program:
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000c8e000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x3})
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000240)={[{@grpid}, {@auto_da_alloc}, {@grpid}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x7, 0x4da, &(0x7f0000000900)="$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")
r1 = creat(&(0x7f0000000100)='./file1\x00', 0xe0)
getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f00000000c0), &(0x7f0000000140)=0x4)
write$UHID_INPUT(r1, &(0x7f0000001680)={0x8, {"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", 0x1000}}, 0x1006)
r2 = syz_open_dev$loop(&(0x7f0000000340), 0x0, 0x600)
r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
ioctl$VIDIOC_S_TUNER(r3, 0x4054561e, &(0x7f0000000480)={0x0, "a13af44834554fd2dd6ba86c57a6c49246dfb680786178e94f01da81cbc0e283", 0x4, 0x80, 0x8, 0x4, 0x4, 0x9fb3f6164d11537f, 0x6, 0xfffffffd})
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000240)={0x0, {}, 0x0, {}, 0x7, 0xa, 0xf, 0x5, "9e959f16de7d289812a2858f3b56a516950600000000000000eef4fb0efcc1cba6078ed9d5f8643902dd8f6fac274de9d940ffa5e592bbd48685450d00002000", "f625c14dc8df0c1b90f2de2cf046ff1600", [0x8, 0x203a]})
close(r1)
[ 84.623343][ T5328] loop0: detected capacity change from 0 to 512
[ 84.711031][ T45] Bluetooth: hci0: command tx timeout
[ 84.746188][ T5328] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.0: invalid indirect mapped block 256 (level 2)
[ 84.752131][ T5328] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 84.754544][ C0] EXT4-fs (loop0): error count since last fsck: 1
[ 84.762610][ C0] EXT4-fs (loop0): initial error at time 1779589333: ext4_free_branches:1023: inode 11
[ 84.766962][ C0] EXT4-fs (loop0): last error at time 1779589333: ext4_free_branches:1023: inode 11
[ 84.773352][ T5328] EXT4-fs (loop0): 2 truncates cleaned up
[ 84.795595][ T5328] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 84.856554][ T5328] loop0: detected capacity change from 512 to 511
[ 84.878855][ T5328] ==================================================================
[ 84.882444][ T5328] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x9c1/0x1e20
[ 84.885977][ T5328] Read of size 18446744073709551600 at addr ffff88805558c2b8 by task syz.0.0/5328
[ 84.889896][ T5328]
[ 84.891054][ T5328] CPU: 0 UID: 0 PID: 5328 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 84.891073][ T5328] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 84.891081][ T5328] Call Trace:
[ 84.891088][ T5328]
[ 84.891095][ T5328] dump_stack_lvl+0xe8/0x150
[ 84.891116][ T5328] print_address_description+0x55/0x1e0
[ 84.891131][ T5328] ? ext4_xattr_set_entry+0x9c1/0x1e20
[ 84.891153][ T5328] print_report+0x58/0x70
[ 84.891164][ T5328] kasan_report+0x117/0x150
[ 84.891182][ T5328] ? ext4_xattr_set_entry+0x9c1/0x1e20
[ 84.891203][ T5328] ? ext4_xattr_set_entry+0x9c1/0x1e20
[ 84.891223][ T5328] kasan_check_range+0x264/0x2c0
[ 84.891238][ T5328] ? ext4_xattr_set_entry+0x9c1/0x1e20
[ 84.891254][ T5328] __asan_memmove+0x29/0x70
[ 84.891268][ T5328] ext4_xattr_set_entry+0x9c1/0x1e20
[ 84.891291][ T5328] ext4_xattr_ibody_set+0x254/0x6a0
[ 84.891310][ T5328] ext4_destroy_inline_data_nolock+0x23a/0x5e0
[ 84.891325][ T5328] ? __pfx_ext4_destroy_inline_data_nolock+0x10/0x10
