program: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000009dd373a34f915e1b8a880d7e79ba1c3ff2c8545b74c42717af88bb4183560e169bac2c09c5fca463783ed4c1ba2223894a5745b83d829efde98b5f7b63b1655d643e15b073a507484399b530", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000c00060001000000000000000c000200000000000000000004000780"], 0x30}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x14, &(0x7f00000004c0)={[{@i_version}, {@nodiscard}, {@grpjquota}]}, 0x1, 0x3f7, &(0x7f0000000ac0)="$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") truncate(&(0x7f00000000c0)='./file1\x00', 0xd) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000010, &(0x7f0000000280)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x85, 0x7a5, &(0x7f00000007c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r5, 0x29, 0x36, 0x0, &(0x7f00000006c0)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000280)='./file1\x00', 0x10001) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r2, 0x181, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000009dd373a34f915e1b8a880d7e79ba1c3ff2c8545b74c42717af88bb4183560e169bac2c09c5fca463783ed4c1ba2223894a5745b83d829efde98b5f7b63b1655d643e15b073a507484399b530", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000c00060001000000000000000c000200000000000000000004000780"], 0x30}}, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x14, &(0x7f00000004c0)={[{@i_version}, {@nodiscard}, {@grpjquota}]}, 0x1, 0x3f7, &(0x7f0000000ac0)="$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") (async) truncate(&(0x7f00000000c0)='./file1\x00', 0xd) (async) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000010, &(0x7f0000000280)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x85, 0x7a5, &(0x7f00000007c0)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) (async) creat(&(0x7f0000000380)='./bus\x00', 0x0) (async) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) getsockopt$inet6_opts(r5, 0x29, 0x36, 0x0, &(0x7f00000006c0)) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) (async) truncate(&(0x7f0000000280)='./file1\x00', 0x10001) (async) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r2, 0x181, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) (async) [ 92.534590][ T9] cfg80211: failed to load regulatory.db [ 92.573820][ T5290] Bluetooth: hci0: command tx timeout [ 92.616924][ T5330] loop0: detected capacity change from 0 to 512 [ 92.683536][ T5330] EXT4-fs: Ignoring removed i_version option [ 92.853670][ T5330] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.014904][ T5330] loop0: detected capacity change from 512 to 64 [ 93.085610][ T5329] ================================================================== [ 93.110303][ T5329] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x92b/0x1ed0 [ 93.114602][ T5329] Read of size 18446744073709551600 at addr ffff888013208d24 by task syz.0.0/5329 [ 93.119536][ T5329] [ 93.128736][ T5329] CPU: 0 UID: 0 PID: 5329 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 93.128759][ T5329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.128767][ T5329] Call Trace: [ 93.128788][ T5329] [ 93.128796][ T5329] dump_stack_lvl+0xe8/0x150 [ 93.128823][ T5329] print_address_description+0x55/0x1e0 [ 93.128843][ T5329] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 93.128858][ T5329] print_report+0x58/0x70 [ 93.128879][ T5329] kasan_report+0x117/0x150 [ 93.128898][ T5329] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 93.128909][ T5329] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 93.128920][ T5329] kasan_check_range+0x264/0x2c0 [ 93.128934][ T5329] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 93.128945][ T5329] __asan_memmove+0x29/0x70 [ 93.128957][ T5329] ext4_xattr_set_entry+0x92b/0x1ed0 [ 93.128975][ T5329] ext4_xattr_ibody_set+0x262/0x710 [ 93.128989][ T5329] ext4_destroy_inline_data_nolock+0x23a/0x5f0 [ 93.129007][ T5329] ? __pfx_ext4_destroy_inline_data_nolock+0x10/0x10 [ 93.129025][ T5329] ? __asan_memcpy+0x40/0x70 [ 93.129037][ T5329] ? ext4_read_inline_data+0x100/0x2b0 [ 93.129051][ T5329] ext4_convert_inline_data_nolock+0x208/0x980 [ 93.129068][ T5329] ? __pfx_ext4_convert_inline_data_nolock+0x10/0x10 [ 93.129083][ T5329] ? down_write+0x16d/0x200 [ 93.129198][ T5329] ext4_convert_inline_data+0x484/0x5c0 [ 93.129216][ T5329] ? __pfx_ext4_convert_inline_data+0x10/0x10 [ 93.129232][ T5329] ? down_read+0x2be/0x330 [ 93.129245][ T5329] ? file_update_time_flags+0x400/0x4a0 [ 93.129264][ T5329] ext4_page_mkwrite+0x244/0x1140 [ 93.129278][ T5329] ? __lock_acquire+0x683/0x2cf0 [ 93.129295][ T5329] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 93.129307][ T5329] ? __lock_acquire+0x683/0x2cf0 [ 93.129323][ T5329] do_page_mkwrite+0x147/0x310 [ 93.129340][ T5329] do_wp_page+0x1973/0x4c70 [ 93.129362][ T5329] ? __pfx_do_wp_page+0x10/0x10 [ 93.129378][ T5329] ? do_raw_spin_lock+0x12b/0x2f0 [ 93.129390][ T5329] ? handle_mm_fault+0x13dc/0x3080 [ 93.129401][ T5329] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 93.129416][ T5329] handle_mm_fault+0x1490/0x3080 [ 93.129429][ T5329] ? handle_mm_fault+0xec/0x3080 [ 93.129441][ T5329] ? __pfx_handle_mm_fault+0x10/0x10 [ 93.129452][ T5329] ? lock_vma_under_rcu+0x45a/0x500 [ 93.129463][ T5329] ? __pfx_do_futex+0x10/0x10 [ 93.129479][ T5329] do_user_addr_fault+0xa4d/0x1340 [ 93.129501][ T5329] ? trace_page_fault_user+0x84/0x1e0 [ 93.129518][ T5329] exc_page_fault+0x6a/0xc0 [ 93.129533][ T5329] asm_exc_page_fault+0x26/0x30 [ 93.129547][ T5329] RIP: 0033:0x7fb8e0a67662 [ 93.129563][ T5329] Code: 30 48 8b 14 24 48 85 d2 74 17 8b 44 24 10 0f c8 89 c0 48 89 44 24 10 48 83 fa 01 0f 85 aa 02 00 00 48 8b 44 24 18 8b 74 24 10 <89> 30 e9 1e fe ff ff 48 8b 44 24 18 8b 10 48 8b 04 24 48 85 c0 0f [ 93.129573][ T5329] RSP: 002b:00007fff496652f0 EFLAGS: 00010246 [ 93.129586][ T5329] RAX: 00002000000006c0 RBX: 0000000000000004 RCX: 0000000000000000 [ 93.129594][ T5329] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055558be09418 [ 93.129601][ T5329] RBP: 00007fff49665410 R08: 0000000000000000 R09: 0000000000000000 [ 93.129607][ T5329] R10: 0000000000000000 R11: 0000000000000000 R12: 00007fff49665450 [ 93.129614][ T5329] R13: 00007fb8e0e2609c R14: 00000000000168e1 R15: 00007fb8e0e26090 [ 93.129624][ T5329] [ 93.129629][ T5329] [ 93.491098][ T5329] The buggy address belongs to the physical page: [ 93.496644][ T5329] page: refcount:2 mapcount:0 mapping:ffff88801d02d940 index:0x5 pfn:0x13208 [ 93.503119][ T5329] memcg:ffff888040250300 [ 93.506603][ T5329] aops:def_blk_aops ino:700000 dentry name(?):"" [ 93.512124][ T5329] flags: 0xfff58000004234(referenced|dirty|lru|workingset|private|node=0|zone=1|lastcpupid=0x7ff) [ 