Extracting prog: 3m27.151156983s
Minimizing prog: 1h18m38.192499418s
Simplifying prog options: 12m5.760524205s
Extracting C: 5m8.92932982s
Simplifying C: 0s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-quotactl$Q_QUOTAON-mprotect-openat$cgroup_ro-mmap-newfstatat-openat-sendfile
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000000c0)={[{@jqfmt_vfsv1}, {}, {@nouser_xattr}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@jqfmt_vfsold}, {@noinit_itable}]}, 0xfc, 0x585, &(0x7f0000001240)="$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")
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', &(0x7f00000022c0), 0x4000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
sendfile(r1, r1, 0x0, 0xe3aa6ea)

program did not crash
single: failed to extract reproducer
single: executing 1 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-quotactl$Q_QUOTAON-mprotect-openat$cgroup_ro-mmap-newfstatat-openat-sendfile
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000000c0)={[{@jqfmt_vfsv1}, {}, {@nouser_xattr}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@jqfmt_vfsold}, {@noinit_itable}]}, 0xfc, 0x585, &(0x7f0000001240)="$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")
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', &(0x7f00000022c0), 0x4000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
sendfile(r1, r1, 0x0, 0xe3aa6ea)

program crashed: KASAN: use-after-free Write in ext4_expand_extra_isize_ea
single: successfully extracted reproducer
found reproducer with 8 syscalls
minimizing guilty program
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-quotactl$Q_QUOTAON-mprotect-openat$cgroup_ro-mmap-newfstatat-openat
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000000c0)={[{@jqfmt_vfsv1}, {}, {@nouser_xattr}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@jqfmt_vfsold}, {@noinit_itable}]}, 0xfc, 0x585, &(0x7f0000001240)="$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")
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', &(0x7f00000022c0), 0x4000)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-quotactl$Q_QUOTAON-mprotect-openat$cgroup_ro-mmap-newfstatat-sendfile
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000000c0)={[{@jqfmt_vfsv1}, {}, {@nouser_xattr}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@jqfmt_vfsold}, {@noinit_itable}]}, 0xfc, 0x585, &(0x7f0000001240)="$eJzs3d9rW1UcAPDvTZPup66DMVRQBntwMpeurT8mCM5H0eFA32do78pouowmHWsduD24F19kCCIOxBfffPdx+A/4Vwx0MGQUfRChctObrWuT/sxM13w+cLNz7r3Zud/c+z09JzchAfStY9lDIeLFiPg6iTi0bFsx8o3HlvZbeHh9PFuSWFz85M8kknxda/8k//dAXnkhIn79MuJkYXW79bn5qUq1Gnvz+nBj+spwfW7+1KXpymQ6mV4eHRs78+bY6Dtvv9W1WF87//d3H9/94MxXxxe+/fn+4dtJnI2D+bblcWzDjeWVY5V/81Ipzq7YcaQLje0kSa8PgC0ZyPO8FFkfcCgG8qwHdr8vImLxCSuqwC6WSHjoU61xQGtu36V58DPjwftLE6Bm7IPL4y8uvTcSe5tzo/0LyRMzo2y+O9SF9rM2fvnjzu1sibXfh9i3Th1gU27cjIjTxeLq/j/J+7+tO91883htK9vot78/0Et3s/HP6+3Gf4U8N0vNx5XjnwNtcncr1s//wv0uNNNRNv57t+3491HXNTSQ155rjvlKycVL1fR0RDwfESeitCerr3U/58zCvcVO25aP/7Ila781FsyP435xz5PPmag0KhExuJ24Wx7cjHip2C7+5NH4N2lz/rPX4/wG2zia3nml07b143+6Fn+MeLXt+X98RytZ+/7kcPN6GG5dFav9devob53a31b8Xbjplp3//WvHP5Q8vl+bztQ338YPe/9J260vbOP6H0w+bZZbSXCt0mjMjEQMJh+tXj/6+Lmtemv/LP4Tx9fq/9pf/9nk67MNxn/ryK2Ou/b6+s/in9jU+d984d6Hn3/fqf2Nnf83mqUT+Zq8/2svv1Y2eoDbff0AAAAAAABgJylExMFICuVH5UKhXF76fMeR2F+o1uqNkxdrs5cnovld2aEoFVp3ug8t+zzESP552FZ9dEV9LCIOR8Q3A/ua9fJ4rTrR6+ABAAAAAAAAAAAAAAAAAABghzjQ4fv/md8Hen10wFPX/GGDPb0+CqAX1v3J/2780hOwI62b/8CuJf+hf8l/6F/yH/qX/If+Jf+hf8l/6F/yHwAAAAAAAAAAAAAAAAAAAAAAAAAAALrq/Llz2bK48PD6eFafuDo3O1W7emoirU+Vp2fHy+O1mSvlyVptspqWx2vT6/1/1VrtyshozF4bbqT1xnB9bv7CdG32cuPCpenKZHohLf0vUQEAAAAAAAAAAAAAAAAAAMCzpT43P1WpVtMZhY6F92JHHMbTDHDJlp5e3ClR9FHhp5c3k7k389O7ubZ62CkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAr/BQAA///F0C+9")
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', &(0x7f00000022c0), 0x4000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe3aa6ea)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-quotactl$Q_QUOTAON-mprotect-openat$cgroup_ro-mmap-openat-sendfile
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000000c0)={[{@jqfmt_vfsv1}, {}, {@nouser_xattr}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@jqfmt_vfsold}, {@noinit_itable}]}, 0xfc, 0x585, &(0x7f0000001240)="$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")
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
sendfile(r1, r1, 0x0, 0xe3aa6ea)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-quotactl$Q_QUOTAON-mprotect-openat$cgroup_ro-newfstatat-openat-sendfile
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000000c0)={[{@jqfmt_vfsv1}, {}, {@nouser_xattr}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@jqfmt_vfsold}, {@noinit_itable}]}, 0xfc, 0x585, &(0x7f0000001240)="$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")
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', &(0x7f00000022c0), 0x4000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
