert_inline_data+0x10/0x10 [ 94.954738][ T5322] ? down_write+0x16b/0x200 [ 94.954752][ T5322] ? __pfx_down_write+0x10/0x10 [ 94.954768][ T5322] ext4_fallocate+0x1e2/0x400 [ 94.954784][ T5322] vfs_fallocate+0x65a/0x7e0 [ 94.954802][ T5322] ? __pfx_vfs_fallocate+0x10/0x10 [ 94.954845][ T5322] file_ioctl+0x564/0x7d0 [ 94.954865][ T5322] ? __pfx_file_ioctl+0x10/0x10 [ 94.954884][ T5322] ? kasan_quarantine_put+0xbb/0x1f0 [ 94.954902][ T5322] ? tomoyo_path_number_perm+0x219/0x5f0 [ 94.954919][ T5322] ? tomoyo_path_number_perm+0x219/0x5f0 [ 94.954937][ T5322] do_vfs_ioctl+0xc27/0x1530 [ 94.954959][ T5322] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 94.954977][ T5322] ? __sys_sendmmsg+0x49f/0x4d0 [ 94.954993][ T5322] ? hook_file_ioctl+0x1f2/0x600 [ 94.955011][ T5322] ? __fget_files+0x2a/0x420 [ 94.955025][ T5322] ? __fget_files+0x2a/0x420 [ 94.955037][ T5322] ? __fget_files+0x3a2/0x420 [ 94.955049][ T5322] ? __fget_files+0x2a/0x420 [ 94.955063][ T5322] ? bpf_lsm_file_ioctl+0x9/0x20 [ 94.955078][ T5322] __se_sys_ioctl+0x82/0x170 [ 94.955094][ T5322] do_syscall_64+0x166/0x520 [ 94.955107][ T5322] ? trace_irq_disable+0x3b/0x140 [ 94.955118][ T5322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.955128][ T5322] ? clear_bhb_loop+0x70/0xc0 [ 94.955141][ T5322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.955151][ T5322] RIP: 0033:0x7ff49e79e159 [ 94.955162][ T5322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.955173][ T5322] RSP: 002b:00007ff49f713fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 94.955188][ T5322] RAX: ffffffffffffffda RBX: 00007ff49ea25fa0 RCX: 00007ff49e79e159 [ 94.955197][ T5322] RDX: 00002000000003c0 RSI: 0000000040305828 RDI: 0000000000000004 [ 94.955205][ T5322] RBP: 00007ff49e83506b R08: 0000000000000000 R09: 0000000000000000 [ 94.955212][ T5322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.955219][ T5322] R13: 00007ff49ea26038 R14: 00007ff49ea25fa0 R15: 00007ffd3df7a9d8 [ 94.955231][ T5322] [ 94.955235][ T5322] [ 94.955238][ T5322] The buggy address belongs to the physical page: [ 94.955243][ T5322] page: refcount:3 mapcount:0 mapping:ffff88801d025940 index:0x2 pfn:0x138a3 [ 94.955254][ T5322] memcg:ffff888013651f80 [ 94.955260][ T5322] aops:def_blk_aops ino:700000 dentry name(?):"" [ 94.955344][ T5322] flags: 0xfff18000004204(referenced|workingset|private|node=0|zone=1|lastcpupid=0x7ff) [ 94.955361][ T5322] raw: 00fff18000004204 0000000000000000 dead000000000122 ffff88801d025940 [ 94.955372][ T5322] raw: 0000000000000002 ffff8880441698c0 00000003ffffffff ffff888013651f80 [ 94.955378][ T5322] page dumped because: kasan: bad access detected [ 94.955383][ T5322] page_owner tracks the page as allocated [ 94.955387][ T5322] page last allocated via order 0, migratetype Movable, gfp_mask 0x148c48(GFP_NOFS|__GFP_MOVABLE|__GFP_NOFAIL|__GFP_COMP|__GFP_HARDWALL), pid 5322, tgid 5321 (syz.0.0), ts 94950065906 [ 94.955404][ T5322] post_alloc_hook+0x1f9/0x250 [ 