program:
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x36, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc", 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="0102", 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x840041, 0x0)
setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRESHEX], 0xfe37, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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") (async)
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x36, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc", 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="0102", 0x0}, 0x50) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async)
mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x840041, 0x0) (async)
setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) (async)
lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRESHEX], 0xfe37, 0x0) (async)
[ 74.683540][ T5334] Bluetooth: hci0: command tx timeout
[ 74.718680][ T5355] loop0: detected capacity change from 0 to 1024
[ 74.756474][ T5355] =======================================================
[ 74.756474][ T5355] WARNING: The mand mount option has been deprecated and
[ 74.756474][ T5355] and is ignored by this kernel. Remove the mand
[ 74.756474][ T5355] option from the mount to silence this warning.
[ 74.756474][ T5355] =======================================================
[ 74.829101][ T5355] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 74.877034][ T5355] ==================================================================
[ 74.880715][ T5355] BUG: KASAN: slab-out-of-bounds in ext4_xattr_set_entry+0x179e/0x1e20
[ 74.884174][ T5355] Read of size 26214 at addr ffff8880123a2800 by task syz.0.0/5355
[ 74.887307][ T5355]
[ 74.888383][ T5355] CPU: 0 UID: 0 PID: 5355 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 74.888397][ T5355] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 74.888405][ T5355] Call Trace:
[ 74.888412][ T5355]
[ 74.888417][ T5355] dump_stack_lvl+0x189/0x250
[ 74.888434][ T5355] ? __kasan_check_byte+0x12/0x40
[ 74.888449][ T5355] ? __pfx_dump_stack_lvl+0x10/0x10
[ 74.888462][ T5355] ? lock_release+0x4b/0x3e0
[ 74.888478][ T5355] ? __virt_addr_valid+0x4a5/0x5c0
[ 74.888493][ T5355] print_report+0xca/0x240
[ 74.888504][ T5355] ? ext4_xattr_set_entry+0x179e/0x1e20
[ 74.888516][ T5355] kasan_report+0x118/0x150
[ 74.888530][ T5355] ? ext4_xattr_set_entry+0x179e/0x1e20
[ 74.888545][ T5355] kasan_check_range+0x2b0/0x2c0
[ 74.888558][ T5355] ? ext4_xattr_set_entry+0x179e/0x1e20
[ 74.888572][ T5355] __asan_memmove+0x29/0x70
[ 74.888583][ T5355] ext4_xattr_set_entry+0x179e/0x1e20
[ 74.888601][ T5355] ext4_xattr_block_set+0x872/0x2ac0
[ 74.888614][ T5355] ? __pfx_ext4_free_in_core_inode+0x10/0x10
[ 74.888628][ T5355] ? __pfx_evict+0x10/0x10
[ 74.888639][ T5355] ? do_raw_spin_unlock+0x4d/0x240
[ 74.888652][ T5355] ? _raw_spin_unlock+0x28/0x50
[ 74.888712][ T5355] ? __pfx_ext4_xattr_block_set+0x10/0x10
[ 74.888725][ T5355] ? ext4_xattr_ibody_set+0x510/0x6a0
[ 74.888740][ T5355] ext4_xattr_set_handle+0xdfb/0x1590
[ 74.888757][ T5355] ? __pfx_ext4_xattr_set_handle+0x10/0x10
[ 74.888773][ T5355] ? __ext4_journal_start_sb+0x27e/0x5c0
[ 74.888788][ T5355] ext4_xattr_set+0x230/0x320
