Extracting prog: 1m17.208499795s
Minimizing prog: 10m29.483017319s
Simplifying prog options: 0s
Extracting C: 42.614335785s
Simplifying C: 5m15.066941161s
extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-setxattr$incfs_metadata-lsetxattr$trusted_overlay_upper-lsetxattr$trusted_overlay_upper-lsetxattr$trusted_overlay_upper
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x10048d6, &(0x7f0000000080), 0x1, 0x574, &(0x7f00000003c0)="$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")
setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)="30573472b621739991c336124406e8a5c812ca847e3bf9b837c91d46ab", 0x1d, 0x1)
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000800)=ANY=[], 0x361, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380), 0x0, 0x0, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000480)=ANY=[], 0xfe37, 0x0)
program crashed: KASAN: out-of-bounds Read in ext4_xattr_set_entry
program crashed: KASAN: out-of-bounds Read in ext4_xattr_set_entry
single: successfully extracted reproducer
found reproducer with 5 syscalls
minimizing guilty program
testing program (duration=34.536218616s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-setxattr$incfs_metadata-lsetxattr$trusted_overlay_upper-lsetxattr$trusted_overlay_upper
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x10048d6, &(0x7f0000000080), 0x1, 0x574, &(0x7f00000003c0)="$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")
setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)="30573472b621739991c336124406e8a5c812ca847e3bf9b837c91d46ab", 0x1d, 0x1)
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000800)=ANY=[], 0x361, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380), 0x0, 0x0, 0x0)
program crashed: KASAN: out-of-bounds Read in ext4_xattr_set_entry
testing program (duration=34.536218616s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-setxattr$incfs_metadata-lsetxattr$trusted_overlay_upper
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x10048d6, &(0x7f0000000080), 0x1, 0x574, &(0x7f00000003c0)="$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")
setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)="30573472b621739991c336124406e8a5c812ca847e3bf9b837c91d46ab", 0x1d, 0x1)
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000800)=ANY=[], 0x361, 0x0)
program crashed: KASAN: out-of-bounds Read in ext4_xattr_set_entry
testing program (duration=34.536218616s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-setxattr$incfs_metadata
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x10048d6, &(0x7f0000000080), 0x1, 0x574, &(0x7f00000003c0)="$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")
setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)="30573472b621739991c336124406e8a5c812ca847e3bf9b837c91d46ab", 0x1d, 0x1)
program did not crash
testing program (duration=34.536218616s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-lsetxattr$trusted_overlay_upper
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x10048d6, &(0x7f0000000080), 0x1, 0x574, &(0x7f00000003c0)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000800)=ANY=[], 0x361, 0x0)
program did not crash
testing program (duration=34.536218616s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setxattr$incfs_metadata-lsetxattr$trusted_overlay_upper
detailed listing:
executing program 0:
setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)="30573472b621739991c336124406e8a5c812ca847e3bf9b837c91d46ab", 0x1d, 0x1)
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000800)=ANY=[], 0x361, 0x0)
program did not crash
testing program (duration=34.536218616s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-setxattr$incfs_metadata-lsetxattr$trusted_overlay_upper
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x10048d6, &(0x7f0000000080), 0x1, 0x574, &(0x7f00000003c0)="$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")
setxattr$incfs_metadata(0x0, &(0x7f0000000280), &(0x7f00000002c0)="30573472b621739991c336124406e8a5c812ca847e3bf9b837c91d46ab", 0x1d, 0x1)