[ 84.891341][ T5328] ? down_write+0x16d/0x200
[ 84.891406][ T5328] ? ext4_journal_check_start+0x1cf/0x2b0
[ 84.891427][ T5328] ext4_destroy_inline_data+0x83/0xe0
[ 84.891443][ T5328] ext4_do_writepages+0x51e/0x4670
[ 84.891459][ T5328] ? __resched_curr+0x106/0x3f0
[ 84.891474][ T5328] ? __lock_acquire+0x6b5/0x2cf0
[ 84.891491][ T5328] ? look_up_lock_class+0x57/0x110
[ 84.891509][ T5328] ? register_lock_class+0x31/0x2e0
[ 84.891522][ T5328] ? __pfx_ext4_do_writepages+0x10/0x10
[ 84.891537][ T5328] ? __lock_acquire+0x6b5/0x2cf0
[ 84.891552][ T5328] ? rcu_is_watching+0x15/0xb0
[ 84.891565][ T5328] ? trace_hrtimer_start+0x82/0x200
[ 84.891585][ T5328] ? ext4_writepages+0x205/0x3b0
[ 84.891601][ T5328] ? ext4_writepages+0x205/0x3b0
[ 84.891616][ T5328] ext4_writepages+0x241/0x3b0
[ 84.891628][ T5328] ? __lock_acquire+0x6b5/0x2cf0
[ 84.891642][ T5328] ? __pfx_ext4_writepages+0x10/0x10
[ 84.891660][ T5328] ? __pfx_ext4_writepages+0x10/0x10
[ 84.891672][ T5328] do_writepages+0x32e/0x550
[ 84.891693][ T5328] ? do_raw_spin_unlock+0x4d/0x210
[ 84.891709][ T5328] filemap_flush+0x1e1/0x2e0
[ 84.891727][ T5328] ? __pfx_filemap_flush+0x10/0x10
[ 84.891751][ T5328] ? __asan_memset+0x22/0x50
[ 84.891768][ T5328] ? locks_remove_posix+0x14f/0x6a0
[ 84.891783][ T5328] ? rcu_is_watching+0x15/0xb0
[ 84.891797][ T5328] ext4_release_file+0x82/0x310
[ 84.891813][ T5328] ? __pfx_ext4_release_file+0x10/0x10
[ 84.891828][ T5328] __fput+0x44f/0xa60
[ 84.891842][ T5328] fput_close_sync+0x11f/0x240
[ 84.891854][ T5328] ? __pfx_fput_close_sync+0x10/0x10
[ 84.891866][ T5328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 84.891876][ T5328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 84.891885][ T5328] __x64_sys_close+0x7e/0x110
[ 84.891897][ T5328] do_syscall_64+0x15f/0xf80
[ 84.891914][ T5328] ? trace_irq_disable+0x3b/0x140
[ 84.891935][ T5328] ? clear_bhb_loop+0x40/0x90
[ 84.891948][ T5328] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 84.891960][ T5328] RIP: 0033:0x7f4b77d9ce59
[ 84.891973][ T5328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 84.891983][ T5328] RSP: 002b:00007f4b78cd6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[ 84.891999][ T5328] RAX: ffffffffffffffda RBX: 00007f4b78015fa0 RCX: 00007f4b77d9ce59
[ 84.892008][ T5328] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
[ 84.892015][ T5328] RBP: 00007f4b77e32d6f R08: 0000000000000000 R09: 0000000000000000
[ 84.892024][ T5328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 84.892031][ T5328] R13: 00007f4b78016038 R14: 00007f4b78015fa0 R15: 00007fff08b8a5a8
[ 84.892043][ T5328]
[ 84.892047][ T5328]
[ 85.049015][ T5328] The buggy address belongs to the physical page:
[ 85.051893][ T5328] page: refcount:3 mapcount:0 mapping:ffff88801cc25940 index:0x2 pfn:0x5558c
[ 85.056157][ T5328] memcg:ffff888012f35e80
[ 85.058682][ T5328] aops:def_blk_aops ino:700000 dentry name(?):""
[ 85.061728][ T5328] flags: 0x4fff18000004204(referenced|workingset|private|node=1|zone=1|lastcpupid=0x7ff)
[ 85.066298][ T5328] raw: 04fff18000004204 0000000000000000 dead000000000122 ffff88801cc25940
[ 85.070857][ T5328] raw: 0000000000000002 ffff888046f36740 00000003ffffffff ffff888012f35e80
[ 85.074172][ T5328] page dumped because: kasan: bad access detected