93.520210][ T5329] raw: 00fff58000004234 ffffea000048cf88 ffffea0000498588 ffff88801d02d940 [ 93.530405][ T5329] raw: 0000000000000005 ffff888042fadee0 00000002ffffffff ffff888040250300 [ 93.539025][ T5329] page dumped because: kasan: bad access detected [ 93.545564][ T5329] page_owner tracks the page as allocated [ 93.551303][ T5329] page last allocated via order 0, migratetype Movable, gfp_mask 0x148c48(GFP_NOFS|__GFP_MOVABLE|__GFP_NOFAIL|__GFP_COMP|__GFP_HARDWALL), pid 5329, tgid 5329 (syz.0.0), ts 93050190936, free_ts 93045381238 [ 93.565608][ T5329] post_alloc_hook+0x1f9/0x250 [ 93.569631][ T5329] get_page_from_freelist+0x21fa/0x2270 [ 93.574699][ T5329] __alloc_frozen_pages_noprof+0x18d/0x380 [ 93.580499][ T5329] alloc_pages_mpol+0x212/0x380 [ 93.585308][ T5329] alloc_pages_noprof+0xac/0x2a0 [ 93.590763][ T5329] folio_alloc_noprof+0x1e/0x30 [ 93.595970][ T5329] filemap_alloc_folio_noprof+0x111/0x470 [ 93.603334][ T5329] __filemap_get_folio_mpol+0x402/0x1000 [ 93.609137][ T5329] bdev_getblk+0x1f4/0x6e0 [ 93.613503][ T5329] __ext4_get_inode_loc+0x56c/0xf40 [ 93.618972][ T5329] ext4_reserve_inode_write+0x18b/0x360 [ 93.624963][ T5329] __ext4_mark_inode_dirty+0x13e/0x700 [ 93.629792][ T5329] ext4_dirty_inode+0xd0/0x110 [ 93.633616][ T5329] __mark_inode_dirty+0x3a8/0x13b0 [ 93.638141][ T5329] file_update_time_flags+0x3ee/0x4a0 [ 93.641636][ T5329] ext4_page_mkwrite+0x224/0x1140 [ 93.646211][ T5329] page last free pid 5331 tgid 5329 stack trace: [ 93.650975][ T5329] free_unref_folios+0xd84/0x14a0 [ 93.653998][ T5329] folios_put_refs+0x9e9/0xb30 [ 93.656684][ T5329] free_pages_and_swap_cache+0x41e/0x490 [ 93.659943][ T5329] tlb_flush_mmu+0x6d3/0xa30 [ 93.662974][ T5329] tlb_finish_mmu+0xf4/0x220 [ 93.666012][ T5329] unmap_region+0x2a5/0x330 [ 93.669088][ T5329] mmap_region+0xc62/0x2310 [ 93.672251][ T5329] do_mmap+0xc3b/0x10c0 [ 93.675020][ T5329] vm_mmap_pgoff+0x272/0x4e0 [ 93.678997][ T5329] ksys_mmap_pgoff+0x4dc/0x760 [ 93.682669][ T5329] do_syscall_64+0x174/0x580 [ 93.685941][ T5329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.689839][ T5329] [ 93.690869][ T5329] Memory state around the buggy address: [ 93.693182][ T5329] ffff888013208c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 93.698294][ T5329] ffff888013208c80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 93.710194][ T5329] >ffff888013208d00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 93.717712][ T5329] ^ [ 93.729293][ T5329] ffff888013208d80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 93.734691][ T5329] ffff888013208e00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 93.748959][ T5329] ================================================================== [ 93.896059][ T5329] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 93.910024][ T5329] CPU: 0 UID: 0 PID: 5329 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 93.914001][ T5329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.934928][ T5329] Call Trace: [ 93.937099][ T5329] [ 93.938619][ T5329] vpanic+0x56c/0xa60 [ 93.940733][ T5329] ? __pfx_vpanic+0x10/0x10 [ 93.955638][ T5329] panic+0xc5/0xd0 [ 93.957632][ T5329] ? __pfx_panic+0x10/0x10 [ 93.959771][ T5329] ? preempt_schedule_thunk+0x16/0x40 [ 93.962470][ T5329] ? preempt_schedule_thunk+0x16/0x40 [ 93.965256][ T5329] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 93.978127][ T5329] check_panic_on_warn+0x89/0xb0 [ 93.980786][ T5329] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 93.983874][ T5329] end_report+0x73/0x170 [ 93.986765][ T5329] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 93.995016][ T5329] kasan_report+0x128/0x150 [ 93.999195][ T5329] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 94.010466][ T5329] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 94.014966][ T5329] kasan_check_range+0x264/0x2c0 [ 94.028819][ T5329] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 94.033099][ T5329] __asan_memmove+0x29/0x70 [ 94.036425][ T5329] ext4_xattr_set_entry+0x92b/0x1ed0 [ 94.053969][ T5329] ext4_xattr_ibody_set+0x262/0x710 [ 94.058195][ T5329] ext4_destroy_inline_data_nolock+0x23a/0x5f0 [ 94.063464][ T5329] ? __pfx_ext4_destroy_inline_data_nolock+0x10/0x10 [ 94.069337][ T5329] ? __asan_memcpy+0x40/0x70 [ 94.074571][ T5329] ? ext4_read_inline_data+0x100/0x2b0 [ 94.077663][ T5329] ext4_convert_inline_data_nolock+0x208/0x980 [ 94.092350][ T5329] ? __pfx_ext4_convert_inline_data_nolock+0x10/0x10 [ 94.100674][ T5329] ? down_write+0x16d/0x200 [ 94.103287][ T5329] ext4_convert_inline_data+0x484/0x5c0 [ 94.110766][ T5329] ? __pfx_ext4_convert_inline_data+0x10/0x10 [ 94.125149][ T5329] ? down_read+0x2be/0x330 [ 94.129392][ T5329] ? file_update_time_flags+0x400/0x4a0 [ 94.134953][ T5329] ext4_page_mkwrite+0x244/0x1140 [ 94.142908][ T5329] ? __lock_acquire+0x683/0x2cf0 [ 94.147724][ T5329] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 94.153483][ T5329] ? __lock_acquire+0x683/0x2cf0 [ 94.158315][ T5329] do_page_mkwrite+0x147/0x310 [ 94.162255][ T5329] do_wp_page+0x1973/0x4c70 [ 94.165381][ T5329] ? __pfx_do_wp_page+0x10/0x10 [ 94.168457][ T5329] ? do_raw_spin_lock+0x12b/0x2f0 [ 94.171353][ T5329] ? handle_mm_fault+0x13dc/0x3080 [ 94.174125][ T5329] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 94.179988][ T5329] handle_mm_fault+0x1490/0x3080 [ 94.186013][ T5329] ? handle_mm_fault+0xec/0x3080 [ 94.192044][ T5329] ? __pfx_handle_mm_fault+0x10/0x10 [ 94.196689][ T5329] ? lock_vma_under_rcu+0x45a/0x500 [ 94.201786][ T5329] ? __pfx_do_futex+0x10/0x10 [ 94.205529][ T5329] do_user_addr_fault+0xa4d/0x1340 [ 94.210105][ T5329] ? trace_page_fault_user+0x84/0x1e0 [ 94.215885][ T5329] exc_page_fault+0x6a/0xc0 [ 94.221121][ T5329] asm_exc_page_fault+0x26/0x30 [ 94.226615][ T5329] RIP: 0033:0x7fb8e0a67662 [ 94.231024][ T5329] Code: 30 48 8b 14 24 48 85 d2 74 17 8b 44 24 10 0f c8 89 c0 48 89 44 24 10 48 83 fa 01 0f 85 aa 02 00 00 48 8b 44 24 18 8b 74 24 10 <89> 30 e9 1e fe ff ff 48 8b 44 24 18 8b 10 48 8b 04 24 48 85 c0 0f [ 94.254495][ T5329] RSP: 002b:00007fff496652f0 EFLAGS: 00010246 [ 94.263186][ T5329] RAX: 00002000000006c0 RBX: 0000000000000004 RCX: 0000000000000000 [ 94.271104][ T5329] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055558be09418 [ 94.279790][ T5329] RBP: 00007fff49665410 R08: 0000000000000000 R09: 0000000000000000 [ 94.287661][ T5329] R10: 0000000000000000 R11: 0000000000000000 R12: 00007fff49665450 [ 94.295167][ T5329] R13: 00007fb8e0e2609c R14: 00000000000168e1 R15: 00007fb8e0e26090 [ 94.306755][ T5329] [ 94.311690][ T5329] Kernel Offset: disabled [ 94.318437][ T5329] Rebooting in 86400 seconds..