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000800)=ANY=[], 0x361, 0x0)
program did not crash
testing program (duration=34.536218616s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-setxattr$incfs_metadata-lsetxattr$trusted_overlay_upper
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x10048d6, &(0x7f0000000080), 0x1, 0x574, &(0x7f00000003c0)="$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")
setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', 0x0, &(0x7f00000002c0)="30573472b621739991c336124406e8a5c812ca847e3bf9b837c91d46ab", 0x1d, 0x1)
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000800)=ANY=[], 0x361, 0x0)
program did not crash
testing program (duration=34.536218616s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-setxattr$incfs_metadata-lsetxattr$trusted_overlay_upper
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x10048d6, &(0x7f0000000080), 0x1, 0x574, &(0x7f00000003c0)="$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")
setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x1)
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000800)=ANY=[], 0x361, 0x0)
program did not crash
testing program (duration=34.536218616s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-setxattr$incfs_metadata-lsetxattr$trusted_overlay_upper
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x10048d6, &(0x7f0000000080), 0x1, 0x574, &(0x7f00000003c0)="$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")
setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0), 0x0, 0x1)
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000800)=ANY=[], 0x361, 0x0)
program did not crash
testing program (duration=34.536218616s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-setxattr$incfs_metadata-lsetxattr$trusted_overlay_upper
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x10048d6, &(0x7f0000000080), 0x1, 0x574, &(0x7f00000003c0)="$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")
setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)="30573472b621739991c336124406e8a5c812ca847e3bf9b837c91d46ab", 0x1d, 0x1)
lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000180), &(0x7f0000000800)=ANY=[], 0x361, 0x0)
program did not crash
testing program (duration=34.536218616s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-setxattr$incfs_metadata-lsetxattr$trusted_overlay_upper
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x10048d6, &(0x7f0000000080), 0x1, 0x574, &(0x7f00000003c0)="$eJzs3d9rW1UcAPDvTZv91nUwhopIwQcnc+na+mOCD/NZxwb6PkN7V0bTZTTpWOvA7cE9y9AHcSC+i88+Dv8BH/wbBjoYMooOfKnc9Cbrj7RNt7TLls8Hbjnn3puce3LuOf2enIQE0LeGsz+FiFcj4psk4nBEJPmxwcgPDi+ft/jw+kS2JbG09NnfSeO8LN98rubjDuaZVyLit68jThTWl1ubX5guVyrpbJ4fqc9cGanNL5y8NFOeSqfSy2Pj46ffGx/78IP3u1bXt8//+/25uwN57sjtJM7EoTy3sh5P4cbKzHAM569JMc6sOXG0C4X1kqTt3l92/TrYnoG8nxcjGwMOx0De64EX31cRsQT0qWTb/f+P4s5cCbC7mnFAc27fpXnwc+PBx8sToPX1H1x+byT2NeZGBxaTVTOjbL471IXyszJ+/evO7WyL7r0PAbClGzcj4tTg4PrxL8nHvyd3qoNz1pZh/IPdczeLf95pF/8UWvFPtIl/Drbpu09i6/5fuN+FYjaUxX8ftY1/W4tWQwN57qVGzFdMLl6qpNnY9nJEHI/i3iy/2XrO6cV7rTj73Herj62M/7ItK78ZC+bXcX9w7+rHTJbr5aeueO7BzYjX2sa/Sav9kzbtn70e5zss41h6542Njg1HFDav/85a+inirbbt/3hFK9l8fXKkcT+MNO+K9f65dez3jcrfuv13Vtb+Bzav/1Cycr22tv0yftz3Xxqt9eTVVtU/Or//9ySfN9J78n3XyvX67GjEnuTT1v5Cc//Y48c2883zs/off3Pz8a/d/b8/Ir7osP63jv78+kbHeqH9J9u2f2t2u6b9t5+498mXP2xUfmfj37uN1PF8TyfjX6cX+DSvHQAAAAAAAPSaQkQciqRQaqULhVJp+fMdR+NAoVKt1U9crM5dnozGd2WHolhornQfXvF5iNF8xbCZH1uTH4+IIxHx7cD+Rr40Ua1MPuvKAwAAAAAAAAAAAAAAAAAAQI84uMH3/zN/DjzrqwN2nJ/8hv61Zf/vxi89AT1pi/7/aM1vBQMvEPE/9C/9H/qX/g/9S/+H/rW+/z/yZh/0Cf//oX/p/wAAAAAAAAAAAAAAAAAAAAAAAAAAANBV58+ezbalxYfXJ7L85NX5uenq1ZOTaW26NDM3UZqozl4pTVWrU5W0NFGd2er5KtXqldGxmLs2Uk9r9ZHa/MKFmerc5fqFSzPlqfRCWtyVWgEAAAAAAAAAAAAAAAAAAMDzpTa/MF2uVNJZCYknSgz2xmVIdDnxrEcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjs/wAAAP//fH09zQ==")
setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)="30573472b621739991c336124406e8a5c812ca847e3bf9b837c91d46ab", 0x1d, 0x1)