sendfile(r0, r0, 0x0, 0xe3aa6ea)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-quotactl$Q_QUOTAON-mprotect-mmap-newfstatat-openat-sendfile
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000000c0)={[{@jqfmt_vfsv1}, {}, {@nouser_xattr}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@jqfmt_vfsold}, {@noinit_itable}]}, 0xfc, 0x585, &(0x7f0000001240)="$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")
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', &(0x7f00000022c0), 0x4000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
sendfile(r0, r0, 0x0, 0xe3aa6ea)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-quotactl$Q_QUOTAON-openat$cgroup_ro-mmap-newfstatat-openat-sendfile
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000000c0)={[{@jqfmt_vfsv1}, {}, {@nouser_xattr}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@jqfmt_vfsold}, {@noinit_itable}]}, 0xfc, 0x585, &(0x7f0000001240)="$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")
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', &(0x7f00000022c0), 0x4000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
sendfile(r1, r1, 0x0, 0xe3aa6ea)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-mprotect-openat$cgroup_ro-mmap-newfstatat-openat-sendfile
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000000c0)={[{@jqfmt_vfsv1}, {}, {@nouser_xattr}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@jqfmt_vfsold}, {@noinit_itable}]}, 0xfc, 0x585, &(0x7f0000001240)="$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")
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', &(0x7f00000022c0), 0x4000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
sendfile(r1, r1, 0x0, 0xe3aa6ea)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): quotactl$Q_QUOTAON-mprotect-openat$cgroup_ro-mmap-newfstatat-openat-sendfile
detailed listing:
executing program 0:
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', &(0x7f00000022c0), 0x4000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
sendfile(r1, r1, 0x0, 0xe3aa6ea)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-quotactl$Q_QUOTAON-mprotect-openat$cgroup_ro-mmap-newfstatat-openat-sendfile
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000000c0)={[{@jqfmt_vfsv1}, {}, {@nouser_xattr}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@jqfmt_vfsold}, {@noinit_itable}]}, 0xfc, 0x585, &(0x7f0000001240)="$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")
quotactl$Q_QUOTAON(0xffffffff80000201, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', &(0x7f00000022c0), 0x4000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
sendfile(r1, r1, 0x0, 0xe3aa6ea)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-quotactl$Q_QUOTAON-mprotect-openat$cgroup_ro-mmap-newfstatat-openat-sendfile
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000000c0)={[{@jqfmt_vfsv1}, {}, {@nouser_xattr}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@jqfmt_vfsold}, {@noinit_itable}]}, 0xfc, 0x585, &(0x7f0000001240)="$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")
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', &(0x7f00000022c0), 0x4000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
sendfile(r1, r1, 0x0, 0xe3aa6ea)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-quotactl$Q_QUOTAON-mprotect-openat$cgroup_ro-mmap-newfstatat-openat-sendfile
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000000c0)={[{@jqfmt_vfsv1}, {}, {@nouser_xattr}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@jqfmt_vfsold}, {@noinit_itable}]}, 0xfc, 0x585, &(0x7f0000001240)="$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")
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000022c0), 0x4000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
sendfile(r1, r1, 0x0, 0xe3aa6ea)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-quotactl$Q_QUOTAON-mprotect-openat$cgroup_ro-mmap-newfstatat-openat-sendfile
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000000c0)={[{@jqfmt_vfsv1}, {}, {@nouser_xattr}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@jqfmt_vfsold}, {@noinit_itable}]}, 0xfc, 0x585, &(0x7f0000001240)="$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")
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0, 0x4000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
sendfile(r1, r1, 0x0, 0xe3aa6ea)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-quotactl$Q_QUOTAON-mprotect-openat$cgroup_ro-mmap-newfstatat-openat-sendfile
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000000c0)={[{@jqfmt_vfsv1}, {}, {@nouser_xattr}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@jqfmt_vfsold}, {@noinit_itable}]}, 0xfc, 0x585, &(0x7f0000001240)="$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")
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', &(0x7f00000022c0), 0x4000)
r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
sendfile(r1, r1, 0x0, 0xe3aa6ea)

