program:
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f00000000c0)={[{@auto_da_alloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x57c, &(0x7f0000000480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f000000f840)='./file1\x00', 0x42, 0x0)
r1 = syz_open_dev$loop(&(0x7f000000f880), 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f000000f8c0)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x12, 0x3, "d2273078cf6175866187bbf62372bbb65d940f27bc28a5a442ff5a8d374a182008a1fd92701ce53ee6aa5d922917aeecbfb3db24b09909c24cc157a3780cf5d5", "09b49809fc32a5fc7be9f88c6b84907998105e3111daa2bd51b0d0c3bc93fb2d0f0244a8c7a99a75e76613c745458f5c1212e72d93b272fed81941f04edd0059", "a960f08042e09119b6f87de59f19912c538884e7a95c3d50e4be66184e295eb1", [0x4, 0x6c]})
fallocate(r0, 0x0, 0x0, 0xffff)
[ 93.215466][ T4664] Bluetooth: hci0: command tx timeout
[ 93.225952][ T11] cfg80211: failed to load regulatory.db
[ 93.347079][ T5342] loop0: detected capacity change from 0 to 1024
[ 93.379595][ T5342] EXT4-fs: Ignoring removed bh option
[ 93.429738][ T5342] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 93.463019][ T5342] loop0: detected capacity change from 1024 to 1023
[ 93.474602][ T5342] ==================================================================
[ 93.474614][ T5342] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x92b/0x1ed0
[ 93.474757][ T5342] Read of size 18446744073709551600 at addr ffff88804ef6f2b8 by task syz.0.0/5342
[ 93.474767][ T5342]
[ 93.474775][ T5342] CPU: 0 UID: 0 PID: 5342 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 93.474784][ T5342] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 93.474789][ T5342] Call Trace:
[ 93.474802][ T5342]
[ 93.474805][ T5342] dump_stack_lvl+0xe8/0x150
[ 93.474821][ T5342] print_address_description+0x55/0x1e0
[ 93.474838][ T5342] ? ext4_xattr_set_entry+0x92b/0x1ed0
[ 93.474850][ T5342] print_report+0x58/0x70
[ 93.474864][ T5342] kasan_report+0x117/0x150
[ 93.474881][ T5342] ? ext4_xattr_set_entry+0x92b/0x1ed0
[ 93.474895][ T5342] ? ext4_xattr_set_entry+0x92b/0x1ed0
[ 93.474908][ T5342] kasan_check_range+0x264/0x2c0
[ 93.474917][ T5342] ? ext4_xattr_set_entry+0x92b/0x1ed0
[ 93.474925][ T5342] __asan_memmove+0x29/0x70
[ 93.474932][ T5342] ext4_xattr_set_entry+0x92b/0x1ed0
[ 93.474944][ T5342] ext4_xattr_ibody_set+0x262/0x710
[ 93.474956][ T5342] ext4_destroy_inline_data_nolock+0x23a/0x5f0
[ 93.474969][ T5342] ? __pfx_ext4_destroy_inline_data_nolock+0x10/0x10
[ 93.474983][ T5342] ? __asan_memcpy+0x40/0x70
[ 93.474995][ T5342] ? ext4_read_inline_data+0x100/0x2b0
[ 93.475005][ T5342] ext4_convert_inline_data_nolock+0x208/0x980
[ 93.475017][ T5342] ? __pfx_ext4_convert_inline_data_nolock+0x10/0x10
[ 93.475027][ T5342] ? down_write+0x166/0x200
[ 93.475080][ T5342] ext4_convert_inline_data+0x484/0x5c0
[ 93.475091][ T5342] ? __pfx_ext4_convert_inline_data+0x10/0x10
[ 93.475099][ T5342] ? down_write+0x166/0x200
[ 93.475106][ T5342] ? __pfx_down_write+0x10/0x10
[ 93.475114][ T5342] ext4_fallocate+0x1e2/0x400
[ 93.475122][ T5342] vfs_fallocate+0x65a/0x7e0
[ 93.475135][ T5342] ? __fget_files+0x2a/0x420
[ 93.475155][ T5342] ? __pfx_vfs_fallocate+0x10/0x10
[ 93.475169][ T5342] ? __fget_files+0x2a/0x420
[ 93.475183][ T5342] ? fdget+0x1ac/0x250
[ 93.475196][ T5342] __x64_sys_fallocate+0xbf/0x110
[ 93.475212][ T5342] do_syscall_64+0x166/0x520
[ 93.475227][ T5342] ? trace_irq_disable+0x3b/0x140
[ 93.475239][ T5342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 93.475250][ T5342] ? clear_bhb_loop+0x70/0xc0