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000800)=ANY=[], 0x361, 0x0)
program did not crash
testing program (duration=34.536218616s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-setxattr$incfs_metadata-lsetxattr$trusted_overlay_upper
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x10048d6, &(0x7f0000000080), 0x1, 0x574, &(0x7f00000003c0)="$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")
setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)="30573472b621739991c336124406e8a5c812ca847e3bf9b837c91d46ab", 0x1d, 0x1)
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), 0x0, 0x361, 0x0)
program did not crash
extracting C reproducer
testing compiled C program (duration=34.536218616s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-setxattr$incfs_metadata-lsetxattr$trusted_overlay_upper
program crashed: KASAN: out-of-bounds Read in ext4_xattr_set_entry
simplifying C reproducer
testing compiled C program (duration=34.536218616s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-setxattr$incfs_metadata-lsetxattr$trusted_overlay_upper
program crashed: KASAN: out-of-bounds Read in ext4_xattr_set_entry
testing compiled C program (duration=34.536218616s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-setxattr$incfs_metadata-lsetxattr$trusted_overlay_upper
program did not crash
testing compiled C program (duration=34.536218616s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-setxattr$incfs_metadata-lsetxattr$trusted_overlay_upper
program crashed: KASAN: out-of-bounds Read in ext4_xattr_set_entry
testing compiled C program (duration=34.536218616s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-setxattr$incfs_metadata-lsetxattr$trusted_overlay_upper
program crashed: KASAN: out-of-bounds Read in ext4_xattr_set_entry
testing compiled C program (duration=34.536218616s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-setxattr$incfs_metadata-lsetxattr$trusted_overlay_upper
program did not crash
testing compiled C program (duration=34.536218616s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-setxattr$incfs_metadata-lsetxattr$trusted_overlay_upper
program crashed: KASAN: out-of-bounds Read in ext4_xattr_set_entry
testing compiled C program (duration=34.536218616s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-setxattr$incfs_metadata-lsetxattr$trusted_overlay_upper
program crashed: KASAN: out-of-bounds Read in ext4_xattr_set_entry
testing program (duration=34.536218616s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-setxattr$incfs_metadata-lsetxattr$trusted_overlay_upper
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x10048d6, &(0x7f0000000080), 0x1, 0x574, &(0x7f00000003c0)="$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")
setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)="30573472b621739991c336124406e8a5c812ca847e3bf9b837c91d46ab", 0x1d, 0x1)
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000800)=ANY=[], 0x361, 0x0)
program crashed: KASAN: out-of-bounds Read in ext4_xattr_set_entry
validation run: crashed=true
testing program (duration=34.536218616s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-setxattr$incfs_metadata-lsetxattr$trusted_overlay_upper
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x10048d6, &(0x7f0000000080), 0x1, 0x574, &(0x7f00000003c0)="$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")
setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)="30573472b621739991c336124406e8a5c812ca847e3bf9b837c91d46ab", 0x1d, 0x1)
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000800)=ANY=[], 0x361, 0x0)
program crashed: KASAN: out-of-bounds Read in ext4_xattr_set_entry
validation run: crashed=true
testing program (duration=34.536218616s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-setxattr$incfs_metadata-lsetxattr$trusted_overlay_upper
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x10048d6, &(0x7f0000000080), 0x1, 0x574, &(0x7f00000003c0)="$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")
setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)="30573472b621739991c336124406e8a5c812ca847e3bf9b837c91d46ab", 0x1d, 0x1)
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000800)=ANY=[], 0x361, 0x0)
program crashed: KASAN: out-of-bounds Read in ext4_xattr_set_entry
validation run: crashed=true
reproducing took 20m24.204289182s
repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x979/0x21d0 fs/ext4/xattr.c:1730
Read of size 18446744073709551588 at addr ffff88811a35b040 by task syz.2.64/503
CPU: 1 PID: 503 Comm: syz.2.64 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
Call Trace:
__dump_stack+0x21/0x24 lib/dump_stack.c:88
dump_stack_lvl+0x110/0x170 lib/dump_stack.c:106
print_address_description+0x71/0x200 mm/kasan/report.c:316
print_report+0x4a/0x60 mm/kasan/report.c:420
kasan_report+0x122/0x150 mm/kasan/report.c:524
check_region_inline mm/kasan/generic.c:-1 [inline]
kasan_check_range+0x249/0x2a0 mm/kasan/generic.c:189
memmove+0x2d/0x70 mm/kasan/shadow.c:54
ext4_xattr_set_entry+0x979/0x21d0 fs/ext4/xattr.c:1730
ext4_xattr_block_set+0xad3/0x3260 fs/ext4/xattr.c:1977
ext4_xattr_set_handle+0x1338/0x1570 fs/ext4/xattr.c:2399
ext4_xattr_set+0x242/0x320 fs/ext4/xattr.c:2501
ext4_xattr_trusted_set+0x3c/0x50 fs/ext4/xattr_trusted.c:38
__vfs_setxattr+0x3f2/0x440 fs/xattr.c:182
__vfs_setxattr_noperm+0x12a/0x5e0 fs/xattr.c:216
__vfs_setxattr_locked+0x212/0x230 fs/xattr.c:277
vfs_setxattr+0x167/0x2e0 fs/xattr.c:309
do_setxattr fs/xattr.c:594 [inline]
setxattr+0x346/0x360 fs/xattr.c:617
path_setxattr+0x147/0x290 fs/xattr.c:636
__do_sys_lsetxattr fs/xattr.c:659 [inline]
__se_sys_lsetxattr fs/xattr.c:655 [inline]
__x64_sys_lsetxattr+0xc2/0xe0 fs/xattr.c:655
x64_sys_call+0x8b7/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:190
do_syscall_x64 arch/x86/entry/common.c:46 [inline]
do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:76
entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f165f59c819
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffcfe9b0168 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd
RAX: ffffffffffffffda RBX: 00007f165f815fa0 RCX: 00007f165f59c819
RDX: 0000200000000800 RSI: 0000200000000180 RDI: 00002000000001c0
RBP: 00007f165f632c91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000361 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f165f815fac R14: 00007f165f815fa0 R15: 00007f165f815fa0
Allocated by task 503:
kasan_save_stack mm/kasan/common.c:46 [inline]
kasan_set_track+0x4b/0x70 mm/kasan/common.c:53
kasan_save_alloc_info+0x25/0x30 mm/kasan/generic.c:505
____kasan_kmalloc mm/kasan/common.c:380 [inline]
__kasan_kmalloc+0x95/0xb0 mm/kasan/common.c:389
kasan_kmalloc include/linux/kasan.h:212 [inline]
__do_kmalloc_node mm/slab_common.c:938 [inline]
__kmalloc_node_track_caller+0xb1/0x1e0 mm/slab_common.c:958
kmemdup+0x2b/0x60 mm/util.c:134
kmemdup include/linux/fortify-string.h:585 [inline]
ext4_xattr_block_set+0x9d5/0x3260 fs/ext4/xattr.c:1925
ext4_xattr_set_handle+0x1338/0x1570 fs/ext4/xattr.c:2399
ext4_xattr_set+0x242/0x320 fs/ext4/xattr.c:2501
ext4_xattr_trusted_set+0x3c/0x50 fs/ext4/xattr_trusted.c:38
__vfs_setxattr+0x3f2/0x440 fs/xattr.c:182
__vfs_setxattr_noperm+0x12a/0x5e0 fs/xattr.c:216
__vfs_setxattr_locked+0x212/0x230 fs/xattr.c:277
vfs_setxattr+0x167/0x2e0 fs/xattr.c:309
do_setxattr fs/xattr.c:594 [inline]
setxattr+0x346/0x360 fs/xattr.c:617
path_setxattr+0x147/0x290 fs/xattr.c:636
__do_sys_lsetxattr fs/xattr.c:659 [inline]
__se_sys_lsetxattr fs/xattr.c:655 [inline]
__x64_sys_lsetxattr+0xc2/0xe0 fs/xattr.c:655
x64_sys_call+0x8b7/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:190
do_syscall_x64 arch/x86/entry/common.c:46 [inline]
do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:76
entry_SYSCALL_64_after_hwframe+0x68/0xd2
The buggy address belongs to the object at ffff88811a35b000
which belongs to the cache kmalloc-1k of size 1024
The buggy address is located 64 bytes inside of
1024-byte region [ffff88811a35b000, ffff88811a35b400)
The buggy address belongs to the physical page:
page:ffffea000468d600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11a358
