Warning: Permanently added '10.128.1.50' (ED25519) to the list of known hosts. executing program [ 70.869819][ T4246] loop0: detected capacity change from 0 to 512 [ 70.881264][ T4246] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 70.894375][ T4246] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 70.912260][ T4246] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 70.926235][ T4246] EXT4-fs (loop0): 1 truncate cleaned up [ 70.932186][ T4246] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 70.958996][ T4246] ================================================================== [ 70.967093][ T4246] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x8ca/0x1f30 [ 70.974846][ T4246] Read of size 18446744073709551572 at addr ffff888030359050 by task syz-executor828/4246 [ 70.984726][ T4246] [ 70.987059][ T4246] CPU: 0 PID: 4246 Comm: syz-executor828 Not tainted 6.1.114-syzkaller #0 [ 70.995569][ T4246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 71.005636][ T4246] Call Trace: [ 71.008916][ T4246] [ 71.011843][ T4246] dump_stack_lvl+0x1e3/0x2cb [ 71.016529][ T4246] ? nf_tcp_handle_invalid+0x642/0x642 [ 71.021997][ T4246] ? panic+0x764/0x764 [ 71.026065][ T4246] ? _printk+0xd1/0x111 [ 71.030221][ T4246] ? __virt_addr_valid+0x17f/0x530 [ 71.035336][ T4246] ? __virt_addr_valid+0x17f/0x530 [ 71.040448][ T4246] print_report+0x15f/0x4f0 [ 71.044945][ T4246] ? __virt_addr_valid+0x17f/0x530 [ 71.050056][ T4246] ? __virt_addr_valid+0x17f/0x530 [ 71.055164][ T4246] ? __virt_addr_valid+0x45b/0x530 [ 71.060274][ T4246] ? __phys_addr+0xb6/0x170 [ 71.064779][ T4246] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 71.070254][ T4246] kasan_report+0x136/0x160 [ 71.074745][ T4246] ? __x64_sys_unlink+0x45/0x50 [ 71.079617][ T4246] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 71.085088][ T4246] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 71.090541][ T4246] kasan_check_range+0x27f/0x290 [ 71.095472][ T4246] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 71.100937][ T4246] memmove+0x25/0x60 [ 71.104826][ T4246] ext4_xattr_set_entry+0x8ca/0x1f30 [ 71.110110][ T4246] ? ext4_xattr_inode_lookup_create+0x1ef0/0x1ef0 [ 71.116516][ T4246] ? ext4_xattr_block_set+0x884/0x3920 [ 71.121971][ T4246] ? kmemdup+0x41/0x60 [ 71.126039][ T4246] ? memcpy+0x3c/0x60 [ 71.130029][ T4246] ext4_xattr_block_set+0xa58/0x3920 [ 71.135342][ T4246] ? __getblk_gfp+0x50/0xa20 [ 71.139938][ T4246] ? _raw_spin_unlock+0x24/0x40 [ 71.144793][ T4246] ? ext4_xattr_block_find+0x510/0x510 [ 71.150252][ T4246] ? ext4_xattr_block_find+0x468/0x510 [ 71.155711][ T4246] ext4_expand_extra_isize_ea+0x10d5/0x1bb0 [ 71.161613][ T4246] ? ext4_xattr_set+0x3d0/0x3d0 [ 71.166455][ T4246] ? rwsem_write_trylock+0x166/0x210 [ 71.171741][ T4246] ? clear_nonspinnable+0x60/0x60 [ 71.176779][ T4246] ? ext4_reserve_inode_write+0x2b3/0x360 [ 71.182499][ T4246] ? dquot_initialize_needed+0x128/0x320 [ 71.188131][ T4246] __ext4_expand_extra_isize+0x2f7/0x3d0 [ 71.193766][ T4246] __ext4_mark_inode_dirty+0x54f/0x920 [ 71.199225][ T4246] ? ext4_blocks_for_truncate+0x270/0x270 [ 71.204936][ T4246] ? current_time+0x1ba/0x300 [ 71.209614][ T4246] ? atime_needs_update+0x7b0/0x7b0 [ 71.214812][ T4246] __ext4_unlink+0x6ed/0xba0 [ 71.219415][ T4246] ? __ext4_read_dirblock+0x890/0x890 [ 71.224818][ T4246] ? rwsem_write_trylock+0x166/0x210 [ 71.230107][ T4246] ? inode_permission+0xf7/0x450 [ 71.235056][ T4246] ? clear_nonspinnable+0x60/0x60 [ 71.240082][ T4246] ext4_unlink+0x1d5/0x670 [ 71.244494][ T4246] vfs_unlink+0x359/0x5f0 [ 71.248847][ T4246] do_unlinkat+0x4a5/0x820 [ 71.253282][ T4246] ? fsnotify_link_count+0xf0/0xf0 [ 71.258397][ T4246] __x64_sys_unlink+0x45/0x50 [ 71.263093][ T4246] do_syscall_64+0x3b/0xb0 [ 71.267500][ T4246] ? clear_bhb_loop+0x45/0xa0 [ 71.272167][ T4246] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 71.278057][ T4246] RIP: 0033:0x7f17e61949f9 [ 71.282474][ T4246] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 71.302071][ T4246] RSP: 002b:00007ffc24fb5158 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 71.310495][ T4246] RAX: ffffffffffffffda RBX: 0031656c69662f2e RCX: 00007f17e61949f9 [ 71.318478][ T4246] RDX: 00007f17e61949f9 RSI: 00007f17e61949f9 RDI: 0000000020000180 [ 71.326440][ T4246] RBP: 0032656c69662f2e R08: 0000000000000000 R09: 0000000000000000 [ 71.334400][ T4246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.342361][ T4246] R13: 00007ffc24fb5338 R14: 0000000000000001 R15: 0000000000000001 [ 71.350327][ T4246] [ 71.353377][ T4246] [ 71.355687][ T4246] Allocated by task 4246: [ 71.359998][ T4246] kasan_set_track+0x4b/0x70 [ 71.364604][ T4246] __kasan_kmalloc+0x97/0xb0 [ 71.369183][ T4246] __kmalloc_node_track_caller+0xb1/0x220 [ 71.374914][ T4246] kmemdup+0x26/0x60 [ 71.378800][ T4246] ext4_xattr_block_set+0x884/0x3920 [ 71.384086][ T4246] ext4_expand_extra_isize_ea+0x10d5/0x1bb0 [ 71.389968][ T4246] __ext4_expand_extra_isize+0x2f7/0x3d0 [ 71.395595][ T4246] __ext4_mark_inode_dirty+0x54f/0x920 [ 71.401049][ T4246] __ext4_unlink+0x6ed/0xba0 [ 71.405628][ T4246] ext4_unlink+0x1d5/0x670 [ 71.410035][ T4246] vfs_unlink+0x359/0x5f0 [ 71.414358][ T4246] do_unlinkat+0x4a5/0x820 [ 71.418768][ T4246] __x64_sys_unlink+0x45/0x50 [ 71.423438][ T4246] do_syscall_64+0x3b/0xb0 [ 71.427847][ T4246] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 71.433735][ T4246] [ 71.436047][ T4246] The buggy address belongs to the object at ffff888030359000 [ 71.436047][ T4246] which belongs to the cache kmalloc-1k of size 1024 [ 71.450086][ T4246] The buggy address is located 80 bytes inside of [ 71.450086][ T4246] 1024-byte region [ffff888030359000, ffff888030359400) [ 71.463366][ T4246] [ 71.465677][ T4246] The buggy address belongs to the physical page: [ 71.472096][ T4246] page:ffffea0000c0d600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x30358 [ 71.482232][ T4246] head:ffffea0000c0d600 order:3 compound_mapcount:0 compound_pincount:0 [ 71.490550][ T4246] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 71.498526][ T4246] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888017c41dc0 [ 71.507127][ T4246] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 71.515696][ T4246] page dumped because: kasan: bad access detected [ 71.522098][ T4246] page_owner tracks the page as allocated [ 71.527798][ T4246] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3611, tgid 3611 (klogd), ts 70932346001, free_ts 70812365939 [ 71.548540][ T4246] post_alloc_hook+0x18d/0x1b0 [ 71.553294][ T4246] get_page_from_freelist+0x322e/0x33b0 [ 71.558843][ T4246] __alloc_pages+0x28d/0x770 [ 71.563423][ T4246] alloc_slab_page+0x6a/0x150 [ 71.568095][ T4246] new_slab+0x84/0x2d0 [ 71.572155][ T4246] ___slab_alloc+0xc20/0x1270 [ 71.576830][ T4246] __kmem_cache_alloc_node+0x19f/0x260 [ 71.582281][ T4246] kmalloc_trace+0x26/0xe0 [ 71.586688][ T4246] syslog_print+0x11d/0x9b0 [ 71.591189][ T4246] do_syslog+0x819/0x910 [ 71.595427][ T4246] __x64_sys_syslog+0x78/0x90 [ 71.600100][ T4246] do_syscall_64+0x3b/0xb0 [ 71.604507][ T4246] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 71.610422][ T4246] page last free stack trace: [ 71.615084][ T4246] free_unref_page_prepare+0xf63/0x1120 [ 71.620644][ T4246] free_unref_page+0x33/0x3e0 [ 71.625312][ T4246] __unfreeze_partials+0x1b7/0x210 [ 71.630425][ T4246] put_cpu_partial+0x17b/0x250 [ 71.635181][ T4246] qlist_free_all+0x76/0xe0 [ 71.639700][ T4246] kasan_quarantine_reduce+0x156/0x170 [ 71.645154][ T4246] __kasan_slab_alloc+0x1f/0x70 [ 71.649994][ T4246] slab_post_alloc_hook+0x52/0x3a0 [ 71.655098][ T4246] kmem_cache_alloc_lru+0x10c/0x2d0 [ 71.660301][ T4246] new_inode_pseudo+0x81/0x1d0 [ 71.665067][ T4246] create_pipe_files+0x4c/0x700 [ 71.669914][ T4246] __do_pipe_flags+0x46/0x200 [ 71.674615][ T4246] do_pipe2+0xd0/0x300 [ 71.678700][ T4246] __x64_sys_pipe2+0x56/0x60 [ 71.683299][ T4246] do_syscall_64+0x3b/0xb0 [ 71.687705][ T4246] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 71.693599][ T4246] [ 71.695913][ T4246] Memory state around the buggy address: [ 71.701531][ T4246] ffff888030358f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 71.709584][ T4246] ffff888030358f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 71.717669][ T4246] >ffff888030359000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 71.725720][ T4246] ^ [ 71.732379][ T4246] ffff888030359080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 71.740427][ T4246] ffff888030359100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 71.748478][ T4246] ================================================================== [ 71.759364][ T4246] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 71.766574][ T4246] CPU: 0 PID: 4246 Comm: syz-executor828 Not tainted 6.1.114-syzkaller #0 [ 71.775085][ T4246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 71.785136][ T4246] Call Trace: [ 71.788410][ T4246] [ 71.791331][ T4246] dump_stack_lvl+0x1e3/0x2cb [ 71.796002][ T4246] ? nf_tcp_handle_invalid+0x642/0x642 [ 71.801462][ T4246] ? panic+0x764/0x764 [ 71.805536][ T4246] ? preempt_schedule_common+0xa6/0xd0 [ 71.810994][ T4246] ? vscnprintf+0x59/0x80 [ 71.815322][ T4246] panic+0x318/0x764 [ 71.819216][ T4246] ? check_panic_on_warn+0x1d/0xa0 [ 71.824349][ T4246] ? memcpy_page_flushcache+0xfc/0xfc [ 71.829716][ T4246] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 71.835695][ T4246] ? _raw_spin_unlock+0x40/0x40 [ 71.840553][ T4246] check_panic_on_warn+0x7e/0xa0 [ 71.845493][ T4246] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 71.850977][ T4246] end_report+0x66/0x110 [ 71.855225][ T4246] kasan_report+0x143/0x160 [ 71.859727][ T4246] ? __x64_sys_unlink+0x45/0x50 [ 71.864577][ T4246] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 71.870041][ T4246] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 71.875509][ T4246] kasan_check_range+0x27f/0x290 [ 71.880448][ T4246] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 71.885912][ T4246] memmove+0x25/0x60 [ 71.889808][ T4246] ext4_xattr_set_entry+0x8ca/0x1f30 [ 71.895100][ T4246] ? ext4_xattr_inode_lookup_create+0x1ef0/0x1ef0 [ 71.901522][ T4246] ? ext4_xattr_block_set+0x884/0x3920 [ 71.906982][ T4246] ? kmemdup+0x41/0x60 [ 71.911061][ T4246] ? memcpy+0x3c/0x60 [ 71.915067][ T4246] ext4_xattr_block_set+0xa58/0x3920 [ 71.920377][ T4246] ? __getblk_gfp+0x50/0xa20 [ 71.924975][ T4246] ? _raw_spin_unlock+0x24/0x40 [ 71.929882][ T4246] ? ext4_xattr_block_find+0x510/0x510 [ 71.935374][ T4246] ? ext4_xattr_block_find+0x468/0x510 [ 71.940843][ T4246] ext4_expand_extra_isize_ea+0x10d5/0x1bb0 [ 71.946758][ T4246] ? ext4_xattr_set+0x3d0/0x3d0 [ 71.951609][ T4246] ? rwsem_write_trylock+0x166/0x210 [ 71.956904][ T4246] ? clear_nonspinnable+0x60/0x60 [ 71.961942][ T4246] ? ext4_reserve_inode_write+0x2b3/0x360 [ 71.967676][ T4246] ? dquot_initialize_needed+0x128/0x320 [ 71.973323][ T4246] __ext4_expand_extra_isize+0x2f7/0x3d0 [ 71.978985][ T4246] __ext4_mark_inode_dirty+0x54f/0x920 [ 71.984451][ T4246] ? ext4_blocks_for_truncate+0x270/0x270 [ 71.990174][ T4246] ? current_time+0x1ba/0x300 [ 71.994864][ T4246] ? atime_needs_update+0x7b0/0x7b0 [ 72.000073][ T4246] __ext4_unlink+0x6ed/0xba0 [ 72.004670][ T4246] ? __ext4_read_dirblock+0x890/0x890 [ 72.010044][ T4246] ? rwsem_write_trylock+0x166/0x210 [ 72.015336][ T4246] ? inode_permission+0xf7/0x450 [ 72.020274][ T4246] ? clear_nonspinnable+0x60/0x60 [ 72.025312][ T4246] ext4_unlink+0x1d5/0x670 [ 72.029737][ T4246] vfs_unlink+0x359/0x5f0 [ 72.034071][ T4246] do_unlinkat+0x4a5/0x820 [ 72.038493][ T4246] ? fsnotify_link_count+0xf0/0xf0 [ 72.043614][ T4246] __x64_sys_unlink+0x45/0x50 [ 72.048298][ T4246] do_syscall_64+0x3b/0xb0 [ 72.052710][ T4246] ? clear_bhb_loop+0x45/0xa0 [ 72.057396][ T4246] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 72.063290][ T4246] RIP: 0033:0x7f17e61949f9 [ 72.067698][ T4246] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 72.087296][ T4246] RSP: 002b:00007ffc24fb5158 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 72.095707][ T4246] RAX: ffffffffffffffda RBX: 0031656c69662f2e RCX: 00007f17e61949f9 [ 72.103686][ T4246] RDX: 00007f17e61949f9 RSI: 00007f17e61949f9 RDI: 0000000020000180 [ 72.111671][ T4246] RBP: 0032656c69662f2e R08: 0000000000000000 R09: 0000000000000000 [ 72.119644][ T4246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.127621][ T4246] R13: 00007ffc24fb5338 R14: 0000000000000001 R15: 0000000000000001 [ 72.135621][ T4246] [ 72.138970][ T4246] Kernel Offset: disabled [ 72.143292][ T4246] Rebooting in 86400 seconds..