[ 85.076504][ T5328] page_owner tracks the page as allocated
[ 85.078755][ T5328] page last allocated via order 0, migratetype Movable, gfp_mask 0x148c48(GFP_NOFS|__GFP_MOVABLE|__GFP_NOFAIL|__GFP_COMP|__GFP_HARDWALL), pid 5328, tgid 5326 (syz.0.0), ts 84863735014, free_ts 84840150325
[ 85.087028][ T5328] post_alloc_hook+0x22d/0x280
[ 85.089042][ T5328] get_page_from_freelist+0x24ba/0x2540
[ 85.091328][ T5328] __alloc_frozen_pages_noprof+0x18d/0x380
[ 85.093791][ T5328] alloc_pages_mpol+0x235/0x490
[ 85.095983][ T5328] alloc_pages_noprof+0xac/0x2a0
[ 85.098063][ T5328] folio_alloc_noprof+0x1e/0x30
[ 85.100573][ T5328] filemap_alloc_folio_noprof+0x111/0x470
[ 85.103421][ T5328] __filemap_get_folio_mpol+0x3fc/0xb00
[ 85.105766][ T5328] bdev_getblk+0x1f6/0x6e0
[ 85.107700][ T5328] __ext4_get_inode_loc+0x528/0xfa0
[ 85.109810][ T5328] ext4_get_inode_loc+0x81/0xf0
[ 85.111669][ T5328] ext4_destroy_inline_data_nolock+0x140/0x5e0
[ 85.114333][ T5328] ext4_destroy_inline_data+0x83/0xe0
[ 85.116656][ T5328] ext4_do_writepages+0x51e/0x4670
[ 85.118791][ T5328] ext4_writepages+0x241/0x3b0
[ 85.120901][ T5328] do_writepages+0x32e/0x550
[ 85.122981][ T5328] page last free pid 5287 tgid 5287 stack trace:
[ 85.125674][ T5328] free_unref_folios+0xcec/0x1480
[ 85.127879][ T5328] folios_put_refs+0x9ff/0xb40
[ 85.129794][ T5328] shmem_undo_range+0x52c/0x1660
[ 85.131789][ T5328] shmem_evict_inode+0x289/0xae0
[ 85.133549][ T5328] evict+0x61e/0xb10
[ 85.135056][ T5328] __dentry_kill+0x1a2/0x690
[ 85.136863][ T5328] finish_dput+0xc9/0x480
[ 85.138630][ T5328] filename_renameat2+0x61e/0x9c0
[ 85.140500][ T5328] __se_sys_rename+0x55/0x2c0
[ 85.142302][ T5328] do_syscall_64+0x15f/0xf80
[ 85.144326][ T5328] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 85.146987][ T5328]
[ 85.148126][ T5328] Memory state around the buggy address:
[ 85.150616][ T5328] ffff88805558c180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 85.154127][ T5328] ffff88805558c200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 85.157612][ T5328] >ffff88805558c280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 85.161021][ T5328] ^
[ 85.163428][ T5328] ffff88805558c300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 85.166609][ T5328] ffff88805558c380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 85.170000][ T5328] ==================================================================
[ 85.193553][ T5331] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 8: invalid block bitmap
[ 85.242272][ T5328] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 85.245462][ T5328] CPU: 0 UID: 0 PID: 5328 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 85.249471][ T5328] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 85.254058][ T5328] Call Trace:
[ 85.255683][ T5328]
[ 85.257261][ T5328] vpanic+0x56c/0xa60
[ 85.259017][ T5328] ? __pfx_vpanic+0x10/0x10
[ 85.260948][ T5328] ? __pfx___schedule+0x10/0x10
[ 85.262996][ T5328] panic+0xc5/0xd0
[ 85.264521][ T5328] ? __pfx_panic+0x10/0x10
[ 85.266448][ T5328] ? preempt_schedule_thunk+0x16/0x30
[ 85.268764][ T5328] ? ext4_xattr_set_entry+0x9c1/0x1e20
[ 85.271175][ T5328] check_panic_on_warn+0x89/0xb0
[ 85.273234][ T5328] ? ext4_xattr_set_entry+0x9c1/0x1e20
[ 85.275686][ T5328] end_report+0x73/0x170