[ 93.475263][ T5342] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 93.475275][ T5342] RIP: 0033:0x7f01b5b9fb19
[ 93.475286][ T5342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 93.475298][ T5342] RSP: 002b:00007f01b69affe8 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[ 93.475309][ T5342] RAX: ffffffffffffffda RBX: 00007f01b5e25fa0 RCX: 00007f01b5b9fb19
[ 93.475314][ T5342] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 93.475318][ T5342] RBP: 00007f01b5c37b70 R08: 0000000000000000 R09: 0000000000000000
[ 93.475323][ T5342] R10: 000000000000ffff R11: 0000000000000246 R12: 0000000000000000
[ 93.475330][ T5342] R13: 00007f01b5e26038 R14: 00007f01b5e25fa0 R15: 00007ffe8a76eae8
[ 93.475342][ T5342]
[ 93.475345][ T5342]
[ 93.475348][ T5342] The buggy address belongs to the physical page:
[ 93.475353][ T5342] page: refcount:3 mapcount:0 mapping:ffff88801e825940 index:0x2 pfn:0x4ef6f
[ 93.475363][ T5342] memcg:ffff888014723700
[ 93.475369][ T5342] aops:def_blk_aops ino:700000 dentry name(?):""
[ 93.475386][ T5342] flags: 0x4fff18000000204(referenced|workingset|node=1|zone=1|lastcpupid=0x7ff)
[ 93.475403][ T5342] raw: 04fff18000000204 0000000000000000 dead000000000122 ffff88801e825940
[ 93.475413][ T5342] raw: 0000000000000002 ffff888014406620 00000003ffffffff ffff888014723700
[ 93.475418][ T5342] page dumped because: kasan: bad access detected
[ 93.475426][ T5342] page_owner tracks the page as allocated
[ 93.475430][ T5342] page last allocated via order 0, migratetype Movable, gfp_mask 0x148c48(GFP_NOFS|__GFP_MOVABLE|__GFP_NOFAIL|__GFP_COMP|__GFP_HARDWALL), pid 5342, tgid 5341 (syz.0.0), ts 93465709112
[ 93.475448][ T5342] post_alloc_hook+0x1f9/0x250
[ 93.475459][ T5342] get_page_from_freelist+0x2224/0x2290
[ 93.475471][ T5342] __alloc_frozen_pages_noprof+0x1fe/0x410
[ 93.475484][ T5342] alloc_pages_mpol+0x21e/0x390
[ 93.475501][ T5342] alloc_pages_noprof+0xb1/0x2b0
[ 93.475516][ T5342] folio_alloc_noprof+0x1e/0x30
[ 93.475530][ T5342] filemap_alloc_folio_noprof+0x111/0x460
[ 93.475540][ T5342] __filemap_get_folio_mpol+0x3fd/0xff0
[ 93.475551][ T5342] bdev_getblk+0x1ec/0x670
[ 93.475560][ T5342] __ext4_get_inode_loc+0x56c/0xf40
[ 93.475574][ T5342] ext4_get_inode_loc+0x81/0xf0
[ 93.475587][ T5342] ext4_convert_inline_data+0x261/0x5c0
[ 93.475598][ T5342] ext4_fallocate+0x1e2/0x400
[ 93.475606][ T5342] vfs_fallocate+0x65a/0x7e0
[ 93.475617][ T5342] __x64_sys_fallocate+0xbf/0x110
[ 93.475629][ T5342] do_syscall_64+0x166/0x520
[ 93.475642][ T5342] page last free pid 5342 tgid 5341 ts 93448999343 stack trace:
[ 93.475649][ T5342] free_unref_folios+0xdc6/0x14e0
[ 93.475658][ T5342] folios_put_refs+0x9e9/0xb30
[ 93.475671][ T5342] mapping_try_invalidate+0x3b7/0x4b0
[ 93.475681][ T5342] loop_set_status+0x25d/0xd50
[ 93.475692][ T5342] lo_ioctl+0xba0/0x1730
[ 93.475702][ T5342] blkdev_ioctl+0x5e3/0x740
[ 93.475711][ T5342] __se_sys_ioctl+0xfc/0x170
[ 93.475722][ T5342] do_syscall_64+0x166/0x520
[ 93.475734][ T5342] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 93.475744][ T5342]
[ 93.475747][ T5342] Memory state around the buggy address:
[ 93.475753][ T5342] ffff88804ef6f180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 93.475760][ T5342] ffff88804ef6f200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 93.475767][ T5342] >ffff88804ef6f280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 93.475772][ T5342] ^