head:ffffea000468d600 order:3 compound_mapcount:0 compound_pincount:0
flags: 0x4000000000010200(slab|head|zone=1)
raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043080
raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 114, tgid 114 (udevd), ts 4878225866, free_ts 0
set_page_owner include/linux/page_owner.h:33 [inline]
post_alloc_hook+0x1f5/0x210 mm/page_alloc.c:2670
prep_new_page+0x1c/0x110 mm/page_alloc.c:2677
get_page_from_freelist+0x2d12/0x2d80 mm/page_alloc.c:4583
__alloc_pages+0x1fa/0x610 mm/page_alloc.c:5924
alloc_slab_page+0x6e/0xf0 include/linux/gfp.h:-1
allocate_slab mm/slub.c:1967 [inline]
new_slab+0x98/0x3d0 mm/slub.c:2020
___slab_alloc+0x6bd/0xb20 mm/slub.c:3177
__slab_alloc+0x5e/0xa0 mm/slub.c:3263
slab_alloc_node mm/slub.c:3348 [inline]
__kmem_cache_alloc_node+0x203/0x2c0 mm/slub.c:3423
__do_kmalloc_node mm/slab_common.c:937 [inline]
__kmalloc_node_track_caller+0xa0/0x1e0 mm/slab_common.c:958
kmalloc_reserve net/core/skbuff.c:449 [inline]
__alloc_skb+0x236/0x4b0 net/core/skbuff.c:518
alloc_skb include/linux/skbuff.h:1322 [inline]
netlink_alloc_large_skb net/netlink/af_netlink.c:1183 [inline]
netlink_sendmsg+0x635/0xbd0 net/netlink/af_netlink.c:1848
sock_sendmsg_nosec net/socket.c:716 [inline]
__sock_sendmsg net/socket.c:728 [inline]
____sys_sendmsg+0x5cc/0x990 net/socket.c:2508
___sys_sendmsg+0x2a2/0x360 net/socket.c:2562
__sys_sendmsg net/socket.c:2591 [inline]
__do_sys_sendmsg net/socket.c:2600 [inline]
__se_sys_sendmsg net/socket.c:2598 [inline]
__x64_sys_sendmsg+0x205/0x2d0 net/socket.c:2598
x64_sys_call+0x171/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:47
page_owner free stack trace missing
Memory state around the buggy address:
ffff88811a35af00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
ffff88811a35af80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
>ffff88811a35b000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
^
ffff88811a35b080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
ffff88811a35b100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
==================================================================
final repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x979/0x21d0 fs/ext4/xattr.c:1730
Read of size 18446744073709551588 at addr ffff88811a35b040 by task syz.2.64/503
CPU: 1 PID: 503 Comm: syz.2.64 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
Call Trace:
__dump_stack+0x21/0x24 lib/dump_stack.c:88
dump_stack_lvl+0x110/0x170 lib/dump_stack.c:106
print_address_description+0x71/0x200 mm/kasan/report.c:316
print_report+0x4a/0x60 mm/kasan/report.c:420
kasan_report+0x122/0x150 mm/kasan/report.c:524
check_region_inline mm/kasan/generic.c:-1 [inline]
kasan_check_range+0x249/0x2a0 mm/kasan/generic.c:189
memmove+0x2d/0x70 mm/kasan/shadow.c:54
ext4_xattr_set_entry+0x979/0x21d0 fs/ext4/xattr.c:1730
ext4_xattr_block_set+0xad3/0x3260 fs/ext4/xattr.c:1977
ext4_xattr_set_handle+0x1338/0x1570 fs/ext4/xattr.c:2399
ext4_xattr_set+0x242/0x320 fs/ext4/xattr.c:2501
ext4_xattr_trusted_set+0x3c/0x50 fs/ext4/xattr_trusted.c:38
__vfs_setxattr+0x3f2/0x440 fs/xattr.c:182
__vfs_setxattr_noperm+0x12a/0x5e0 fs/xattr.c:216
__vfs_setxattr_locked+0x212/0x230 fs/xattr.c:277
vfs_setxattr+0x167/0x2e0 fs/xattr.c:309
do_setxattr fs/xattr.c:594 [inline]
setxattr+0x346/0x360 fs/xattr.c:617
path_setxattr+0x147/0x290 fs/xattr.c:636
__do_sys_lsetxattr fs/xattr.c:659 [inline]
__se_sys_lsetxattr fs/xattr.c:655 [inline]
__x64_sys_lsetxattr+0xc2/0xe0 fs/xattr.c:655
x64_sys_call+0x8b7/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:190
do_syscall_x64 arch/x86/entry/common.c:46 [inline]
do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:76
entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f165f59c819
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffcfe9b0168 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd
RAX: ffffffffffffffda RBX: 00007f165f815fa0 RCX: 00007f165f59c819
RDX: 0000200000000800 RSI: 0000200000000180 RDI: 00002000000001c0
