EXT4-fs error (device sda1): ext4_xattr_set_entry:1603: inode #16526: comm syz-executor4: corrupted xattr entries ================================================================== BUG: KASAN: slab-out-of-bounds in memset include/linux/string.h:330 [inline] BUG: KASAN: slab-out-of-bounds in __ext4_expand_extra_isize+0x178/0x240 fs/ext4/inode.c:5865 Write of size 18400 at addr ffff8801a367eca0 by task syz-executor3/7389 CPU: 1 PID: 7389 Comm: syz-executor3 Not tainted 4.19.0-rc8+ #67 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1c4/0x2b4 lib/dump_stack.c:113 print_address_description.cold.8+0x9/0x1ff mm/kasan/report.c:256 kasan_report_error mm/kasan/report.c:354 [inline] kasan_report.cold.9+0x242/0x309 mm/kasan/report.c:412 check_memory_region_inline mm/kasan/kasan.c:260 [inline] check_memory_region+0x13e/0x1b0 mm/kasan/kasan.c:267 memset+0x23/0x40 mm/kasan/kasan.c:285 memset include/linux/string.h:330 [inline] __ext4_expand_extra_isize+0x178/0x240 fs/ext4/inode.c:5865 ext4_try_to_expand_extra_isize fs/ext4/inode.c:5917 [inline] ext4_mark_inode_dirty+0x902/0xb30 fs/ext4/inode.c:5993 add_dirent_to_buf+0x44d/0x6c0 fs/ext4/namei.c:1890 ext4_add_entry+0x57c/0xc10 fs/ext4/namei.c:2083 ext4_mkdir+0x7e4/0xe60 fs/ext4/namei.c:2640 vfs_mkdir+0x42e/0x6b0 fs/namei.c:3817 do_mkdirat+0x27a/0x310 fs/namei.c:3840 __do_sys_mkdir fs/namei.c:3856 [inline] __se_sys_mkdir fs/namei.c:3854 [inline] __x64_sys_mkdir+0x5c/0x80 fs/namei.c:3854 do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x456987 Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd bf fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad bf fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007ffcc22a3b08 EFLAGS: 00000202 ORIG_RAX: 0000000000000053 RAX: ffffffffffffffda RBX: 00000000001ac984 RCX: 0000000000456987 RDX: 00007ffcc22a3b56 RSI: 00000000000001ff RDI: 00007ffcc22a3b50 RBP: 000000000000150c R08: 0000000000000000 R09: 0000000000000006 R10: 0000000000000064 R11: 0000000000000202 R12: 0000000000000003 R13: 00000000001ac8f1 R14: 0000000000000729 R15: 0000000000000003 The buggy address belongs to the page: page:ffffea00068d9f80 count:2 mapcount:0 mapping:ffff8801d3bc5658 index:0x43e flags: 0x2fffc0000001074(referenced|dirty|lru|active|private) raw: 02fffc0000001074 ffffea00069a0b08 ffffea0006694308 ffff8801d3bc5658 raw: 000000000000043e ffff8801d3876dc8 00000002ffffffff ffff8801ccc4e1c0 page dumped because: kasan: bad access detected page->mem_cgroup:ffff8801ccc4e1c0 Memory state around the buggy address: ffff8801a3681f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ffff8801a3681f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 >ffff8801a3682000: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ^ ffff8801a3682080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ffff8801a3682100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ================================================================== EXT4-fs error (device sda1): ext4_xattr_ibody_get:592: inode #16484: comm syz-executor4: corrupted in-inode xattr EXT4-fs error (device sda1): ext4_xattr_ibody_get:592: inode #16484: comm syz-executor4: corrupted in-inode xattr EXT4-fs error (device sda1): ext4_xattr_ibody_get:592: inode #16484: comm syz-executor4: corrupted in-inode xattr EXT4-fs error (device sda1): ext4_xattr_ibody_get:592: inode #16520: comm syz-executor1: corrupted in-inode xattr EXT4-fs error (device sda1): ext4_xattr_ibody_get:592: inode #16520: comm syz-executor1: corrupted in-inode xattr EXT4-fs error (device sda1): ext4_xattr_ibody_get:592: inode #16484: comm syz-executor4: corrupted in-inode xattr EXT4-fs error (device sda1): ext4_xattr_ibody_get:592: inode #16520: comm syz-executor1: corrupted in-inode xattr EXT4-fs error (device sda1): ext4_xattr_ibody_get:592: inode #16484: comm syz-executor4: corrupted in-inode xattr