[ 74.888804][ T5355] ? __pfx_ext4_xattr_set+0x10/0x10
[ 74.888817][ T5355] ? __pfx_evm_protect_xattr+0x10/0x10
[ 74.888830][ T5355] ? __pfx_ext4_xattr_trusted_set+0x10/0x10
[ 74.888845][ T5355] __vfs_setxattr+0x43c/0x480
[ 74.888861][ T5355] __vfs_setxattr_noperm+0x12d/0x660
[ 74.888877][ T5355] vfs_setxattr+0x16b/0x2f0
[ 74.888891][ T5355] ? __pfx_vfs_setxattr+0x10/0x10
[ 74.888903][ T5355] ? mnt_get_write_access+0x223/0x2a0
[ 74.888916][ T5355] filename_setxattr+0x274/0x600
[ 74.888931][ T5355] ? __pfx_filename_setxattr+0x10/0x10
[ 74.888946][ T5355] ? getname_flags+0x1e5/0x540
[ 74.888961][ T5355] path_setxattrat+0x364/0x3a0
[ 74.888973][ T5355] ? __pfx_path_setxattrat+0x10/0x10
[ 74.888990][ T5355] ? rcu_is_watching+0x15/0xb0
[ 74.889002][ T5355] __x64_sys_lsetxattr+0xbf/0xe0
[ 74.889015][ T5355] do_syscall_64+0xfa/0x3b0
[ 74.889024][ T5355] ? lockdep_hardirqs_on+0x9c/0x150
[ 74.889033][ T5355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 74.889043][ T5355] ? clear_bhb_loop+0x60/0xb0
[ 74.889056][ T5355] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 74.889067][ T5355] RIP: 0033:0x7fc98f58ec29
[ 74.889077][ T5355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 74.889087][ T5355] RSP: 002b:00007fc9903ab038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd
[ 74.889101][ T5355] RAX: ffffffffffffffda RBX: 00007fc98f7d5fa0 RCX: 00007fc98f58ec29
[ 74.889109][ T5355] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000280
[ 74.889117][ T5355] RBP: 00007fc98f611e41 R08: 0000000000000000 R09: 0000000000000000
[ 74.889124][ T5355] R10: 000000000000fe37 R11: 0000000000000246 R12: 0000000000000000
[ 74.889130][ T5355] R13: 00007fc98f7d6038 R14: 00007fc98f7d5fa0 R15: 00007ffd16468c78
[ 74.889141][ T5355]
[ 74.889145][ T5355]
[ 75.025660][ T5355] Allocated by task 5355:
[ 75.027548][ T5355] kasan_save_track+0x3e/0x80
[ 75.029538][ T5355] __kasan_kmalloc+0x93/0xb0
[ 75.031395][ T5355] __kmalloc_node_track_caller_noprof+0x271/0x4e0
[ 75.034161][ T5355] kmemdup_noprof+0x2b/0x70
[ 75.035998][ T5355] ext4_xattr_block_set+0x781/0x2ac0
[ 75.038166][ T5355] ext4_xattr_set_handle+0xdfb/0x1590
[ 75.040445][ T5355] ext4_xattr_set+0x230/0x320
[ 75.042477][ T5355] __vfs_setxattr+0x43c/0x480
[ 75.044422][ T5355] __vfs_setxattr_noperm+0x12d/0x660
[ 75.046609][ T5355] vfs_setxattr+0x16b/0x2f0
[ 75.048542][ T5355] filename_setxattr+0x274/0x600
[ 75.050570][ T5355] path_setxattrat+0x364/0x3a0
[ 75.052615][ T5355] __x64_sys_lsetxattr+0xbf/0xe0
[ 75.054650][ T5355] do_syscall_64+0xfa/0x3b0
[ 75.056389][ T5355] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 75.059045][ T5355]
[ 75.060131][ T5355] The buggy address belongs to the object at ffff8880123a2800
[ 75.060131][ T5355] which belongs to the cache kmalloc-1k of size 1024
[ 75.065734][ T5355] The buggy address is located 0 bytes inside of
[ 75.065734][ T5355] allocated 1024-byte region [ffff8880123a2800, ffff8880123a2c00)
[ 75.070742][ T5355]
[ 75.071679][ T5355] The buggy address belongs to the physical page:
[ 75.073997][ T5355] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x123a0
[ 75.077190][ T5355] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 75.080553][ T5355] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 75.084007][ T5355] page_type: f5(slab)