[ 93.475776][ T5342] ffff88804ef6f300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 93.475782][ T5342] ffff88804ef6f380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 93.475786][ T5342] ==================================================================
[ 93.476761][ T5342] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 93.733295][ T5342] CPU: 0 UID: 0 PID: 5342 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 93.737267][ T5342] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 93.741517][ T5342] Call Trace:
[ 93.743007][ T5342]
[ 93.744285][ T5342] vpanic+0x26f/0x710
[ 93.746065][ T5342] panic+0xc5/0xd0
[ 93.747714][ T5342] ? __pfx_panic+0x10/0x10
[ 93.749656][ T5342] ? preempt_schedule_thunk+0x16/0x40
[ 93.752057][ T5342] ? preempt_schedule_thunk+0x16/0x40
[ 93.754488][ T5342] ? ext4_xattr_set_entry+0x92b/0x1ed0
[ 93.757083][ T5342] check_panic_on_warn+0x89/0xb0
[ 93.759335][ T5342] ? ext4_xattr_set_entry+0x92b/0x1ed0
[ 93.761802][ T5342] end_report+0x73/0x170
[ 93.763713][ T5342] ? ext4_xattr_set_entry+0x92b/0x1ed0
[ 93.766124][ T5342] kasan_report+0x128/0x150
[ 93.768195][ T5342] ? ext4_xattr_set_entry+0x92b/0x1ed0
[ 93.770569][ T5342] ? ext4_xattr_set_entry+0x92b/0x1ed0
[ 93.772977][ T5342] kasan_check_range+0x264/0x2c0
[ 93.775161][ T5342] ? ext4_xattr_set_entry+0x92b/0x1ed0
[ 93.777538][ T5342] __asan_memmove+0x29/0x70
[ 93.779536][ T5342] ext4_xattr_set_entry+0x92b/0x1ed0
[ 93.781822][ T5342] ext4_xattr_ibody_set+0x262/0x710
[ 93.784185][ T5342] ext4_destroy_inline_data_nolock+0x23a/0x5f0
[ 93.786862][ T5342] ? __pfx_ext4_destroy_inline_data_nolock+0x10/0x10
[ 93.789952][ T5342] ? __asan_memcpy+0x40/0x70
[ 93.792361][ T5342] ? ext4_read_inline_data+0x100/0x2b0
[ 93.795207][ T5342] ext4_convert_inline_data_nolock+0x208/0x980
[ 93.798180][ T5342] ? __pfx_ext4_convert_inline_data_nolock+0x10/0x10
[ 93.801265][ T5342] ? down_write+0x166/0x200
[ 93.803401][ T5342] ext4_convert_inline_data+0x484/0x5c0
[ 93.805962][ T5342] ? __pfx_ext4_convert_inline_data+0x10/0x10
[ 93.808824][ T5342] ? down_write+0x166/0x200
[ 93.810939][ T5342] ? __pfx_down_write+0x10/0x10
[ 93.813111][ T5342] ext4_fallocate+0x1e2/0x400
[ 93.815264][ T5342] vfs_fallocate+0x65a/0x7e0
[ 93.817449][ T5342] ? __fget_files+0x2a/0x420
[ 93.819676][ T5342] ? __pfx_vfs_fallocate+0x10/0x10
[ 93.822078][ T5342] ? __fget_files+0x2a/0x420
[ 93.824146][ T5342] ? fdget+0x1ac/0x250
[ 93.825990][ T5342] __x64_sys_fallocate+0xbf/0x110
[ 93.828176][ T5342] do_syscall_64+0x166/0x520
[ 93.830235][ T5342] ? trace_irq_disable+0x3b/0x140
[ 93.832553][ T5342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 93.835207][ T5342] ? clear_bhb_loop+0x70/0xc0
[ 93.837288][ T5342] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 93.839907][ T5342] RIP: 0033:0x7f01b5b9fb19
[ 93.841908][ T5342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 93.850491][ T5342] RSP: 002b:00007f01b69affe8 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[ 93.854091][ T5342] RAX: ffffffffffffffda RBX: 00007f01b5e25fa0 RCX: 00007f01b5b9fb19
[ 93.857544][ T5342] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 93.861045][ T5342] RBP: 00007f01b5c37b70 R08: 0000000000000000 R09: 0000000000000000
[ 93.864388][ T5342] R10: 000000000000ffff R11: 0000000000000246 R12: 0000000000000000
[ 93.867768][ T5342] R13: 00007f01b5e26038 R14: 00007f01b5e25fa0 R15: 00007ffe8a76eae8
[ 93.871131][ T5342]
[ 93.872892][ T5342] Kernel Offset: disabled
[ 93.874663][ T5342] Rebooting in 86400 seconds..