program: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000240)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noauto_da_alloc}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@nojournal_checksum}, {@orlov}, {@user_xattr}, {@quota}, {@delalloc}]}, 0x1, 0x559, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)="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", 0x1000, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000000)={r2, 0x1000, &(0x7f0000002a80)=""/4096}) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000500), &(0x7f0000001040)=ANY=[], 0x841, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)=0xfaeb) [ 137.673951][ T5322] Bluetooth: hci0: command tx timeout [ 137.769548][ T5343] loop0: detected capacity change from 0 to 1024 [ 137.782721][ T5343] ======================================================= [ 137.782721][ T5343] WARNING: The mand mount option has been deprecated and [ 137.782721][ T5343] and is ignored by this kernel. Remove the mand [ 137.782721][ T5343] option from the mount to silence this warning. [ 137.782721][ T5343] ======================================================= [ 137.815930][ T5343] EXT4-fs: Ignoring removed oldalloc option [ 137.819460][ T5343] EXT4-fs: Ignoring removed orlov option [ 137.824764][ T5343] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 137.845437][ T5343] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.884439][ T5343] ================================================================== [ 137.888450][ T5343] BUG: KASAN: use-after-free in ext4_find_extent+0xaea/0xcc0 [ 137.892373][ T5343] Read of size 4 at addr ffff888055f2a84c by task syz.0.0/5343 [ 137.895891][ T5343] [ 137.897041][ T5343] CPU: 0 UID: 0 PID: 5343 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 137.897061][ T5343] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.897071][ T5343] Call Trace: [ 137.897080][ T5343] [ 137.897088][ T5343] dump_stack_lvl+0xe8/0x150 [ 137.897115][ T5343] print_report+0xba/0x230 [ 137.897133][ T5343] ? ext4_find_extent+0xaea/0xcc0 [ 137.897153][ T5343] kasan_report+0x117/0x150 [ 137.897170][ T5343] ? ext4_find_extent+0xaea/0xcc0 [ 137.897189][ T5343] ext4_find_extent+0xaea/0xcc0 [ 137.897207][ T5343] ext4_ext_map_blocks+0x283/0x58b0 [ 137.897225][ T5343] ? kernel_text_address+0xa5/0xe0 [ 137.897243][ T5343] ? check_path+0x21/0x40 [ 137.897263][ T5343] ? lockdep_unlock+0x5d/0xd0 [ 137.897279][ T5343] ? __lock_acquire+0x146e/0x2cf0 [ 137.897299][ T5343] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 137.897322][ T5343] ext4_map_create_blocks+0x11d/0x540 [ 137.897342][ T5343] ext4_map_blocks+0x7cd/0x11d0 [ 137.897363][ T5343] ? __pfx_ext4_map_blocks+0x10/0x10 [ 137.897383][ T5343] ? ext4_inode_journal_mode+0x193/0x470 [ 137.897398][ T5343] ext4_do_writepages+0x22c0/0x46e0 [ 137.897421][ T5343] ? unwind_get_return_address+0x4d/0x90 [ 137.897448][ T5343] ? __pfx_ext4_do_writepages+0x10/0x10 [ 137.897467][ T5343] ? add_lock_to_list+0xc7/0x100 [ 137.897482][ T5343] ? lockdep_unlock+0x5d/0xd0 [ 137.897495][ T5343] ? __lock_acquire+0x146e/0x2cf0 [ 137.897521][ T5343] ext4_writepages+0x241/0x3b0 [ 137.897539][ T5343] ? __pfx_ext4_writepages+0x10/0x10 [ 137.897558][ T5343] ? __pfx_ext4_writepages+0x10/0x10 [ 137.897574][ T5343] do_writepages+0x32e/0x550 [ 137.897595][ T5343] ? do_raw_spin_unlock+0x4d/0x210 [ 137.897609][ T5343] filemap_write_and_wait_range+0x335/0x3f0 [ 137.897629][ T5343] ? __pfx_filemap_write_and_wait_range+0x10/0x10 [ 137.897657][ T5343] ? down_read+0x272/0x2e0 [ 137.897719][ T5343] ext4_bmap+0x1ce/0x260 [ 