program did not crash
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-quotactl$Q_QUOTAON-mprotect-openat$cgroup_ro-mmap-newfstatat-openat-sendfile
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
simplifying guilty program options
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-quotactl$Q_QUOTAON-mprotect-openat$cgroup_ro-mmap-newfstatat-openat-sendfile
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000000c0)={[{@jqfmt_vfsv1}, {}, {@nouser_xattr}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@jqfmt_vfsold}, {@noinit_itable}]}, 0xfc, 0x585, &(0x7f0000001240)="$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")
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', &(0x7f00000022c0), 0x4000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
sendfile(r1, r1, 0x0, 0xe3aa6ea)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-quotactl$Q_QUOTAON-mprotect-openat$cgroup_ro-mmap-newfstatat-openat-sendfile
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000000c0)={[{@jqfmt_vfsv1}, {}, {@nouser_xattr}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@jqfmt_vfsold}, {@noinit_itable}]}, 0xfc, 0x585, &(0x7f0000001240)="$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")
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', &(0x7f00000022c0), 0x4000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
sendfile(r1, r1, 0x0, 0xe3aa6ea)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-quotactl$Q_QUOTAON-mprotect-openat$cgroup_ro-mmap-newfstatat-openat-sendfile
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000000c0)={[{@jqfmt_vfsv1}, {}, {@nouser_xattr}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@jqfmt_vfsold}, {@noinit_itable}]}, 0xfc, 0x585, &(0x7f0000001240)="$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")
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', &(0x7f00000022c0), 0x4000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
sendfile(r1, r1, 0x0, 0xe3aa6ea)

program crashed: KASAN: use-after-free Write in ext4_expand_extra_isize_ea
validation run: crashed=true
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-quotactl$Q_QUOTAON-mprotect-openat$cgroup_ro-mmap-newfstatat-openat-sendfile
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000000c0)={[{@jqfmt_vfsv1}, {}, {@nouser_xattr}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@jqfmt_vfsold}, {@noinit_itable}]}, 0xfc, 0x585, &(0x7f0000001240)="$eJzs3d9rW1UcAPDvTZPup66DMVRQBntwMpeurT8mCM5H0eFA32do78pouowmHWsduD24F19kCCIOxBfffPdx+A/4Vwx0MGQUfRChctObrWuT/sxM13w+cLNz7r3Zud/c+z09JzchAfStY9lDIeLFiPg6iTi0bFsx8o3HlvZbeHh9PFuSWFz85M8kknxda/8k//dAXnkhIn79MuJkYXW79bn5qUq1Gnvz+nBj+spwfW7+1KXpymQ6mV4eHRs78+bY6Dtvv9W1WF87//d3H9/94MxXxxe+/fn+4dtJnI2D+bblcWzDjeWVY5V/81Ipzq7YcaQLje0kSa8PgC0ZyPO8FFkfcCgG8qwHdr8vImLxCSuqwC6WSHjoU61xQGtu36V58DPjwftLE6Bm7IPL4y8uvTcSe5tzo/0LyRMzo2y+O9SF9rM2fvnjzu1sibXfh9i3Th1gU27cjIjTxeLq/j/J+7+tO91883htK9vot78/0Et3s/HP6+3Gf4U8N0vNx5XjnwNtcncr1s//wv0uNNNRNv57t+3491HXNTSQ155rjvlKycVL1fR0RDwfESeitCerr3U/58zCvcVO25aP/7Ila781FsyP435xz5PPmag0KhExuJ24Wx7cjHip2C7+5NH4N2lz/rPX4/wG2zia3nml07b143+6Fn+MeLXt+X98RytZ+/7kcPN6GG5dFav9devob53a31b8Xbjplp3//WvHP5Q8vl+bztQ338YPe/9J260vbOP6H0w+bZZbSXCt0mjMjEQMJh+tXj/6+Lmtemv/LP4Tx9fq/9pf/9nk67MNxn/ryK2Ou/b6+s/in9jU+d984d6Hn3/fqf2Nnf83mqUT+Zq8/2svv1Y2eoDbff0AAAAAAABgJylExMFICuVH5UKhXF76fMeR2F+o1uqNkxdrs5cnovld2aEoFVp3ug8t+zzESP552FZ9dEV9LCIOR8Q3A/ua9fJ4rTrR6+ABAAAAAAAAAAAAAAAAAABghzjQ4fv/md8Hen10wFPX/GGDPb0+CqAX1v3J/2780hOwI62b/8CuJf+hf8l/6F/yH/qX/If+Jf+hf8l/6F/yHwAAAAAAAAAAAAAAAAAAAAAAAAAAALrq/Llz2bK48PD6eFafuDo3O1W7emoirU+Vp2fHy+O1mSvlyVptspqWx2vT6/1/1VrtyshozF4bbqT1xnB9bv7CdG32cuPCpenKZHohLf0vUQEAAAAAAAAAAAAAAAAAAMCzpT43P1WpVtMZhY6F92JHHMbTDHDJlp5e3ClR9FHhp5c3k7k389O7ubZ62CkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAr/BQAA///F0C+9")
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', &(0x7f00000022c0), 0x4000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
sendfile(r1, r1, 0x0, 0xe3aa6ea)