94.955418][ T5322] get_page_from_freelist+0x2209/0x2280 [ 94.955433][ T5322] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 94.955447][ T5322] alloc_pages_mpol+0x21e/0x390 [ 94.955457][ T5322] alloc_pages_noprof+0xb1/0x2b0 [ 94.955467][ T5322] folio_alloc_noprof+0x1e/0x30 [ 94.955476][ T5322] filemap_alloc_folio_noprof+0x111/0x460 [ 94.955487][ T5322] __filemap_get_folio_mpol+0x402/0x1000 [ 94.955498][ T5322] bdev_getblk+0x1f4/0x6e0 [ 94.955507][ T5322] __ext4_get_inode_loc+0x56c/0xf40 [ 94.955520][ T5322] ext4_get_inode_loc+0x81/0xf0 [ 94.955530][ T5322] ext4_convert_inline_data+0x261/0x5c0 [ 94.955539][ T5322] ext4_fallocate+0x1e2/0x400 [ 94.955553][ T5322] vfs_fallocate+0x65a/0x7e0 [ 94.955567][ T5322] file_ioctl+0x564/0x7d0 [ 94.955580][ T5322] do_vfs_ioctl+0xc27/0x1530 [ 94.955595][ T5322] page last free pid 71 tgid 71 ts 94939680784 stack trace: [ 94.955602][ T5322] free_unref_folios+0xdc2/0x14e0 [ 94.955616][ T5322] shrink_folio_list+0x4a2d/0x5250 [ 94.955632][ T5322] evict_folios+0x3055/0x3fb0 [ 94.955644][ T5322] try_to_shrink_lruvec+0xe3b/0x1340 [ 94.955659][ T5322] shrink_one+0x233/0x730 [ 94.955671][ T5322] shrink_node+0x35d0/0x3e30 [ 94.955684][ T5322] kswapd+0x185e/0x32c0 [ 94.955694][ T5322] kthread+0x38b/0x480 [ 94.955703][ T5322] ret_from_fork+0x514/0xb70 [ 94.955712][ T5322] ret_from_fork_asm+0x1a/0x30 [ 94.955726][ T5322] [ 94.955730][ T5322] Memory state around the buggy address: [ 94.955735][ T5322] ffff8880138a3180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 94.955743][ T5322] ffff8880138a3200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 94.955750][ T5322] >ffff8880138a3280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 94.955755][ T5322] ^ [ 94.955761][ T5322] ffff8880138a3300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 94.955768][ T5322] ffff8880138a3380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 94.955773][ T5322] ================================================================== [ 94.955830][ T5322] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 95.232089][ T5322] CPU: 0 UID: 0 PID: 5322 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 95.235966][ T5322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.240379][ T5322] Call Trace: [ 95.241947][ T5322] [ 95.243321][ T5322] vpanic+0x56d/0xa60 [ 95.245091][ T5322] ? __pfx_vpanic+0x10/0x10 [ 95.247182][ T5322] panic+0xc5/0xd0 [ 95.248806][ T5322] ? __pfx_panic+0x10/0x10 [ 95.250671][ T5322] ? preempt_schedule_thunk+0x16/0x40 [ 95.252997][ T5322] ? preempt_schedule_thunk+0x16/0x40 [ 95.255387][ T5322] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 95.257886][ T5322] check_panic_on_warn+0x89/0xb0 [ 95.260109][ T5322] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 95.262517][ T5322] end_report+0x73/0x170 [ 95.264394][ T5322] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 95.266746][ T5322] kasan_report+0x128/0x150 [ 95.268775][ T5322] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 