137.897738][ T5343] ? __pfx_ext4_bmap+0x10/0x10 [ 137.897753][ T5343] bmap+0xac/0xe0 [ 137.897776][ T5343] file_ioctl+0x4ac/0x860 [ 137.897793][ T5343] ? __pfx_file_ioctl+0x10/0x10 [ 137.897810][ T5343] ? kasan_quarantine_put+0xbb/0x1f0 [ 137.897833][ T5343] ? tomoyo_path_number_perm+0x219/0x630 [ 137.897877][ T5343] ? tomoyo_path_number_perm+0x219/0x630 [ 137.897893][ T5343] do_vfs_ioctl+0xc26/0x1530 [ 137.897908][ T5343] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 137.897925][ T5343] ? do_futex+0x395/0x420 [ 137.897948][ T5343] ? __fget_files+0x2a/0x420 [ 137.897967][ T5343] ? __fget_files+0x2a/0x420 [ 137.897986][ T5343] ? __fget_files+0x3a0/0x420 [ 137.898011][ T5343] ? __fget_files+0x2a/0x420 [ 137.898028][ T5343] ? bpf_lsm_file_ioctl+0x9/0x20 [ 137.898043][ T5343] __se_sys_ioctl+0x82/0x170 [ 137.898058][ T5343] do_syscall_64+0x14d/0xf80 [ 137.898075][ T5343] ? trace_irq_disable+0x3b/0x150 [ 137.898110][ T5343] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.898126][ T5343] ? clear_bhb_loop+0x40/0x90 [ 137.898143][ T5343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.898160][ T5343] RIP: 0033:0x7f46d139c819 [ 137.898176][ T5343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.898189][ T5343] RSP: 002b:00007f46cd7f4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 137.898206][ T5343] RAX: ffffffffffffffda RBX: 00007f46d1615fa0 RCX: 00007f46d139c819 [ 137.898216][ T5343] RDX: 0000200000000080 RSI: 0000000000000001 RDI: 0000000000000004 [ 137.898224][ T5343] RBP: 00007f46d1432c91 R08: 0000000000000000 R09: 0000000000000000 [ 137.898232][ T5343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.898239][ T5343] R13: 00007f46d1616038 R14: 00007f46d1615fa0 R15: 00007ffda0909108 [ 137.898254][ T5343] [ 137.898259][ T5343] [ 138.071670][ T5343] The buggy address belongs to the physical page: [ 138.075574][ T5343] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x55f2a [ 138.080624][ T5343] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 138.083881][ T5343] raw: 04fff00000000000 ffffea000157cac8 ffffea000157ca48 0000000000000000 [ 138.087497][ T5343] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 138.091153][ T5343] page dumped because: kasan: bad access detected [ 138.093889][ T5343] page_owner info is not present (never set?) [ 138.096391][ T5343] [ 138.097466][ T5343] Memory state around the buggy address: [ 138.099995][ T5343] ffff888055f2a700: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 138.105521][ T5343] ffff888055f2a780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 138.109946][ T5343] >ffff888055f2a800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 138.113144][ T5343] ^ [ 138.116194][ T5343] ffff888055f2a880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 138.119649][ T5343] ffff888055f2a900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 138.123027][ T5343] ================================================================== [ 138.133167][ T5343] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 138.136455][ T5343] CPU: 0 UID: 0 PID: 5343 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 138.140428][ T5343] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 138.145632][ T5343] Call Trace: [ 138.147294][ T5343] [ 138.148654][ T5343] vpanic+0x56c/0xa60 [ 138.150402][ T5343] ? __pfx_vpanic+0x10/0x10 [ 138.152241][ T5343] panic+0xc5/0xd0 [ 138.153919][ T5343] ? __pfx_panic+0x10/0x10 [ 138.156026][ T5343] ? preempt_schedule_thunk+0x16/0x30 [ 138.158779][ T5343] ? preempt_schedule_thunk+0x16/0x30 [ 138.161834][ T5343] ? ext4_find_extent+0xaea/0xcc0 [ 138.164753][ T5343] check_panic_on_warn+0x89/0xb0 [ 138.167224][ T5343] ? ext4_find_extent+0xaea/0xcc0 [ 138.169389][ T5343] end_report+0x73/0x180 [ 138.171367][ T5343] ? ext4_find_extent+0xaea/0xcc0 [ 138.173661][ T5343] kasan_report+0x128/0x150 [ 138.175772][ T5343] ? ext4_find_extent+0xaea/0xcc0 [ 138.178513][ T5343] ext4_find_extent+0xaea/0xcc0 [ 138.181656][ T5343] ext4_ext_map_blocks+0x283/0x58b0 [ 138.184402][ T5343] ? kernel_text_address+0xa5/0xe0 [ 138.186933][ T5343] ? check_path+0x21/0x40 [ 138.188889][ T5343] ? lockdep_unlock+0x5d/0xd0 [ 138.191049][ T5343] ? __lock_acquire+0x146e/0x2cf0 [ 138.193357][ T5343] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 138.196015][ T5343] ext4_map_create_blocks+0x11d/0x540 [ 138.198816][ T5343] ext4_map_blocks+0x7cd/0x11d0 [ 138.201579][ T5343] ? __pfx_ext4_map_blocks+0x10/0x10 [ 138.204338][ T5343] ? ext4_inode_journal_mode+0x193/0x470 [ 138.206891][ T5343] ext4_do_writepages+0x22c0/0x46e0 [ 138.209220][ T5343] ? unwind_get_return_address+0x4d/0x90 [ 138.211907][ T5343] ? __pfx_ext4_do_writepages+0x10/0x10 [ 138.214546][ T5343] ? add_lock_to_list+0xc7/0x100 [ 138.217112][ T5343] ? lockdep_unlock+0x5d/0xd0 [ 138.219239][ T5343] ? __lock_acquire+0x146e/0x2cf0 [ 138.221411][ T5343] ext4_writepages+0x241/0x3b0 [ 138.223379][ T5343] ? __pfx_ext4_writepages+0x10/0x10 [ 138.225700][ T5343] ? __pfx_ext4_writepages+0x10/0x10 [ 138.228129][ T5343] do_writepages+0x32e/0x550 [ 138.230482][ T5343] ? do_raw_spin_unlock+0x4d/0x210 [ 138.232851][ T5343] filemap_write_and_wait_range+0x335/0x3f0 [ 138.235532][ T5343] ? __pfx_filemap_write_and_wait_range+0x10/0x10 [ 138.238559][ T5343] ? down_read+0x272/0x2e0 [ 138.240909][ T5343] ext4_bmap+0x1ce/0x260 [ 138.243080][ T5343] ? __pfx_ext4_bmap+0x10/0x10 [ 138.245425][ T5343] bmap+0xac/0xe0 [ 138.247138][ T5343] file_ioctl+0x4ac/0x860 [ 138.249101][ T5343] ? __pfx_file_ioctl+0x10/0x10 [ 138.251432][ T5343] ? kasan_quarantine_put+0xbb/0x1f0 [ 138.254318][ T5343] ? tomoyo_path_number_perm+0x219/0x630 [ 138.257508][ T5343] ? tomoyo_path_number_perm+0x219/0x630 [ 138.260306][ T5343] do_vfs_ioctl+0xc26/0x1530 [ 138.262309][ T5343] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 138.264591][ T5343] ? do_futex+0x395/0x420 [ 138.266566][ T5343] ? __fget_files+0x2a/0x420 [ 138.268594][ T5343] ? __fget_files+0x2a/0x420 [ 138.270711][ T5343] ? __fget_files+0x3a0/0x420 [ 138.273544][ T5343] ? __fget_files+0x2a/0x420 [ 138.276340][ T5343] ? bpf_lsm_file_ioctl+0x9/0x20 [ 138.278821][ T5343] __se_sys_ioctl+0x82/0x170 [ 138.280987][ T5343] do_syscall_64+0x14d/0xf80 [ 138.283118][ T5343] ? trace_irq_disable+0x3b/0x150 [ 138.285386][ T5343] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.288237][ T5343] ? clear_bhb_loop+0x40/0x90 [ 138.290531][ T5343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.293242][ T5343] RIP: 0033:0x7f46d139c819 [ 138.295454][ T5343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.303763][ T5343] RSP: 002b:00007f46cd7f4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 138.307463][ T5343] RAX: ffffffffffffffda RBX: 00007f46d1615fa0 RCX: 00007f46d139c819 [ 138.311361][ T5343] RDX: 0000200000000080 RSI: 0000000000000001 RDI: 0000000000000004 [ 138.315118][ T5343] RBP: 00007f46d1432c91 R08: 0000000000000000 R09: 0000000000000000 [ 138.318916][ T5343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.322902][ T5343] R13: 00007f46d1616038 R14: 00007f46d1615fa0 R15: 00007ffda0909108 [ 138.326547][ T5343] [ 138.328318][ T5343] Kernel Offset: disabled [ 138.330671][ T5343] Rebooting in 86400 seconds..