program did not crash
validation run: crashed=false
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-quotactl$Q_QUOTAON-mprotect-openat$cgroup_ro-mmap-newfstatat-openat-sendfile
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000000c0)={[{@jqfmt_vfsv1}, {}, {@nouser_xattr}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@jqfmt_vfsold}, {@noinit_itable}]}, 0xfc, 0x585, &(0x7f0000001240)="$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")
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', &(0x7f00000022c0), 0x4000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
sendfile(r1, r1, 0x0, 0xe3aa6ea)

program crashed: KASAN: use-after-free Write in ext4_expand_extra_isize_ea
validation run: crashed=true
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-quotactl$Q_QUOTAON-mprotect-openat$cgroup_ro-mmap-newfstatat-openat-sendfile
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000000c0)={[{@jqfmt_vfsv1}, {}, {@nouser_xattr}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@jqfmt_vfsold}, {@noinit_itable}]}, 0xfc, 0x585, &(0x7f0000001240)="$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")
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', &(0x7f00000022c0), 0x4000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
sendfile(r1, r1, 0x0, 0xe3aa6ea)

program crashed: KASAN: slab-out-of-bounds Write in ext4_expand_extra_isize_ea
validation run: crashed=true
reproducing took 1h52m5.663814707s
repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: slab-out-of-bounds in ext4_xattr_shift_entries fs/ext4/xattr.c:2548 [inline]
BUG: KASAN: slab-out-of-bounds in ext4_expand_extra_isize_ea+0x15c3/0x1940 fs/ext4/xattr.c:2797
Write of size 72 at addr ffff88812d9b63a0 by task syz.5.3469/13561

CPU: 1 PID: 13561 Comm: syz.5.3469 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
Call Trace:
 <TASK>
 __dump_stack+0x21/0x30 lib/dump_stack.c:88
 dump_stack_lvl+0x110/0x170 lib/dump_stack.c:106
 print_address_description+0x7f/0x2c0 mm/kasan/report.c:248
 __kasan_report mm/kasan/report.c:427 [inline]
 kasan_report+0x10f/0x150 mm/kasan/report.c:444
 check_region_inline mm/kasan/generic.c:-1 [inline]
 kasan_check_range+0x249/0x2a0 mm/kasan/generic.c:189
 memmove+0x44/0x70 mm/kasan/shadow.c:55
 ext4_xattr_shift_entries fs/ext4/xattr.c:2548 [inline]
 ext4_expand_extra_isize_ea+0x15c3/0x1940 fs/ext4/xattr.c:2797
 __ext4_expand_extra_isize+0x2fe/0x3e0 fs/ext4/inode.c:5955
 ext4_try_to_expand_extra_isize fs/ext4/inode.c:5998 [inline]
 __ext4_mark_inode_dirty+0x39d/0x5e0 fs/ext4/inode.c:6076
 ext4_dirty_inode+0xbd/0x100 fs/ext4/inode.c:6108
 __mark_inode_dirty+0x1ef/0x9c0 fs/fs-writeback.c:2486
 generic_update_time fs/inode.c:1891 [inline]
 inode_update_time fs/inode.c:1904 [inline]
 touch_atime+0x333/0x500 fs/inode.c:1976
 file_accessed include/linux/fs.h:2566 [inline]
 filemap_read+0x1fa8/0x21e0 mm/filemap.c:2737
 generic_file_read_iter+0xac/0x420 mm/filemap.c:2816
 ext4_file_read_iter+0x2e8/0x500 fs/ext4/file.c:-1
 call_read_iter include/linux/fs.h:2206 [inline]
 generic_file_splice_read+0x3ea/0x5f0 fs/splice.c:311
 do_splice_to fs/splice.c:796 [inline]
 splice_direct_to_actor+0x40f/0xb40 fs/splice.c:870
 do_splice_direct+0x1c2/0x2d0 fs/splice.c:979
 do_sendfile+0x515/0xe20 fs/read_write.c:1249
 __do_sys_sendfile64 fs/read_write.c:1317 [inline]
 __se_sys_sendfile64 fs/read_write.c:1303 [inline]
 __x64_sys_sendfile64+0x199/0x1f0 fs/read_write.c:1303
 x64_sys_call+0x88d/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:41
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7fd4f310fe99
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fd4f2f71028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
RAX: ffffffffffffffda RBX: 00007fd4f3397fa0 RCX: 00007fd4f310fe99
RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005
RBP: 00007fd4f31a5eaf R08: 0000000000000000 R09: 0000000000000000
R10: 000000000e3aa6ea R11: 0000000000000246 R12: 0000000000000000
R13: 00007fd4f3398038 R14: 00007fd4f3397fa0 R15: 00007ffc6141a7d8
 </TASK>