95.271137][ T5322] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 95.273479][ T5322] kasan_check_range+0x264/0x2c0 [ 95.275593][ T5322] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 95.277932][ T5322] __asan_memmove+0x29/0x70 [ 95.279888][ T5322] ext4_xattr_set_entry+0x92b/0x1ed0 [ 95.282175][ T5322] ext4_xattr_ibody_set+0x262/0x710 [ 95.284414][ T5322] ext4_destroy_inline_data_nolock+0x23a/0x5f0 [ 95.287147][ T5322] ? __pfx_ext4_destroy_inline_data_nolock+0x10/0x10 [ 95.290136][ T5322] ? __asan_memcpy+0x40/0x70 [ 95.292093][ T5322] ? ext4_read_inline_data+0x100/0x2b0 [ 95.294445][ T5322] ext4_convert_inline_data_nolock+0x208/0x980 [ 95.297300][ T5322] ? __pfx_ext4_convert_inline_data_nolock+0x10/0x10 [ 95.300299][ T5322] ? down_write+0x16b/0x200 [ 95.302413][ T5322] ext4_convert_inline_data+0x484/0x5c0 [ 95.304934][ T5322] ? __pfx_ext4_convert_inline_data+0x10/0x10 [ 95.307722][ T5322] ? down_write+0x16b/0x200 [ 95.309776][ T5322] ? __pfx_down_write+0x10/0x10 [ 95.311899][ T5322] ext4_fallocate+0x1e2/0x400 [ 95.314016][ T5322] vfs_fallocate+0x65a/0x7e0 [ 95.316106][ T5322] ? __pfx_vfs_fallocate+0x10/0x10 [ 95.318442][ T5322] file_ioctl+0x564/0x7d0 [ 95.320416][ T5322] ? __pfx_file_ioctl+0x10/0x10 [ 95.322572][ T5322] ? kasan_quarantine_put+0xbb/0x1f0 [ 95.324877][ T5322] ? tomoyo_path_number_perm+0x219/0x5f0 [ 95.327362][ T5322] ? tomoyo_path_number_perm+0x219/0x5f0 [ 95.329819][ T5322] do_vfs_ioctl+0xc27/0x1530 [ 95.331862][ T5322] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 95.334133][ T5322] ? __sys_sendmmsg+0x49f/0x4d0 [ 95.336382][ T5322] ? hook_file_ioctl+0x1f2/0x600 [ 95.338658][ T5322] ? __fget_files+0x2a/0x420 [ 95.340740][ T5322] ? __fget_files+0x2a/0x420 [ 95.342832][ T5322] ? __fget_files+0x3a2/0x420 [ 95.344943][ T5322] ? __fget_files+0x2a/0x420 [ 95.347064][ T5322] ? bpf_lsm_file_ioctl+0x9/0x20 [ 95.349190][ T5322] __se_sys_ioctl+0x82/0x170 [ 95.351285][ T5322] do_syscall_64+0x166/0x520 [ 95.353415][ T5322] ? trace_irq_disable+0x3b/0x140 [ 95.355708][ T5322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.358425][ T5322] ? clear_bhb_loop+0x70/0xc0 [ 95.360567][ T5322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.363270][ T5322] RIP: 0033:0x7ff49e79e159 [ 95.365337][ T5322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.373401][ T5322] RSP: 002b:00007ff49f713fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 95.377105][ T5322] RAX: ffffffffffffffda RBX: 00007ff49ea25fa0 RCX: 00007ff49e79e159 [ 95.380521][ T5322] RDX: 00002000000003c0 RSI: 0000000040305828 RDI: 0000000000000004 [ 95.383899][ T5322] RBP: 00007ff49e83506b R08: 0000000000000000 R09: 0000000000000000 [ 95.387371][ T5322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.390737][ T5322] R13: 00007ff49ea26038 R14: 00007ff49ea25fa0 R15: 00007ffd3df7a9d8 [ 95.393697][ T5322] [ 95.395447][ T5322] Kernel Offset: disabled [ 95.397405][ T5322] Rebooting in 86400 seconds..