Warning: Permanently added '10.128.0.70' (ED25519) to the list of known hosts. executing program [ 38.526900][ T6446] loop0: detected capacity change from 0 to 1024 [ 38.529927][ T6446] ======================================================= [ 38.529927][ T6446] WARNING: The mand mount option has been deprecated and [ 38.529927][ T6446] and is ignored by this kernel. Remove the mand [ 38.529927][ T6446] option from the mount to silence this warning. [ 38.529927][ T6446] ======================================================= [ 38.562051][ T6446] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.584546][ T6446] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4115: comm syz-executor370: Allocating blocks 497-513 which overlap fs metadata [ 38.589529][ T6446] EXT4-fs (loop0): pa 0000000040e1f75f: logic 128, phys. 385, len 8 [ 38.591607][ T6446] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 68.816017][ T2180] ================================================================== [ 68.817951][ T2180] BUG: KASAN: use-after-free in ext4_find_extent+0x94c/0xb0c [ 68.819801][ T2180] Read of size 4 at addr ffff0000df5f621c by task kworker/u8:7/2180 [ 68.821628][ T2180] [ 68.822193][ T2180] CPU: 1 UID: 0 PID: 2180 Comm: kworker/u8:7 Not tainted 6.14.0-rc3-syzkaller-ga1c24ab82279 #0 [ 68.822208][ T2180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 68.822216][ T2180] Workqueue: writeback wb_workfn (flush-7:0) [ 68.822234][ T2180] Call trace: [ 68.822237][ T2180] show_stack+0x2c/0x3c (C) [ 68.822254][ T2180] dump_stack_lvl+0xe4/0x150 [ 68.822267][ T2180] print_report+0x198/0x538 [ 68.822279][ T2180] kasan_report+0xd8/0x138 [ 68.822290][ T2180] __asan_report_load4_noabort+0x20/0x2c [ 68.822304][ T2180] ext4_find_extent+0x94c/0xb0c [ 68.822317][ T2180] ext4_ext_map_blocks+0x2b0/0x6600 [ 68.822330][ T2180] ext4_map_blocks+0x710/0x15d0 [ 68.822342][ T2180] ext4_do_writepages+0x195c/0x318c [ 68.822355][ T2180] ext4_writepages+0x198/0x308 [ 68.822375][ T2180] do_writepages+0x304/0x7d0 [ 68.822389][ T2180] __writeback_single_inode+0x15c/0x15a4 [ 68.822402][ T2180] writeback_sb_inodes+0x650/0x1088 [ 68.822413][ T2180] __writeback_inodes_wb+0xec/0x234 [ 68.822425][ T2180] wb_writeback+0x3f4/0xe9c [ 68.822437][ T2180] wb_workfn+0xb9c/0x1048 [ 68.822459][ T2180] process_one_work+0x810/0x1638 [ 68.822472][ T2180] worker_thread+0x97c/0xeec [ 68.822484][ T2180] kthread+0x65c/0x7b0 [ 68.822495][ T2180] ret_from_fork+0x10/0x20 [ 68.822506][ T2180] [ 68.852998][ T2180] The buggy address belongs to the physical page: [ 68.854516][ T2180] page: refcount:2 mapcount:0 mapping:000000005c145e5a index:0x2de pfn:0x11f5f6 [ 68.856671][ T2180] memcg:ffff0000c19b4000 [ 68.857674][ T2180] aops:ext4_da_aops ino:6ca dentry name(?):"memory.events.local" [ 68.859559][ T2180] flags: 0x5ffc00000004038(uptodate|dirty|lru|private|node=0|zone=2|lastcpupid=0x7ff) [ 68.861833][ T2180] raw: 05ffc00000004038 fffffdffc37d7d48 fffffdffc37d7dc8 ffff0000deaa3658 [ 68.864013][ T2180] raw: 00000000000002de ffff0000e6c11ae0 00000002ffffffff ffff0000c19b4000 [ 68.866053][ T2180] page dumped because: kasan: bad access detected [ 68.867571][ T2180] [ 68.868115][ T2180] Memory state around the buggy address: [ 68.869582][ T2180] ffff0000df5f6100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 68.871405][ T2180] ffff0000df5f6180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 68.873311][ T2180] >ffff0000df5f6200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 68.875343][ T2180] ^ [ 68.876493][ T2180] ffff0000df5f6280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 68.878367][ T2180] ffff0000df5f6300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 68.880265][ T2180] ================================================================== [ 68.882554][ T2180] Disabling lock debugging due to kernel taint [ 68.884160][ T2180] EXT4-fs error (device loop0): ext4_ext_split:1150: inode #19: comm kworker/u8:7: eh_entries 26982 != eh_max 25964! [ 68.888229][ T2180] EXT4-fs (loop0): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 1 with error 117 [ 68.891115][ T2180] EXT4-fs (loop0): This should not happen!! Data will be lost [ 68.891115][ T2180] executing program executing program executing program executing program [ 69.615166][ T27] cfg80211: failed to load regulatory.db executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program