Allocated by task 11936:
 kasan_save_stack mm/kasan/common.c:38 [inline]
 kasan_set_track mm/kasan/common.c:45 [inline]
 set_alloc_info mm/kasan/common.c:433 [inline]
 __kasan_slab_alloc+0xb7/0xe0 mm/kasan/common.c:466
 kasan_slab_alloc include/linux/kasan.h:217 [inline]
 slab_post_alloc_hook+0x4f/0x2b0 mm/slab.h:550
 slab_alloc_node mm/slub.c:3245 [inline]
 slab_alloc mm/slub.c:3255 [inline]
 kmem_cache_alloc+0xf7/0x260 mm/slub.c:3260
 kmem_cache_zalloc include/linux/slab.h:740 [inline]
 __kernfs_new_node+0xe1/0x670 fs/kernfs/dir.c:593
 kernfs_new_node+0x150/0x260 fs/kernfs/dir.c:669
 __kernfs_create_file+0x4e/0x270 fs/kernfs/file.c:987
 sysfs_add_file_mode_ns+0x29a/0x350 fs/sysfs/file.c:317
 create_files fs/sysfs/group.c:64 [inline]
 internal_create_group+0x492/0xd00 fs/sysfs/group.c:149
 internal_create_groups fs/sysfs/group.c:189 [inline]
 sysfs_create_groups+0x58/0x120 fs/sysfs/group.c:215
 device_add_groups drivers/base/core.c:2501 [inline]
 device_add_attrs+0x89/0x710 drivers/base/core.c:2649
 device_add+0x5a2/0xe90 drivers/base/core.c:3373
 netdev_register_kobject+0x18e/0x330 net/core/net-sysfs.c:2014
 register_netdevice+0xeaa/0x1490 net/core/dev.c:10431
 veth_newlink+0x6af/0xe20 drivers/net/veth.c:1683
 __rtnl_newlink net/core/rtnetlink.c:3528 [inline]
 rtnl_newlink+0x137f/0x1900 net/core/rtnetlink.c:3576
 rtnetlink_rcv_msg+0x9fd/0xcb0 net/core/rtnetlink.c:5654
 netlink_rcv_skb+0x1e9/0x430 net/netlink/af_netlink.c:2516
 rtnetlink_rcv+0x1c/0x20 net/core/rtnetlink.c:5672
 netlink_unicast_kernel net/netlink/af_netlink.c:1322 [inline]
 netlink_unicast+0x86c/0xa30 net/netlink/af_netlink.c:1348
 netlink_sendmsg+0x879/0xb80 net/netlink/af_netlink.c:1927
 sock_sendmsg_nosec net/socket.c:704 [inline]
 __sock_sendmsg net/socket.c:716 [inline]
 __sys_sendto+0x46d/0x620 net/socket.c:2063
 __do_sys_sendto net/socket.c:2075 [inline]
 __se_sys_sendto net/socket.c:2071 [inline]
 __x64_sys_sendto+0xe5/0x100 net/socket.c:2071
 x64_sys_call+0x178/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:45
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x66/0xd0

