program: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x792, &(0x7f0000001a40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r0, &(0x7f0000004200)='t', 0x1) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000100)=0x0) io_submit(r2, 0x20000000000002c9, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x4000}]) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000140)='./file2\x00', 0x14, &(0x7f0000000180)=ANY=[], 0xfd, 0x1501, &(0x7f0000002200)="$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") r3 = syz_open_dev$loop(&(0x7f0000003740), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000003780)={0x0, {}, 0x0, {}, 0x7fff, 0x0, 0xfffffffd, 0x0, "22536af39b7c7cb7435b0a43852dbc3a9ada34cc97af10fd4fcca15748328c53096c2f359e9ba743d30b59c491a7b3e74d938981061383374a1d79471a2d2dfe", "0410b15a7d62289113be3626f4e23806009c7416000000000019b0cff500", [0x3, 0xf9f]}) r4 = creat(&(0x7f0000003840)='./bus\x00', 0x0) io_setup(0x8, &(0x7f0000003880)=0x0) io_submit(r5, 0x1, &(0x7f00000038c0)=[&(0x7f0000003900)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r4, &(0x7f0000003940)='$', 0x1}]) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000280)=0x0) io_submit(r7, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x3600, 0xa00}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) read$FUSE(r8, &(0x7f0000004440)={0x2020}, 0x2020) ][ T4666] Bluetooth: hci0: command tx timeout [ 103.600057][ T5357] loop0: detected capacity change from 0 to 2048 [ 103.730737][ T5357] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.806951][ T5357] loop0: detected capacity change from 2048 to 1984 [ 103.827786][ T4666] Bluetooth: hci0: command tx timeout [ 103.828880][ T5357] ================================================================== [ 103.828889][ T5357] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x92b/0x1ed0 [ 103.829020][ T5357] Read of size 18446744073709551600 at addr ffff88804ef921b8 by task syz.0.0/5357 [ 103.829031][ T5357] [ 103.829039][ T5357] CPU: 0 UID: 0 PID: 5357 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 103.829052][ T5357] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.829059][ T5357] Call Trace: [ 103.829075][ T5357] [ 103.829081][ T5357] dump_stack_lvl+0xe8/0x150 [ 103.829114][ T5357] print_address_description+0x55/0x1e0 [ 103.829134][ T5357] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 103.829148][ T5357] print_report+0x58/0x70 [ 103.829164][ T5357] kasan_report+0x117/0x150 [ 103.829207][ T5357] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 103.829223][ T5357] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 103.829240][ T5357] kasan_check_range+0x264/0x2c0 [ 103.829306][ T5357] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 103.829321][ T5357] __asan_memmove+0x29/0x70 [ 103.829340][ T5357] ext4_xattr_set_entry+0x92b/0x1ed0 [ 103.829366][ T5357] ext4_xattr_ibody_set+0x262/0x710 [ 103.829384][ T5357] ext4_destroy_inline_data_nolock+0x23a/0x5f0 [ 103.829399][ T5357] ? __pfx_ext4_destroy_inline_data_nolock+0x10/0x10 [ 103.829414][ T5357] ? down_write+0x166/0x200 [ 103.831848][ T5357] ext4_destroy_inline_data+0x83/0xe0 [ 103.831865][ T5357] ext4_do_writepages+0x57f/0x44a0 [ 103.831880][ T5357] ? trace_kmem_cache_alloc+0x29/0xe0 [ 103.831929][ T5357] ? __es_insert_extent+0x6f0/0x1780 [ 103.831942][ T5357] ? kmem_cache_alloc_noprof+0x151/0x600 [ 103.831955][ T5357] ? __es_insert_extent+0x6f0/0x1780 [ 103.831968][ T5357] ? __es_insert_extent+0x1145/0x1780 [ 103.831982][ T5357] ? ext4_es_insert_delayed_extent+0x967/0xe90 [ 103.831998][ T5357] ? rcu_is_watching+0x16/0xb0 [ 103.834225][ T5357] ? ext4_es_insert_delayed_extent+0xbe0/0xe90 [ 103.834240][ T5357] ? look_up_lock_class+0x57/0x110 [ 103.834257][ T5357] ? register_lock_class+0x31/0x2e0 [ 103.834289][ T5357] ? __pfx_ext4_do_writepages+0x10/0x10 [ 103.834306][ T5357] ? __lock_acquire+0x747/0x2de0 [ 103.834322][ T5357] ? ext4_da_map_blocks+0xb5f/0x10a0 [ 103.834341][ T5357] ? up_write+0x19d/0x4a0 [ 103.834354][ T5357] ? lock_acquire+0x115/0x350 [ 103.834370][ T5357] ext4_writepages+0x1fe/0x4e0 [ 103.834382][ T5357] ? __lock_acquire+0x747/0x2de0 [ 103.834401][ T5357] ? __pfx_ext4_writepages+0x10/0x10 [ 103.834422][ T5357] ? __pfx_ext4_writepages+0x10/0x10 [ 103.834433][ T5357] do_writepages+0x338/0x560 [ 103.834468][ T5357] ? do_raw_spin_unlock+0x4d/0x200 [ 103.834482][ T5357] file_write_and_wait_range+0x36e/0x440 [ 103.834502][ T5357] ? __mark_inode_dirty+0x4e7/0x13b0 [ 103.834519][ T5357] ? __pfx_file_write_and_wait_range+0x10/0x10 [ 103.834544][ T5357] ext4_sync_file+0x252/0xa40 [ 103.834562][ T5357] ext4_buffered_write_iter+0x471/0x540 [ 103.834582][ T5357] ext4_file_write_iter+0xae4/0x1cd0 [ 103.834601][ T5357] ? count_memcg_event_mm+0x21/0x260 [ 103.834638][ T5357] ? io_submit_one+0x134/0x13d0 [ 103.834660][ T5357] ? kasan_save_track+0x4f/0x80 [ 103.834673][ T5357] ? kasan_save_track+0x3e/0x80 [ 103.834687][ T5357] ? lock_acquire+0x115/0x350 [ 103.834700][ T5357] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 103.834714][ T5357] ? aio_write+0x545/0x870 [ 103.834732][ T5357] aio_write+0x5cb/0x870 [ 103.834749][ T5357] ? __pfx_aio_write+0x10/0x10 [ 103.834773][ T5357] io_submit_one+0x798/0x13d0 [ 103.834792][ T5357] ? lockdep_hardirqs_on+0x7b/0x110 [ 103.834807][ T5357] ? irqentry_exit+0x2a0/0x9b0 [ 103.834823][ T5357] ? __pfx_io_submit_one+0x10/0x10 [ 103.834839][ T5357] ? lock_acquire+0x115/0x350 [ 103.834857][ T5357] ? __might_fault+0xaf/0x130 [ 103.834876][ T5357] __se_sys_io_submit+0x195/0x340 [ 103.834892][ T5357] ? __pfx___se_sys_io_submit+0x10/0x10 [ 103.834912][ T5357] do_syscall_64+0x166/0x520 [ 103.834927][ T5357] ? trace_irq_disable+0x3b/0x140 [ 103.834962][ T5357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.834975][ T5357] ? clear_bhb_loop+0x70/0xc0 [ 103.834991][ T5357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.835001][ T5357] RIP: 0033:0x7f3b2ab9fb19 [ 103.835014][ T5357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.835024][ T5357] RSP: 002b:00007f3b2b994fe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 103.835038][ T5357] RAX: ffffffffffffffda RBX: 00007f3b2ae25fa0 RCX: 00007f3b2ab9fb19 [ 103.835048][ T5357] RDX: 00002000000038c0 RSI: 0000000000000001 RDI: 00007f3b2b96b000 [ 103.835057][ T5357] RBP: 00007f3b2ac37b70 R08: 0000000000000000 R09: 0000000000000000 [ 103.835065][ T5357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.835072][ T5357] R13: 00007f3b2ae26038 R14: 00007f3b2ae25fa0 R15: 00007ffee6fa3bb8 [ 103.835087][ T5357] [ 103.835092][ T5357] [ 103.835095][ T5357] The buggy address belongs to the physical page: [ 103.835100][ T5357] page: refcount:2 mapcount:0 mapping:ffff88801e825940 index:0x3 pfn:0x4ef92 [ 103.835112][ T5357] memcg:ffff888035b09e00 [ 103.835118][ T5357] aops:def_blk_aops ino:700000 dentry name(?):"" [ 103.835147][ T5357] flags: 0x4fff58000000234(referenced|dirty|lru|workingset|node=1|zone=1|lastcpupid=0x7ff) [ 103.835166][ T5357] raw: 04fff58000000234 ffffea000110f188 ffffea0001140008 ffff88801e825940 [ 103.835177][ T5357] raw: 0000000000000003 ffff888045883540 00000002ffffffff ffff888035b09e00 [ 103.835183][ T5357] page dumped because: kasan: bad access detected [ 103.835189][ T5357] page_owner tracks the page as allocated [ 103.835193][ T5357] page