program: r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@jqfmt_vfsv1}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$eJzs3d9vU1UcAPDv7Tp+KyMhJPpgFnkQg3Rs8wcmPuCjUSKJvmOzXRaylpK1I2ySCA/y4oshJsZIYvwDfPeR+A/4V5AoCTFk0Qdfam53ywprt9EVNuznk9xyzj23nHt67vdwbs8lDWBojWcvhYhXIuLbJOJwR1kx8sLx1eNWHl6fybYkms3P/koiyfe1j0/yPw+2M8WI376OOFl4rMqx7KW+tDxfrlTShXznRKN6ZaK+tHzqUrU8l86ll6emp8+8Mz31/nvvDqytb57/54dP73505pvjK9//cv/I7STOxqG8rLMd23CjMzMe4/lnMhpnnzhwcgCV7SbJTp8AfRnJ43w0sjHgcIzkUQ/8/30VEU1gSCXiH4ZUex7Qvrcf0H3wC+PBh6s3QOvbX1z9biT2te6NDqwkj90ZJe0vMrYpq+PXP+/czrYY3PcQAJu6cTMiTheL68e/JB//+nd6C8c8WYfxD56fu9n8561u85/Co/lPdJn/HOwSu/3YPP4L9wdQTU/Z/O+DrvPffNFqLMZG8txLrexocvFSJc3Gtpcj4kSM7s3yG63nnFm51+xV1jn/y7as/vZcMD+P+8W9j79nttwob6/Vax7cjHi16/w3edT/SZf+zz6P81us41h657VeZZu3/9lq/hzxRtf+X1vRSjZen5xoXQ8T7ativb9vHfu9V/073f6s/w9s3P6xpHO9tv70dfy079+0V1m/1/+e5PNWek++71q50ViYjNiTfLJ+/9Tae9v59vFZ+08c33j863b974+IL7bY/ltHb/U8dFv9P4BF16z9s0/V/0+fuPfxlz/23/6s/99upU7ke7Yy/m31BLfz2QEAAAAAAMBuU4iIQ5EUSo/ShUKptPp8x9E4UKjU6o2TF2uvR6us9fxDob3SfbjjeYjJ/HnYdn7qifx0RByJiO9G9rfypZlaZXanGw8AAAAAAAAAAAAAAAAAAAC7xMEe//8/88fITp8d8Mz5yW8YXpvG/yB+6QnYlfz7D8NL/MPwEv8wvMQ/DC/xD8NL/MPwEv8wvMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAADNT5c+eyrbny8PpMlp+9urQ4X7t6ajatz5eqizOlmdrCldJcrTZXSUsztepmf1+lVrsyORWL1yYaab0xUV9avlCtLV5uXLhULc+lF9LR59IqAAAAAAAAAAAAAAAAAAAAeLHUl5bny5VKuiAh0VeiuDtOQ2LAiZ0emQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgzX8BAAD//7VBN58=") ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000000300)={0x72, 0x6, 0x6, 0x9, 0x6, 0xf91}) prctl$PR_GET_SECCOMP(0x15) r2 = socket(0x15, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r1], 0x14}, 0x1, 0x0, 0x0, 0x4000854}, 0x34040850) close(r2) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) socket$can_j1939(0x1d, 0x2, 0x7) chown(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa0) syz_usb_disconnect(0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000003b86cd8dc78e8f568cdbdf251a000000"], 0x14}, 0x1, 0x0, 0x0, 0x2040080}, 0x4000000) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xa, 0x8005, 0x0, 0x0, 0x1d, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cb07966d61fdcf333163bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) unlink(&(0x7f0000000100)='./bus\x00') map_shadow_stack(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="00b7b83139ae8caf803a9f4cf80f84f28034412bb0f6b9816d5fd90dd07974318d8164992dd6c1a331fbbd712b6fee1cc192293f3de7936a1b3b6a50f3d16f4f498b8b2c4e9c14c77c03c8dbf7c8cc8bc52351f907fd8483c1f385e1675dcb529b12940fc56e30712af54b9b8e45a083b6"], 0x1, 0xa07, &(0x7f0000000b00)="$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") r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) recvfrom$inet_nvme(r4, &(0x7f0000000240)=""/61, 0x3d, 0x40002020, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40106e80, 0x0) r7 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r7, 0x0, 0x0, 0x1001f0) fallocate(r7, 0x3, 0x9, 0x10000) copy_file_range(r7, 0x0, r7, &(0x7f00000000c0)=0xc000, 0xc000, 0x0) [ 108.829815][ T5334] loop0: detected capacity change from 0 to 1024 [ 108.839104][ T5334] EXT4-fs: Ignoring removed bh option [ 108.848370][ T4654] Bluetooth: hci0: command tx timeout [ 109.035742][ T5334] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 109.280857][ T5334] loop0: detected capacity change from 1024 to 64 [ 109.339296][ T5334] ================================================================== [ 109.345131][ T5334] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x92b/0x1ed0 [ 109.348743][ T5334] Read of size 18446744073709551600 at addr ffff88804d3a42b8 by task syz.0.0/5334 [ 109.353238][ T5334] [ 109.354639][ T5334] CPU: 0 UID: 0 PID: 5334 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 109.354662][ T5334] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 109.354671][ T5334] Call Trace: [ 109.354797][ T5334] [ 109.354806][ T5334] dump_stack_lvl+0xe8/0x150 [ 109.354830][ T5334] print_address_description+0x55/0x1e0 [ 109.354847][ T5334] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 109.354863][ T5334] print_report+0x58/0x70 [ 109.354877][ T5334] kasan_report+0x117/0x150 [ 109.354914][ T5334] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 109.354933][ T5334] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 109.354951][ T5334] kasan_check_range+0x264/0x2c0 [ 109.354965][ T5334] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 109.354983][ T5334] __asan_memmove+0x29/0x70 [ 109.355000][ T5334] ext4_xattr_set_entry+0x92b/0x1ed0 [ 109.355022][ T5334] ext4_xattr_ibody_set+0x262/0x710 [ 109.355040][ T5334] ext4_destroy_inline_data_nolock+0x23a/0x5f0 [ 109.355061][ T5334] ? __pfx_ext4_destroy_inline_data_nolock+0x10/0x10 [ 109.355083][ T5334] ? __asan_memcpy+0x40/0x70 [ 109.355097][ T5334] ? ext4_read_inline_data+0x100/0x2b0 [ 109.355116][ T5334] ext4_convert_inline_data_nolock+0x208/0x980 [ 109.355138][ T5334] ? __pfx_ext4_convert_inline_data_nolock+0x10/0x10 [ 109.355155][ T5334] ? down_write+0x16d/0x200 [ 109.355223][ T5334] ext4_convert_inline_data+0x484/0x5c0 [ 109.355246][ T5334] ? __pfx_ext4_convert_inline_data+0x10/0x10 [ 109.355266][ T5334] ? down_write+0x16d/0x200 [ 109.355284][ T5334] ? __pfx_down_write+0x10/0x10 [ 109.355303][ T5334] ext4_fallocate+0x1e2/0x400 [ 109.355322][ T5334] vfs_fallocate+0x65a/0x7e0 [ 109.355337][ T5334] ? __fget_files+0x2a/0x420 [ 109.355355][ T5334] ? __pfx_vfs_fallocate+0x10/0x10 [ 109.355371][ T5334] __x64_sys_fallocate+0xbf/0x110 [ 109.355386][ T5334] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.355400][ T5334] do_syscall_64+0x174/0x580 [ 109.355517][ T5334] ? trace_irq_disable+0x3b/0x140 [ 109.355533][ T5334] ? clear_bhb_loop+0x40/0x90 [ 109.355549][ T5334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.355564][ T5334] RIP: 0033:0x7ffa5619ce59 [ 109.355621][ T5334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.355635][ T5334] RSP: 002b:00007ffa57025fe8 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 109.355652][ T5334] RAX: ffffffffffffffda RBX: 00007ffa56415fa0 RCX: 00007ffa5619ce59 [ 109.355663][ T5334] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009 [ 109.355671][ T5334] RBP: 00007ffa56232e6f R08: 0000000000000000 R09: 0000000000000000 [ 109.355681][ T5334] R10: 00000000001001f0 R11: 0000000000000246 R12: 0000000000000000 [ 109.355690][ T5334] R13: 00007ffa56416038 R14: 00007ffa56415fa0 R15: 00007fffdf228ea8 [ 109.355706][ T5334] [ 109.355711][ T5334] [ 109.483681][ T5334] The buggy address belongs to the physical page: [ 109.487122][ T5334] page: refcount:2 mapcount:0 mapping:ffff88801cc25940 index:0x2 pfn:0x4d3a4 [ 109.491144][ T5334] memcg:ffff8880437a3b80 [ 109.493021][ T5334] aops:def_blk_aops ino:700000 dentry name(?):"" [ 109.495824][ T5334] flags: 0x4fff58000004234(referenced|dirty|lru|workingset|private|node=1|zone=1|lastcpupid=0x7ff) [ 109.501138][ T5334] raw: 04fff58000004234 ffff888030448a80 ffff888030448a80 ffff88801cc25940 [ 109.504775][ T5334] raw: 0000000000000002 ffff888043f4c8c0 00000002ffffffff ffff8880437a3b80 [ 109.508577][ T5334] page dumped because: kasan: bad access detected [ 109.511835][ T5334] page_owner tracks the page as allocated [ 109.514867][ T5334] page last allocated via order 0, migratetype Movable, gfp_mask 0x148c48(GFP_NOFS|__GFP_MOVABLE|__GFP_NOFAIL|__GFP_COMP|__GFP_HARDWALL), pid 5334, tgid 5333 (syz.0.0), ts 109335047397, free_ts 109328300687 [ 109.523417][ T5334] post_alloc_hook+0x1f9/0x250 [ 109.526013][ T5334] get_page_from_freelist+0x21fa/0x2270 [ 109.528835][ T5334] __alloc_frozen_pages_noprof+0x18d/0x380 [ 109.531430][ T5334] alloc_pages_mpol+0x212/0x380 [ 109.533620][ T5334] alloc_pages_noprof+0xac/0x2a0 [ 109.535755][ T5334] folio_alloc_noprof+0x1e/0x30 [ 109.537885][ T5334] filemap_alloc_folio_noprof+0x111/0x470 [ 109.540714][ T5334] __filemap_get_folio_mpol+0x402/0x1000 [ 109.543583][ T5334] bdev_getblk+0x1f4/0x6e0 [ 109.545450][ T5334] __ext4_get_inode_loc+0x56c/0xf40 [ 109.547749][ T5334] ext4_get_inode_loc+0x81/0xf0 [ 109.549828][ T5334] ext4_xattr_ibody_get+0x113/0x4b0 [ 109.552282][ T5334] ext4_xattr_get+0x121/0x690 [ 109.554793][ T5334] vfs_getxattr_alloc+0x454/0x5c0 [ 109.557517][ T5334] ima_read_xattr+0x38/0x60 [ 109.559761][ T5334] process_measurement+0x110a/0x1c10 [ 109.562022][ T5334] page last free pid 5334 tgid 5333 stack trace: [ 109.564634][ T5334] free_unref_folios+0xd84/0x14a0 [ 109.567011][ T5334] folios_put_refs+0x9e9/0xb30 [ 109.569283][ T5334] shmem_undo_range+0x4e6/0x15d0 [ 109.571734][ T5334] shmem_evict_inode+0x280/0xa80 [ 109.574146][ T5334] evict+0x624/0xb50 [ 109.575864][ T5334] dentry_kill+0x1b9/0x880 [ 109.577933][ T5334] finish_dput+0x1a/0x260 [ 109.579902][ T5334] __fput+0x675/0xa50 [ 109.581931][ T5334] fput_close_sync+0x11f/0x240 [ 109.584311][ T5334] __x64_sys_close+0x7e/0x110 [ 109.586370][ T5334] do_syscall_64+0x174/0x580 [ 109.588603][ T5334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.591116][ T5334] [ 109.592135][ T5334] Memory state around the buggy address: [ 109.594576][ T5334] ffff88804d3a4180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 109.598643][ T5334] ffff88804d3a4200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 109.603092][ T5334] >ffff88804d3a4280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 109.606672][ T5334] ^ [ 109.609402][ T5334] ffff88804d3a4300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 109.613024][ T5334] ffff88804d3a4380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 109.617038][ T5334] ================================================================== [ 109.644342][ T5334] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 109.647639][ T5334] CPU: 0 