The buggy address belongs to the object at ffff88812d9b6320
 which belongs to the cache kernfs_node_cache of size 136
The buggy address is located 128 bytes inside of
 136-byte region [ffff88812d9b6320, ffff88812d9b63a8)
The buggy address belongs to the page:
page:ffffea0004b66d80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12d9b6
flags: 0x4000000000000200(slab|zone=1)
raw: 4000000000000200 0000000000000000 dead000000000122 ffff8881001c5b00
raw: 0000000000000000 0000000000140014 00000001ffffffff 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 11936, ts 199806089428, free_ts 199619857417
 set_page_owner include/linux/page_owner.h:33 [inline]
 post_alloc_hook+0x192/0x1b0 mm/page_alloc.c:2607
 prep_new_page+0x1c/0x110 mm/page_alloc.c:2613
 get_page_from_freelist+0x2c3a/0x2cd0 mm/page_alloc.c:4487
 __alloc_pages+0x1a2/0x460 mm/page_alloc.c:5824
 alloc_slab_page mm/slub.c:-1 [inline]
 allocate_slab mm/slub.c:1937 [inline]
 new_slab+0xa0/0x4d0 mm/slub.c:2000
 ___slab_alloc+0x3ac/0x840 mm/slub.c:3033
 __slab_alloc+0x49/0x90 mm/slub.c:3120
 slab_alloc_node mm/slub.c:3211 [inline]
 slab_alloc mm/slub.c:3255 [inline]
 kmem_cache_alloc+0x138/0x260 mm/slub.c:3260
 kmem_cache_zalloc include/linux/slab.h:740 [inline]
 __kernfs_new_node+0xe1/0x670 fs/kernfs/dir.c:593
 kernfs_new_node+0x150/0x260 fs/kernfs/dir.c:669
 __kernfs_create_file+0x4e/0x270 fs/kernfs/file.c:987
 sysfs_add_file_mode_ns+0x29a/0x350 fs/sysfs/file.c:317
 create_files fs/sysfs/group.c:64 [inline]
 internal_create_group+0x492/0xd00 fs/sysfs/group.c:149
 internal_create_groups fs/sysfs/group.c:189 [inline]
 sysfs_create_groups+0x58/0x120 fs/sysfs/group.c:215
 device_add_groups drivers/base/core.c:2501 [inline]
 device_add_attrs+0x89/0x710 drivers/base/core.c:2649
 device_add+0x5a2/0xe90 drivers/base/core.c:3373
page last free stack trace:
 reset_page_owner include/linux/page_owner.h:26 [inline]
 free_pages_prepare mm/page_alloc.c:1474 [inline]
 free_pcp_prepare mm/page_alloc.c:1546 [inline]
 free_unref_page_prepare+0x5fa/0x600 mm/page_alloc.c:3536
 free_unref_page_list+0x138/0x9e0 mm/page_alloc.c:3673
 release_pages+0x1264/0x12c0 mm/swap.c:1015
 __pagevec_release+0x71/0xe0 mm/swap.c:1035
 pagevec_release include/linux/pagevec.h:81 [inline]
 __invalidate_mapping_pages+0x4b5/0x6c0 mm/truncate.c:517
 invalidate_mapping_pages+0x27/0x30 mm/truncate.c:541
 invalidate_bdev+0xa6/0x150 block/bdev.c:91
 ext4_put_super+0x6ce/0xa60 fs/ext4/super.c:1245
 generic_shutdown_super+0x151/0x330 fs/super.c:475
 kill_block_super+0x7f/0xf0 fs/super.c:1427
 deactivate_locked_super+0xa0/0x100 fs/super.c:335
 deactivate_super+0xaf/0xe0 fs/super.c:366
 cleanup_mnt+0x44f/0x500 fs/namespace.c:1149
 __cleanup_mnt+0x19/0x20 fs/namespace.c:1156
 task_work_run+0x127/0x190 kernel/task_work.c:188
 tracehook_notify_resume include/linux/tracehook.h:189 [inline]
 exit_to_user_mode_loop+0xd0/0xe0 kernel/entry/common.c:181

Memory state around the buggy address:
 ffff88812d9b6280: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc
 ffff88812d9b6300: fc fc fc fc 00 00 00 00 00 00 00 00 00 00 00 00
>ffff88812d9b6380: 00 00 00 00 00 fc fc fc fc fc fc fc fc 00 00 00
                                  ^
 ffff88812d9b6400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc
 ffff88812d9b6480: fc fc fc fc fc fc 00 00 00 00 00 00 00 00 00 00
==================================================================

final repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: slab-out-of-bounds in ext4_xattr_shift_entries fs/ext4/xattr.c:2548 [inline]
BUG: KASAN: slab-out-of-bounds in ext4_expand_extra_isize_ea+0x15c3/0x1940 fs/ext4/xattr.c:2797
Write of size 72 at addr ffff88812d9b63a0 by task syz.5.3469/13561