last allocated via order 0, migratetype Movable, gfp_mask 0x148c48(GFP_NOFS|__GFP_MOVABLE|__GFP_NOFAIL|__GFP_COMP|__GFP_HARDWALL), pid 5357, tgid 5356 (syz.0.0), ts 103813461431 [ 103.835211][ T5357] post_alloc_hook+0x1f9/0x250 [ 103.835223][ T5357] get_page_from_freelist+0x220f/0x2280 [ 103.835235][ T5357] __alloc_frozen_pages_noprof+0x1fe/0x410 [ 103.835249][ T5357] alloc_pages_mpol+0x21e/0x390 [ 103.835271][ T5357] alloc_pages_noprof+0xb1/0x2b0 [ 103.835287][ T5357] folio_alloc_noprof+0x1e/0x30 [ 103.835302][ T5357] filemap_alloc_folio_noprof+0x111/0x460 [ 103.835313][ T5357] __filemap_get_folio_mpol+0x3fd/0xff0 [ 103.835329][ T5357] bdev_getblk+0x1ec/0x670 [ 103.835338][ T5357] __ext4_get_inode_loc+0x56c/0xf40 [ 103.835353][ T5357] ext4_reserve_inode_write+0x18b/0x360 [ 103.835369][ T5357] __ext4_mark_inode_dirty+0x141/0x7e0 [ 103.835381][ T5357] ext4_truncate_down+0x45f/0xa60 [ 103.835396][ T5357] ext4_setattr+0x107a/0x1550 [ 103.835412][ T5357] notify_change+0xbba/0xea0 [ 103.835427][ T5357] do_truncate+0x1c2/0x250 [ 103.835439][ T5357] page last free pid 5357 tgid 5356 ts 103788555903 stack trace: [ 103.835447][ T5357] free_unref_folios+0xdc6/0x14e0 [ 103.835457][ T5357] folios_put_refs+0x9e9/0xb30 [ 103.835472][ T5357] mapping_try_invalidate+0x3b7/0x4b0 [ 103.835483][ T5357] loop_set_status+0x25d/0xd50 [ 103.835509][ T5357] lo_ioctl+0xc6b/0x1730 [ 103.835522][ T5357] blkdev_ioctl+0x5e3/0x740 [ 103.835548][ T5357] __se_sys_ioctl+0xfc/0x170 [ 103.835562][ T5357] do_syscall_64+0x166/0x520 [ 103.835577][ T5357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.835588][ T5357] [ 103.835590][ T5357] Memory state around the buggy address: [ 103.835597][ T5357] ffff88804ef92080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 103.835603][ T5357] ffff88804ef92100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 103.835611][ T5357] >ffff88804ef92180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 103.835617][ T5357] ^ [ 103.835624][ T5357] ffff88804ef92200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 103.835632][ T5357] ffff88804ef92280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 103.835638][ T5357] ================================================================== [ 104.222317][ T5357] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 104.225480][ T5357] CPU: 0 UID: 0 PID: 5357 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 104.229378][ T5357] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.233796][ T5357] Call Trace: [ 104.235332][ T5357] [ 104.236658][ T5357] vpanic+0x26f/0x710 [ 104.238472][ T5357] panic+0xc5/0xd0 [ 104.240174][ T5357] ? __pfx_panic+0x10/0x10 [ 104.242195][ T5357] ? preempt_schedule_thunk+0x16/0x40 [ 104.244656][ T5357] ? preempt_schedule_thunk+0x16/0x40 [ 104.247177][ T5357] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 104.249630][ T5357] check_panic_on_warn+0x89/0xb0 [ 104.251817][ T5357] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 104.254207][ T5357] end_report+0x73/0x170 [ 104.256172][ T5357] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 104.258529][ T5357] kasan_report+0x128/0x150 [ 104.260531][ T5357] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 104.262829][ T5357] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 104.265151][ T5357] kasan_check_range+0x264/0x2c0 [ 104.267363][ T5357] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 104.269562][ T5357] __asan_memmove+0x29/0x70 [ 104.271445][ T5357] ext4_xattr_set_entry+0x92b/0x1ed0 [ 104.273601][ T5357] ext4_xattr_ibody_set+0x262/0x710 [ 104.275712][ T5357] ext4_destroy_inline_data_nolock+0x23a/0x5f0 [ 104.278425][ T5357] ? __pfx_ext4_destroy_inline_data_nolock+0x10/0x10 [ 104.281564][ T5357] ? down_write+0x166/0x200 [ 104.283542][ T5357] ext4_destroy_inline_data+0x83/0xe0 [ 104.285890][ T5357] ext4_do_writepages+0x57f/0x44a0 [ 104.288051][ T5357] ? trace_kmem_cache_alloc+0x29/0xe0 [ 104.290441][ T5357] ? __es_insert_extent+0x6f0/0x1780 [ 104.292749][ T5357] ? kmem_cache_alloc_noprof+0x151/0x600 [ 104.295276][ T5357] ? __es_insert_extent+0x6f0/0x1780 [ 104.297698][ T5357] ? __es_insert_extent+0x1145/0x1780 [ 104.299942][ T5357] ? ext4_es_insert_delayed_extent+0x967/0xe90 [ 104.302590][ T5357] ? rcu_is_watching+0x16/0xb0 [ 104.304699][ T5357] ? ext4_es_insert_delayed_extent+0xbe0/0xe90 [ 104.307345][ T5357] ? look_up_lock_class+0x57/0x110 [ 104.309534][ T5357] ? register_lock_class+0x31/0x2e0 [ 104.311859][ T5357] ? __pfx_ext4_do_writepages+0x10/0x10 [ 104.314339][ T5357] ? __lock_acquire+0x747/0x2de0 [ 104.316466][ T5357] ? ext4_da_map_blocks+0xb5f/0x10a0 [ 104.318690][ T5357] ? up_write+0x19d/0x4a0 [ 104.320580][ T5357] ? lock_acquire+0x115/0x350 [ 104.322696][ T5357] ext4_writepages+0x1fe/0x4e0 [ 104.324776][ T5357] ? __lock_acquire+0x747/0x2de0 [ 104.326905][ T5357] ? __pfx_ext4_writepages+0x10/0x10 [ 104.329170][ T5357] ? __pfx_ext4_writepages+0x10/0x10 [ 104.331511][ T5357] do_writepages+0x338/0x560 [ 104.333519][ T5357] ? do_raw_spin_unlock+0x4d/0x200 [ 104.335682][ T5357] file_write_and_wait_range+0x36e/0x440 [ 104.338075][ T5357] ? __mark_inode_dirty+0x4e7/0x13b0 [ 104.340476][ T5357] ? __pfx_file_write_and_wait_range+0x10/0x10 [ 104.342994][ T5357] ext4_sync_file+0x252/0xa40 [ 104.345105][ T5357] ext4_buffered_write_iter+0x471/0x540 [ 104.347575][ T5357] ext4_file_write_iter+0xae4/0x1cd0 [ 104.349944][ T5357] ? count_memcg_event_mm+0x21/0x260 [ 104.352212][ T5357] ? io_submit_one+0x134/0x13d0 [ 104.354320][ T5357] ? kasan_save_track+0x4f/0x80 [ 104.356399][ T5357] ? kasan_save_track+0x3e/0x80 [ 104.358434][ T5357] ? lock_acquire+0x115/0x350 [ 104.360486][ T5357] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 104.363050][ T5357] ? aio_write+0x545/0x870 [ 104.365068][ T5357] aio_write+0x5cb/0x870 [ 104.366965][ T5357] ? __pfx_aio_write+0x10/0x10 [ 104.369098][ T5357] io_submit_one+0x798/0x13d0 [ 104.371251][ T5357] ? lockdep_hardirqs_on+0x7b/0x110 [ 104.373513][ T5357] ? irqentry_exit+0x2a0/0x9b0 [ 104.375526][ T5357] ? __pfx_io_submit_one+0x10/0x10 [ 104.377783][ T5357] ? lock_acquire+0x115/0x350 [ 104.379857][ T5357] ? __might_fault+0xaf/0x130 [ 104.381874][ T5357] __se_sys_io_submit+0x195/0x340 [ 104.383973][ T5357] ? __pfx___se_sys_io_submit+0x10/0x10 [ 104.386421][ T5357] do_syscall_64+0x166/0x520 [ 104.388367][ T5357] ? trace_irq_disable+0x3b/0x140 [ 104.390567][ T5357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.393163][ T5357] ? clear_bhb_loop+0x70/0xc0 [ 104.395258][ T5357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.397863][ T5357] RIP: 0033:0x7f3b2ab9fb19 [ 104.399851][ T5357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.410048][ T5357] RSP: 002b:00007f3b2b994fe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 104.413556][ T5357] RAX: ffffffffffffffda RBX: 00007f3b2ae25fa0 RCX: 00007f3b2ab9fb19 [ 104.416968][ T5357] RDX: 00002000000038c0 RSI: 0000000000000001 RDI: 00007f3b2b96b000 [ 104.420314][ T5357] RBP: 00007f3b2ac37b70 R08: 0000000000000000 R09: 0000000000000000 [ 104.424004][ T5357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.427359][ T5357] R13: 00007f3b2ae26038 R14: 00007f3b2ae25fa0 R15: 00007ffee6fa3bb8 [ 104.430680][ T5357] [ 104.432440][ T5357] Kernel Offset: disabled [ 104.434210][ T5357] Rebooting in 86400 seconds..