RBP: 00007f165f632c91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000361 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f165f815fac R14: 00007f165f815fa0 R15: 00007f165f815fa0
Allocated by task 503:
kasan_save_stack mm/kasan/common.c:46 [inline]
kasan_set_track+0x4b/0x70 mm/kasan/common.c:53
kasan_save_alloc_info+0x25/0x30 mm/kasan/generic.c:505
____kasan_kmalloc mm/kasan/common.c:380 [inline]
__kasan_kmalloc+0x95/0xb0 mm/kasan/common.c:389
kasan_kmalloc include/linux/kasan.h:212 [inline]
__do_kmalloc_node mm/slab_common.c:938 [inline]
__kmalloc_node_track_caller+0xb1/0x1e0 mm/slab_common.c:958
kmemdup+0x2b/0x60 mm/util.c:134
kmemdup include/linux/fortify-string.h:585 [inline]
ext4_xattr_block_set+0x9d5/0x3260 fs/ext4/xattr.c:1925
ext4_xattr_set_handle+0x1338/0x1570 fs/ext4/xattr.c:2399
ext4_xattr_set+0x242/0x320 fs/ext4/xattr.c:2501
ext4_xattr_trusted_set+0x3c/0x50 fs/ext4/xattr_trusted.c:38
__vfs_setxattr+0x3f2/0x440 fs/xattr.c:182
__vfs_setxattr_noperm+0x12a/0x5e0 fs/xattr.c:216
__vfs_setxattr_locked+0x212/0x230 fs/xattr.c:277
vfs_setxattr+0x167/0x2e0 fs/xattr.c:309
do_setxattr fs/xattr.c:594 [inline]
setxattr+0x346/0x360 fs/xattr.c:617
path_setxattr+0x147/0x290 fs/xattr.c:636
__do_sys_lsetxattr fs/xattr.c:659 [inline]
__se_sys_lsetxattr fs/xattr.c:655 [inline]
__x64_sys_lsetxattr+0xc2/0xe0 fs/xattr.c:655
x64_sys_call+0x8b7/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:190
do_syscall_x64 arch/x86/entry/common.c:46 [inline]
do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:76
entry_SYSCALL_64_after_hwframe+0x68/0xd2
The buggy address belongs to the object at ffff88811a35b000
which belongs to the cache kmalloc-1k of size 1024
The buggy address is located 64 bytes inside of
1024-byte region [ffff88811a35b000, ffff88811a35b400)
The buggy address belongs to the physical page:
page:ffffea000468d600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11a358
head:ffffea000468d600 order:3 compound_mapcount:0 compound_pincount:0
flags: 0x4000000000010200(slab|head|zone=1)
raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043080
raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 114, tgid 114 (udevd), ts 4878225866, free_ts 0
set_page_owner include/linux/page_owner.h:33 [inline]
post_alloc_hook+0x1f5/0x210 mm/page_alloc.c:2670
prep_new_page+0x1c/0x110 mm/page_alloc.c:2677
get_page_from_freelist+0x2d12/0x2d80 mm/page_alloc.c:4583
__alloc_pages+0x1fa/0x610 mm/page_alloc.c:5924
alloc_slab_page+0x6e/0xf0 include/linux/gfp.h:-1
allocate_slab mm/slub.c:1967 [inline]
new_slab+0x98/0x3d0 mm/slub.c:2020
___slab_alloc+0x6bd/0xb20 mm/slub.c:3177
__slab_alloc+0x5e/0xa0 mm/slub.c:3263
slab_alloc_node mm/slub.c:3348 [inline]
__kmem_cache_alloc_node+0x203/0x2c0 mm/slub.c:3423
__do_kmalloc_node mm/slab_common.c:937 [inline]
__kmalloc_node_track_caller+0xa0/0x1e0 mm/slab_common.c:958
kmalloc_reserve net/core/skbuff.c:449 [inline]
__alloc_skb+0x236/0x4b0 net/core/skbuff.c:518
alloc_skb include/linux/skbuff.h:1322 [inline]
netlink_alloc_large_skb net/netlink/af_netlink.c:1183 [inline]
netlink_sendmsg+0x635/0xbd0 net/netlink/af_netlink.c:1848
sock_sendmsg_nosec net/socket.c:716 [inline]
__sock_sendmsg net/socket.c:728 [inline]
____sys_sendmsg+0x5cc/0x990 net/socket.c:2508
___sys_sendmsg+0x2a2/0x360 net/socket.c:2562
__sys_sendmsg net/socket.c:2591 [inline]
__do_sys_sendmsg net/socket.c:2600 [inline]
__se_sys_sendmsg net/socket.c:2598 [inline]
__x64_sys_sendmsg+0x205/0x2d0 net/socket.c:2598
x64_sys_call+0x171/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:47
page_owner free stack trace missing
Memory state around the buggy address:
ffff88811a35af00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
ffff88811a35af80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
>ffff88811a35b000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
^
ffff88811a35b080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
ffff88811a35b100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
==================================================================