CPU: 1 PID: 13561 Comm: syz.5.3469 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
Call Trace:
 <TASK>
 __dump_stack+0x21/0x30 lib/dump_stack.c:88
 dump_stack_lvl+0x110/0x170 lib/dump_stack.c:106
 print_address_description+0x7f/0x2c0 mm/kasan/report.c:248
 __kasan_report mm/kasan/report.c:427 [inline]
 kasan_report+0x10f/0x150 mm/kasan/report.c:444
 check_region_inline mm/kasan/generic.c:-1 [inline]
 kasan_check_range+0x249/0x2a0 mm/kasan/generic.c:189
 memmove+0x44/0x70 mm/kasan/shadow.c:55
 ext4_xattr_shift_entries fs/ext4/xattr.c:2548 [inline]
 ext4_expand_extra_isize_ea+0x15c3/0x1940 fs/ext4/xattr.c:2797
 __ext4_expand_extra_isize+0x2fe/0x3e0 fs/ext4/inode.c:5955
 ext4_try_to_expand_extra_isize fs/ext4/inode.c:5998 [inline]
 __ext4_mark_inode_dirty+0x39d/0x5e0 fs/ext4/inode.c:6076
 ext4_dirty_inode+0xbd/0x100 fs/ext4/inode.c:6108
 __mark_inode_dirty+0x1ef/0x9c0 fs/fs-writeback.c:2486
 generic_update_time fs/inode.c:1891 [inline]
 inode_update_time fs/inode.c:1904 [inline]
 touch_atime+0x333/0x500 fs/inode.c:1976
 file_accessed include/linux/fs.h:2566 [inline]
 filemap_read+0x1fa8/0x21e0 mm/filemap.c:2737
 generic_file_read_iter+0xac/0x420 mm/filemap.c:2816
 ext4_file_read_iter+0x2e8/0x500 fs/ext4/file.c:-1
 call_read_iter include/linux/fs.h:2206 [inline]
 generic_file_splice_read+0x3ea/0x5f0 fs/splice.c:311
 do_splice_to fs/splice.c:796 [inline]
 splice_direct_to_actor+0x40f/0xb40 fs/splice.c:870
 do_splice_direct+0x1c2/0x2d0 fs/splice.c:979
 do_sendfile+0x515/0xe20 fs/read_write.c:1249
 __do_sys_sendfile64 fs/read_write.c:1317 [inline]
 __se_sys_sendfile64 fs/read_write.c:1303 [inline]
 __x64_sys_sendfile64+0x199/0x1f0 fs/read_write.c:1303
 x64_sys_call+0x88d/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:41
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7fd4f310fe99
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fd4f2f71028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
RAX: ffffffffffffffda RBX: 00007fd4f3397fa0 RCX: 00007fd4f310fe99
RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005
RBP: 00007fd4f31a5eaf R08: 0000000000000000 R09: 0000000000000000
R10: 000000000e3aa6ea R11: 0000000000000246 R12: 0000000000000000
R13: 00007fd4f3398038 R14: 00007fd4f3397fa0 R15: 00007ffc6141a7d8
 </TASK>

Allocated by task 11936:
 kasan_save_stack mm/kasan/common.c:38 [inline]
 kasan_set_track mm/kasan/common.c:45 [inline]
 set_alloc_info mm/kasan/common.c:433 [inline]
 __kasan_slab_alloc+0xb7/0xe0 mm/kasan/common.c:466
 kasan_slab_alloc include/linux/kasan.h:217 [inline]
 slab_post_alloc_hook+0x4f/0x2b0 mm/slab.h:550
 slab_alloc_node mm/slub.c:3245 [inline]
 slab_alloc mm/slub.c:3255 [inline]
 kmem_cache_alloc+0xf7/0x260 mm/slub.c:3260
 kmem_cache_zalloc include/linux/slab.h:740 [inline]
 __kernfs_new_node+0xe1/0x670 fs/kernfs/dir.c:593
 kernfs_new_node+0x150/0x260 fs/kernfs/dir.c:669
 __kernfs_create_file+0x4e/0x270 fs/kernfs/file.c:987
 sysfs_add_file_mode_ns+0x29a/0x350 fs/sysfs/file.c:317
 create_files fs/sysfs/group.c:64 [inline]
 internal_create_group+0x492/0xd00 fs/sysfs/group.c:149
 internal_create_groups fs/sysfs/group.c:189 [inline]
 sysfs_create_groups+0x58/0x120 fs/sysfs/group.c:215
 device_add_groups drivers/base/core.c:2501 [inline]
 device_add_attrs+0x89/0x710 drivers/base/core.c:2649
 device_add+0x5a2/0xe90 drivers/base/core.c:3373
 netdev_register_kobject+0x18e/0x330 net/core/net-sysfs.c:2014
 register_netdevice+0xeaa/0x1490 net/core/dev.c:10431
 veth_newlink+0x6af/0xe20 drivers/net/veth.c:1683
 __rtnl_newlink net/core/rtnetlink.c:3528 [inline]
 rtnl_newlink+0x137f/0x1900 net/core/rtnetlink.c:3576
 rtnetlink_rcv_msg+0x9fd/0xcb0 net/core/rtnetlink.c:5654
 netlink_rcv_skb+0x1e9/0x430 net/netlink/af_netlink.c:2516
 rtnetlink_rcv+0x1c/0x20 net/core/rtnetlink.c:5672
 netlink_unicast_kernel net/netlink/af_netlink.c:1322 [inline]
 netlink_unicast+0x86c/0xa30 net/netlink/af_netlink.c:1348
 netlink_sendmsg+0x879/0xb80 net/netlink/af_netlink.c:1927
 sock_sendmsg_nosec net/socket.c:704 [inline]
 __sock_sendmsg net/socket.c:716 [inline]
 __sys_sendto+0x46d/0x620 net/socket.c:2063
 __do_sys_sendto net/socket.c:2075 [inline]
 __se_sys_sendto net/socket.c:2071 [inline]
 __x64_sys_sendto+0xe5/0x100 net/socket.c:2071
 x64_sys_call+0x178/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:45
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x66/0xd0