UID: 0 PID: 5334 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 109.651804][ T5334] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 109.656538][ T5334] Call Trace: [ 109.658033][ T5334] [ 109.659345][ T5334] vpanic+0x56c/0xa60 [ 109.661092][ T5334] ? __pfx_vpanic+0x10/0x10 [ 109.663074][ T5334] panic+0xc5/0xd0 [ 109.664852][ T5334] ? __pfx_panic+0x10/0x10 [ 109.666987][ T5334] ? preempt_schedule_thunk+0x16/0x40 [ 109.669547][ T5334] ? preempt_schedule_thunk+0x16/0x40 [ 109.672213][ T5334] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 109.674696][ T5334] check_panic_on_warn+0x89/0xb0 [ 109.677015][ T5334] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 109.679844][ T5334] end_report+0x73/0x170 [ 109.682019][ T5334] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 109.684667][ T5334] kasan_report+0x128/0x150 [ 109.686792][ T5334] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 109.689244][ T5334] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 109.692047][ T5334] kasan_check_range+0x264/0x2c0 [ 109.694516][ T5334] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 109.696903][ T5334] __asan_memmove+0x29/0x70 [ 109.698849][ T5334] ext4_xattr_set_entry+0x92b/0x1ed0 [ 109.701109][ T5334] ext4_xattr_ibody_set+0x262/0x710 [ 109.703612][ T5334] ext4_destroy_inline_data_nolock+0x23a/0x5f0 [ 109.706609][ T5334] ? __pfx_ext4_destroy_inline_data_nolock+0x10/0x10 [ 109.709343][ T5334] ? __asan_memcpy+0x40/0x70 [ 109.711292][ T5334] ? ext4_read_inline_data+0x100/0x2b0 [ 109.713659][ T5334] ext4_convert_inline_data_nolock+0x208/0x980 [ 109.716503][ T5334] ? __pfx_ext4_convert_inline_data_nolock+0x10/0x10 [ 109.719878][ T5334] ? down_write+0x16d/0x200 [ 109.722232][ T5334] ext4_convert_inline_data+0x484/0x5c0 [ 109.724597][ T5334] ? __pfx_ext4_convert_inline_data+0x10/0x10 [ 109.727357][ T5334] ? down_write+0x16d/0x200 [ 109.729698][ T5334] ? __pfx_down_write+0x10/0x10 [ 109.732336][ T5334] ext4_fallocate+0x1e2/0x400 [ 109.734568][ T5334] vfs_fallocate+0x65a/0x7e0 [ 109.736603][ T5334] ? __fget_files+0x2a/0x420 [ 109.738520][ T5334] ? __pfx_vfs_fallocate+0x10/0x10 [ 109.740913][ T5334] __x64_sys_fallocate+0xbf/0x110 [ 109.743399][ T5334] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.746798][ T5334] do_syscall_64+0x174/0x580 [ 109.749006][ T5334] ? trace_irq_disable+0x3b/0x140 [ 109.751180][ T5334] ? clear_bhb_loop+0x40/0x90 [ 109.753274][ T5334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.755899][ T5334] RIP: 0033:0x7ffa5619ce59 [ 109.757862][ T5334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.767236][ T5334] RSP: 002b:00007ffa57025fe8 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 109.771130][ T5334] RAX: ffffffffffffffda RBX: 00007ffa56415fa0 RCX: 00007ffa5619ce59 [ 109.774944][ T5334] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009 [ 109.778426][ T5334] RBP: 00007ffa56232e6f R08: 0000000000000000 R09: 0000000000000000 [ 109.781620][ T5334] R10: 00000000001001f0 R11: 0000000000000246 R12: 0000000000000000 [ 109.785208][ T5334] R13: 00007ffa56416038 R14: 00007ffa56415fa0 R15: 00007fffdf228ea8 [ 109.788998][ T5334] [ 109.790804][ T5334] Kernel Offset: disabled [ 109.792636][ T5334] Rebooting in 86400 seconds..