[ 75.085626][ T5355] raw: 00fff00000000040 ffff88801a841dc0 0000000000000000 dead000000000001
[ 75.088937][ T5355] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000
[ 75.092543][ T5355] head: 00fff00000000040 ffff88801a841dc0 0000000000000000 dead000000000001
[ 75.096401][ T5355] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000
[ 75.100134][ T5355] head: 00fff00000000002 ffffea000048e801 00000000ffffffff 00000000ffffffff
[ 75.103803][ T5355] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[ 75.107431][ T5355] page dumped because: kasan: bad access detected
[ 75.110113][ T5355] page_owner tracks the page as allocated
[ 75.112397][ T5355] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4730, tgid 4730 (init), ts 26471816469, free_ts 25956672464
[ 75.121121][ T5355] post_alloc_hook+0x240/0x2a0
[ 75.123153][ T5355] get_page_from_freelist+0x21e4/0x22c0
[ 75.125541][ T5355] __alloc_frozen_pages_noprof+0x181/0x370
[ 75.128213][ T5355] alloc_pages_mpol+0x232/0x4a0
[ 75.130022][ T5355] allocate_slab+0x8a/0x370
[ 75.131943][ T5355] ___slab_alloc+0xbeb/0x1420
[ 75.134019][ T5355] __kmalloc_noprof+0x305/0x4f0
[ 75.136157][ T5355] load_elf_phdrs+0x13e/0x230
[ 75.138124][ T5355] load_elf_binary+0x959/0x2740
[ 75.140211][ T5355] bprm_execve+0x999/0x1450
[ 75.142226][ T5355] do_execveat_common+0x510/0x6a0
[ 75.144460][ T5355] __x64_sys_execve+0x94/0xb0
[ 75.146495][ T5355] do_syscall_64+0xfa/0x3b0
[ 75.148446][ T5355] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 75.151001][ T5355] page last free pid 1 tgid 1 stack trace:
[ 75.153548][ T5355] __free_frozen_pages+0xbc4/0xd30
[ 75.155800][ T5355] free_reserved_page+0xce/0x120
[ 75.158053][ T5355] free_reserved_area+0x90/0x190
[ 75.160320][ T5355] free_kernel_image_pages+0xa2/0x100
[ 75.162674][ T5355] kernel_init+0x31/0x1d0
[ 75.164551][ T5355] ret_from_fork+0x439/0x7d0
[ 75.166701][ T5355] ret_from_fork_asm+0x1a/0x30
[ 75.168876][ T5355]
[ 75.169959][ T5355] Memory state around the buggy address:
[ 75.172418][ T5355] ffff8880123a2b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 75.175917][ T5355] ffff8880123a2b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 75.179229][ T5355] >ffff8880123a2c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 75.182631][ T5355] ^
[ 75.184340][ T5355] ffff8880123a2c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 75.187957][ T5355] ffff8880123a2d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 75.191882][ T5355] ==================================================================
[ 75.224022][ T5355] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 75.227032][ T5355] CPU: 0 UID: 0 PID: 5355 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 75.230719][ T5355] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 75.235080][ T5355] Call Trace:
[ 75.236501][ T5355]
[ 75.237784][ T5355] dump_stack_lvl+0x99/0x250
[ 75.239695][ T5355] ? __asan_memcpy+0x40/0x70
[ 75.241695][ T5355] ? __pfx_dump_stack_lvl+0x10/0x10
[ 75.243736][ T5355] ? __pfx__printk+0x10/0x10
[ 75.245650][ T5355] vpanic+0x281/0x750
[ 75.247368][ T5355] ? preempt_schedule+0xae/0xc0
[ 75.249401][ T5355] ? __pfx_vpanic+0x10/0x10
[ 75.251357][ T5355] ? preempt_schedule_common+0x83/0xd0