The buggy address belongs to the object at ffff88812d9b6320
 which belongs to the cache kernfs_node_cache of size 136
The buggy address is located 128 bytes inside of
 136-byte region [ffff88812d9b6320, ffff88812d9b63a8)
The buggy address belongs to the page:
page:ffffea0004b66d80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12d9b6
flags: 0x4000000000000200(slab|zone=1)
raw: 4000000000000200 0000000000000000 dead000000000122 ffff8881001c5b00
raw: 0000000000000000 0000000000140014 00000001ffffffff 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 11936, ts 199806089428, free_ts 199619857417
 set_page_owner include/linux/page_owner.h:33 [inline]
 post_alloc_hook+0x192/0x1b0 mm/page_alloc.c:2607
 prep_new_page+0x1c/0x110 mm/page_alloc.c:2613
 get_page_from_freelist+0x2c3a/0x2cd0 mm/page_alloc.c:4487
 __alloc_pages+0x1a2/0x460 mm/page_alloc.c:5824
 alloc_slab_page mm/slub.c:-1 [inline]
 allocate_slab mm/slub.c:1937 [inline]
 new_slab+0xa0/0x4d0 mm/slub.c:2000
 ___slab_alloc+0x3ac/0x840 mm/slub.c:3033
 __slab_alloc+0x49/0x90 mm/slub.c:3120
 slab_alloc_node mm/slub.c:3211 [inline]
 slab_alloc mm/slub.c:3255 [inline]
 kmem_cache_alloc+0x138/0x260 mm/slub.c:3260
 kmem_cache_zalloc include/linux/slab.h:740 [inline]
 __kernfs_new_node+0xe1/0x670 fs/kernfs/dir.c:593
 kernfs_new_node+0x150/0x260 fs/kernfs/dir.c:669
 __kernfs_create_file+0x4e/0x270 fs/kernfs/file.c:987
 sysfs_add_file_mode_ns+0x29a/0x350 fs/sysfs/file.c:317
 create_files fs/sysfs/group.c:64 [inline]
 internal_create_group+0x492/0xd00 fs/sysfs/group.c:149
 internal_create_groups fs/sysfs/group.c:189 [inline]
 sysfs_create_groups+0x58/0x120 fs/sysfs/group.c:215
 device_add_groups drivers/base/core.c:2501 [inline]
 device_add_attrs+0x89/0x710 drivers/base/core.c:2649
 device_add+0x5a2/0xe90 drivers/base/core.c:3373
page last free stack trace:
 reset_page_owner include/linux/page_owner.h:26 [inline]
 free_pages_prepare mm/page_alloc.c:1474 [inline]
 free_pcp_prepare mm/page_alloc.c:1546 [inline]
 free_unref_page_prepare+0x5fa/0x600 mm/page_alloc.c:3536
 free_unref_page_list+0x138/0x9e0 mm/page_alloc.c:3673
 release_pages+0x1264/0x12c0 mm/swap.c:1015
 __pagevec_release+0x71/0xe0 mm/swap.c:1035
 pagevec_release include/linux/pagevec.h:81 [inline]
 __invalidate_mapping_pages+0x4b5/0x6c0 mm/truncate.c:517
 invalidate_mapping_pages+0x27/0x30 mm/truncate.c:541
 invalidate_bdev+0xa6/0x150 block/bdev.c:91
 ext4_put_super+0x6ce/0xa60 fs/ext4/super.c:1245
 generic_shutdown_super+0x151/0x330 fs/super.c:475
 kill_block_super+0x7f/0xf0 fs/super.c:1427
 deactivate_locked_super+0xa0/0x100 fs/super.c:335
 deactivate_super+0xaf/0xe0 fs/super.c:366
 cleanup_mnt+0x44f/0x500 fs/namespace.c:1149
 __cleanup_mnt+0x19/0x20 fs/namespace.c:1156
 task_work_run+0x127/0x190 kernel/task_work.c:188
 tracehook_notify_resume include/linux/tracehook.h:189 [inline]
 exit_to_user_mode_loop+0xd0/0xe0 kernel/entry/common.c:181

Memory state around the buggy address:
 ffff88812d9b6280: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc
 ffff88812d9b6300: fc fc fc fc 00 00 00 00 00 00 00 00 00 00 00 00
>ffff88812d9b6380: 00 00 00 00 00 fc fc fc fc fc fc fc fc 00 00 00
                                  ^
 ffff88812d9b6400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc
 ffff88812d9b6480: fc fc fc fc fc fc 00 00 00 00 00 00 00 00 00 00
==================================================================