[ 85.277562][ T5328] ? ext4_xattr_set_entry+0x9c1/0x1e20
[ 85.279937][ T5328] kasan_report+0x128/0x150
[ 85.281655][ T5328] ? ext4_xattr_set_entry+0x9c1/0x1e20
[ 85.283918][ T5328] ? ext4_xattr_set_entry+0x9c1/0x1e20
[ 85.286155][ T5328] kasan_check_range+0x264/0x2c0
[ 85.288282][ T5328] ? ext4_xattr_set_entry+0x9c1/0x1e20
[ 85.290571][ T5328] __asan_memmove+0x29/0x70
[ 85.292623][ T5328] ext4_xattr_set_entry+0x9c1/0x1e20
[ 85.294782][ T5328] ext4_xattr_ibody_set+0x254/0x6a0
[ 85.297123][ T5328] ext4_destroy_inline_data_nolock+0x23a/0x5e0
[ 85.299805][ T5328] ? __pfx_ext4_destroy_inline_data_nolock+0x10/0x10
[ 85.302682][ T5328] ? down_write+0x16d/0x200
[ 85.305066][ T5328] ? ext4_journal_check_start+0x1cf/0x2b0
[ 85.307631][ T5328] ext4_destroy_inline_data+0x83/0xe0
[ 85.309893][ T5328] ext4_do_writepages+0x51e/0x4670
[ 85.312079][ T5328] ? __resched_curr+0x106/0x3f0
[ 85.314067][ T5328] ? __lock_acquire+0x6b5/0x2cf0
[ 85.316164][ T5328] ? look_up_lock_class+0x57/0x110
[ 85.318246][ T5328] ? register_lock_class+0x31/0x2e0
[ 85.320381][ T5328] ? __pfx_ext4_do_writepages+0x10/0x10
[ 85.322642][ T5328] ? __lock_acquire+0x6b5/0x2cf0
[ 85.324626][ T5328] ? rcu_is_watching+0x15/0xb0
[ 85.326806][ T5328] ? trace_hrtimer_start+0x82/0x200
[ 85.329006][ T5328] ? ext4_writepages+0x205/0x3b0
[ 85.331359][ T5328] ? ext4_writepages+0x205/0x3b0
[ 85.333688][ T5328] ext4_writepages+0x241/0x3b0
[ 85.335785][ T5328] ? __lock_acquire+0x6b5/0x2cf0
[ 85.337989][ T5328] ? __pfx_ext4_writepages+0x10/0x10
[ 85.340352][ T5328] ? __pfx_ext4_writepages+0x10/0x10
[ 85.342811][ T5328] do_writepages+0x32e/0x550
[ 85.344697][ T5328] ? do_raw_spin_unlock+0x4d/0x210
[ 85.347057][ T5328] filemap_flush+0x1e1/0x2e0
[ 85.349109][ T5328] ? __pfx_filemap_flush+0x10/0x10
[ 85.351309][ T5328] ? __asan_memset+0x22/0x50
[ 85.353191][ T5328] ? locks_remove_posix+0x14f/0x6a0
[ 85.355518][ T5328] ? rcu_is_watching+0x15/0xb0
[ 85.357429][ T5328] ext4_release_file+0x82/0x310
[ 85.359465][ T5328] ? __pfx_ext4_release_file+0x10/0x10
[ 85.362003][ T5328] __fput+0x44f/0xa60
[ 85.363661][ T5328] fput_close_sync+0x11f/0x240
[ 85.365782][ T5328] ? __pfx_fput_close_sync+0x10/0x10
[ 85.368046][ T5328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 85.370737][ T5328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 85.373438][ T5328] __x64_sys_close+0x7e/0x110
[ 85.375569][ T5328] do_syscall_64+0x15f/0xf80
[ 85.377437][ T5328] ? trace_irq_disable+0x3b/0x140
[ 85.379527][ T5328] ? clear_bhb_loop+0x40/0x90
[ 85.381462][ T5328] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 85.384266][ T5328] RIP: 0033:0x7f4b77d9ce59
[ 85.386802][ T5328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 85.395634][ T5328] RSP: 002b:00007f4b78cd6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[ 85.399787][ T5328] RAX: ffffffffffffffda RBX: 00007f4b78015fa0 RCX: 00007f4b77d9ce59
[ 85.403650][ T5328] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
[ 85.407189][ T5328] RBP: 00007f4b77e32d6f R08: 0000000000000000 R09: 0000000000000000
[ 85.410532][ T5328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 85.413953][ T5328] R13: 00007f4b78016038 R14: 00007f4b78015fa0 R15: 00007fff08b8a5a8
[ 85.417498][ T5328]
[ 85.419317][ T5328] Kernel Offset: disabled
[ 85.421281][ T5328] Rebooting in 86400 seconds..