[ 75.253560][ T5355] ? preempt_schedule+0xae/0xc0
[ 75.255541][ T5355] ? __pfx_preempt_schedule+0x10/0x10
[ 75.257771][ T5355] panic+0xb9/0xc0
[ 75.259242][ T5355] ? __pfx_panic+0x10/0x10
[ 75.260981][ T5355] ? _raw_spin_unlock_irqrestore+0xfd/0x110
[ 75.263417][ T5355] ? ext4_xattr_set_entry+0x179e/0x1e20
[ 75.265764][ T5355] check_panic_on_warn+0x89/0xb0
[ 75.267883][ T5355] ? ext4_xattr_set_entry+0x179e/0x1e20
[ 75.270213][ T5355] end_report+0x78/0x160
[ 75.272053][ T5355] kasan_report+0x129/0x150
[ 75.273974][ T5355] ? ext4_xattr_set_entry+0x179e/0x1e20
[ 75.276329][ T5355] kasan_check_range+0x2b0/0x2c0
[ 75.278361][ T5355] ? ext4_xattr_set_entry+0x179e/0x1e20
[ 75.280634][ T5355] __asan_memmove+0x29/0x70
[ 75.282777][ T5355] ext4_xattr_set_entry+0x179e/0x1e20
[ 75.285127][ T5355] ext4_xattr_block_set+0x872/0x2ac0
[ 75.287459][ T5355] ? __pfx_ext4_free_in_core_inode+0x10/0x10
[ 75.290108][ T5355] ? __pfx_evict+0x10/0x10
[ 75.292044][ T5355] ? do_raw_spin_unlock+0x4d/0x240
[ 75.294357][ T5355] ? _raw_spin_unlock+0x28/0x50
[ 75.296351][ T5355] ? __pfx_ext4_xattr_block_set+0x10/0x10
[ 75.298343][ T5355] ? ext4_xattr_ibody_set+0x510/0x6a0
[ 75.300193][ T5355] ext4_xattr_set_handle+0xdfb/0x1590
[ 75.302256][ T5355] ? __pfx_ext4_xattr_set_handle+0x10/0x10
[ 75.304624][ T5355] ? __ext4_journal_start_sb+0x27e/0x5c0
[ 75.306797][ T5355] ext4_xattr_set+0x230/0x320
[ 75.308785][ T5355] ? __pfx_ext4_xattr_set+0x10/0x10
[ 75.310936][ T5355] ? __pfx_evm_protect_xattr+0x10/0x10
[ 75.313410][ T5355] ? __pfx_ext4_xattr_trusted_set+0x10/0x10
[ 75.315991][ T5355] __vfs_setxattr+0x43c/0x480
[ 75.317965][ T5355] __vfs_setxattr_noperm+0x12d/0x660
[ 75.320280][ T5355] vfs_setxattr+0x16b/0x2f0
[ 75.322127][ T5355] ? __pfx_vfs_setxattr+0x10/0x10
[ 75.324309][ T5355] ? mnt_get_write_access+0x223/0x2a0
[ 75.326664][ T5355] filename_setxattr+0x274/0x600
[ 75.328617][ T5355] ? __pfx_filename_setxattr+0x10/0x10
[ 75.330939][ T5355] ? getname_flags+0x1e5/0x540
[ 75.333070][ T5355] path_setxattrat+0x364/0x3a0
[ 75.335221][ T5355] ? __pfx_path_setxattrat+0x10/0x10
[ 75.337539][ T5355] ? rcu_is_watching+0x15/0xb0
[ 75.339682][ T5355] __x64_sys_lsetxattr+0xbf/0xe0
[ 75.341917][ T5355] do_syscall_64+0xfa/0x3b0
[ 75.343982][ T5355] ? lockdep_hardirqs_on+0x9c/0x150
[ 75.346353][ T5355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 75.348993][ T5355] ? clear_bhb_loop+0x60/0xb0
[ 75.351067][ T5355] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 75.353715][ T5355] RIP: 0033:0x7fc98f58ec29
[ 75.355719][ T5355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 75.363876][ T5355] RSP: 002b:00007fc9903ab038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd
[ 75.366984][ T5355] RAX: ffffffffffffffda RBX: 00007fc98f7d5fa0 RCX: 00007fc98f58ec29
[ 75.370337][ T5355] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000280
[ 75.373180][ T5355] RBP: 00007fc98f611e41 R08: 0000000000000000 R09: 0000000000000000
[ 75.376239][ T5355] R10: 000000000000fe37 R11: 0000000000000246 R12: 0000000000000000
[ 75.379433][ T5355] R13: 00007fc98f7d6038 R14: 00007fc98f7d5fa0 R15: 00007ffd16468c78
[ 75.382858][ T5355]
[ 75.384550][ T5355] Kernel Offset: disabled
[ 75.386423][ T5355] Rebooting in 86400 seconds..