program: r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@nojournal_checksum}, {@orlov}, {@user_xattr}, {@quota}, {@delalloc}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8000c61) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x10) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r2, &(0x7f0000000340)="e37f6096614ad085c03bdac87267a3ee52179521c4899720755460126c0b0b57e24e835526526495e6cc72b96914242e4dfcc8b4294b5d437dd5f67980f38a800000005834064e43e2a5e97c345ec05c7489f3", 0x53, 0xfffffffffffffffd) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_read_local_features={{}, {0x0, "ad44abb9fe57a899"}}}}, 0xf) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x58, 0x0, &(0x7f0000005b80)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}, @register_looper, @exit_looper, @exit_looper], 0x0, 0x0, 0x0}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0x6) setxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000500), &(0x7f0000000180)=ANY=[@ANYRES16=r0, @ANYRESHEX=r2], 0x841, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f00000003c0)={&(0x7f0000499000/0x4000)=nil, 0x4000}) r6 = syz_open_dev$loop(&(0x7f0000000200), 0x8001, 0x1) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1a, 0x4d83, 0x0, 0x2, 0x19, 0x1c, "d4c9da0119b936f84e56c62f23e160c6ee7bddd0ad03c348f42a7db421daabd6ac76858fb055530d8a476d472ad0ca72529f2b184b1819d8844dbfc805bb716d", "4abd38242881577659abdc24402a1932e510ec11634743158e75fc7a1e2c046e13de94200894c3747dca453e59ac49e29a0450d062627a4bbd4b32c709a3d0ba", "33e7ba3908535ae1ee57fdc263b9a0591df494b2539fb790a9f2c79c85a8e060", [0x0, 0x4]}) perf_event_open(&(0x7f0000000180)={0x2, 0xfffffffffffffd6d, 0xbf, 0x1, 0x40, 0x0, 0x0, 0xb, 0x12040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x1ff, 0x1}, 0x2086, 0x8, 0x0, 0x8, 0x3fe, 0xb, 0x9c, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xd, 0xffffffffffffffff, 0x1) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r7, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}}) write$FUSE_WRITE(r5, &(0x7f00000000c0)={0x18}, 0xfffffdef) [ 89.787237][ T5300] Bluetooth: hci0: command tx timeout [ 90.002436][ T5320] loop0: detected capacity change from 0 to 1024 [ 90.027217][ T5320] ======================================================= [ 90.027217][ T5320] WARNING: The mand mount option has been deprecated and [ 90.027217][ T5320] and is ignored by this kernel. Remove the mand [ 90.027217][ T5320] option from the mount to silence this warning. [ 90.027217][ T5320] ======================================================= [ 90.074976][ T5320] EXT4-fs: Ignoring removed oldalloc option [ 90.077677][ T5320] EXT4-fs: Ignoring removed orlov option [ 90.088039][ T5320] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 90.111939][ T5320] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.226731][ T5320] Bluetooth: MGMT ver 1.23 [ 90.235352][ T5320] ================================================================== [ 90.238867][ T5320] BUG: KASAN: use-after-free in ext4_find_extent+0xaea/0xcc0 [ 90.242222][ T5320] Read of size 4 at addr ffff888056168018 by task syz.0.0/5320 [ 90.245516][ T5320] [ 90.246728][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 90.246745][ T5320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 90.246753][ T5320] Call Trace: [ 90.246772][ T5320] [ 90.246779][ T5320] dump_stack_lvl+0xe8/0x150 [ 90.246800][ T5320] print_report+0xba/0x230 [ 90.246816][ T5320] ? ext4_find_extent+0xaea/0xcc0 [ 90.246829][ T5320] kasan_report+0x117/0x150 [ 90.246842][ T5320] ? ext4_find_extent+0xaea/0xcc0 [ 90.246856][ T5320] ext4_find_extent+0xaea/0xcc0 [ 90.246870][ T5320] ext4_ext_map_blocks+0x283/0x58b0 [ 90.246887][ T5320] ? check_path+0x21/0x40 [ 90.246909][ T5320] ? lockdep_unlock+0x5d/0xd0 [ 90.246923][ T5320] ? __lock_acquire+0x146e/0x2cf0 [ 90.246940][ T5320] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 90.246959][ T5320] ext4_map_create_blocks+0x11d/0x540 [ 90.246987][ T5320] ext4_map_blocks+0x7cd/0x11d0 [ 90.247004][ T5320] ? kasan_save_track+0x4f/0x80 [ 90.247025][ T5320] ? kasan_save_track+0x3e/0x80 [ 90.247044][ T5320] ? __pfx_ext4_map_blocks+0x10/0x10 [ 90.247064][ T5320] ? __bfs+0x153/0x290 [ 90.247080][ T5320] ? __pfx_hlock_conflict+0x10/0x10 [ 90.247099][ T5320] _ext4_get_block+0x1e3/0x470 [ 90.247115][ T5320] ? __pfx__ext4_get_block+0x10/0x10 [ 90.247133][ T5320] ext4_get_block_unwritten+0x2e/0x100 [ 90.247149][ T5320] ext4_block_write_begin+0xb14/0x1950 [ 90.247169][ T5320] ? __pfx_ext4_get_block_unwritten+0x10/0x10 [ 90.247185][ T5320] ? __pfx_ext4_block_write_begin+0x10/0x10 [ 90.247202][ T5320] ? folio_mapping+0x16f/0x1f0 [ 90.247216][ T5320] ? ext4_inode_journal_mode+0x193/0x470 [ 90.247237][ T5320] ext4_write_begin+0xb40/0x18c0 [ 90.247256][ T5320] ? __pfx_ext4_write_begin+0x10/0x10 [ 90.247269][ T5320] ? block_commit_write+0x23f/0x270 [ 90.247282][ T5320] ext4_da_write_begin+0x355/0xd80 [ 90.247296][ T5320] ? ext4_write_end+0x7ae/0xa10 [ 90.247312][ T5320] ? __pfx_ext4_da_write_begin+0x10/0x10 [ 90.247329][ T5320] generic_perform_write+0x2e2/0x8f0 [ 90.247346][ T5320] ? __pfx_generic_perform_write+0x10/0x10 [ 90.247359][ T5320] ? file_update_time_flags+0x400/0x4a0 [ 90.247378][ T5320] ? ext4_write_checks+0x24b/0x2c0 [ 90.247394][ T5320] ext4_buffered_write_iter+0xce/0x3a0 [ 90.247414][ T5320] ext4_file_write_iter+0x298/0x1bf0 [ 90.247437][ T5320] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 90.247454][ T5320] vfs_write+0x61d/0xb90 [ 90.247468][ T5320] ? __pfx_vfs_write+0x10/0x10 [ 90.247481][ T5320] ? __fget_files+0x2a/0x420 [ 90.247492][ T5320] ksys_write+0x150/0x270 [ 90.247505][ T5320] ? __pfx_ksys_write+0x10/0x10 [ 90.247520][ T5320] do_syscall_64+0x14d/0xf80 [ 90.248262][ T5320] ? trace_irq_disable+0x3b/0x150 [ 90.248279][ T5320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.248290][ T5320] ? clear_bhb_loop+0x40/0x90 [ 90.248303][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.248314][ T5320] RIP: 0033:0x7fb74679c629 [ 90.248327][ T5320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.248337][ T5320] RSP: 002b:00007fb747655028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 90.248355][ T5320] RAX: ffffffffffffffda RBX: 00007fb746a15fa0 RCX: 00007fb74679c629 [ 90.248363][ T5320] RDX: 00000000fffffdef RSI: 00002000000000c0 RDI: 0000000000000007 [ 90.248370][ T5320] RBP: 00007fb746832b39 R08: 0000000000000000 R09: 0000000000000000 [ 90.248381][ T5320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.248388][ T5320] R13: 00007fb746a16038 R14: 00007fb746a15fa0 R15: 00007ffeb1a89928 [ 90.248404][ T5320] [ 90.248408][ T5320] [ 90.401653][ T5320] The buggy address belongs to the physical page: [ 90.404358][ T5320] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x56168 [ 90.408142][ T5320] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 90.411148][ T5320] raw: 04fff00000000000 ffffea0001585a08 ffffea0001585a08 0000000000000000 [ 90.414916][ T5320] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 90.418428][ T5320] page dumped because: kasan: bad access detected [ 90.421170][ T5320] page_owner info is not present (never set?) [ 90.424007][ T5320] [ 90.425035][ T5320] Memory state around the buggy address: [ 90.427303][ T5320] ffff888056167f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 90.430429][ T5320] ffff888056167f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 90.433650][ T5320] >ffff888056168000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 90.436690][ T5320] ^ [ 90.438994][ T5320] ffff888056168080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 90.442628][ T5320] ffff888056168100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 90.446104][ T5320] ================================================================== [ 90.457037][ T5320] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 90.460225][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 90.464276][ T5320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 90.468601][ T5320] Call Trace: [ 90.470116][ T5320] [ 90.471385][ T5320] vpanic+0x56c/0xa60 [ 90.473205][ T5320] ? __pfx_vpanic+0x10/0x10 [ 90.475284][ T5320] panic+0xc5/0xd0 [ 90.476913][ T5320] ? __pfx_panic+0x10/0x10 [ 90.478910][ T5320] ? preempt_schedule_thunk+0x16/0x30 [ 90.481312][ T5320] ? preempt_schedule_thunk+0x16/0x30 [ 90.483362][ T5320] ? ext4_find_extent+0xaea/0xcc0 [ 90.485411][ T5320] check_panic_on_warn+0x89/0xb0 [ 90.487578][ T5320] ? ext4_find_extent+0xaea/0xcc0 [ 90.489773][ T5320] end_report+0x73/0x180 [ 90.491623][ T5320] ? ext4_find_extent+0xaea/0xcc0 [ 90.493975][ T5320] kasan_report+0x128/0x150 [ 90.495982][ T5320] ? ext4_find_extent+0xaea/0xcc0 [ 90.498243][ T5320] ext4_find_extent+0xaea/0xcc0 [ 90.500392][ T5320] ext4_ext_map_blocks+0x283/0x58b0 [ 90.502672][ T5320] ? check_path+0x21/0x40 [ 90.504534][ T5320] ? lockdep_unlock+0x5d/0xd0 [ 90.506638][ T5320] ? __lock_acquire+0x146e/0x2cf0 [ 90.508820][ T5320] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 90.511197][ T5320] ext4_map_create_blocks+0x11d/0x540 [ 90.513565][ T5320] ext4_map_blocks+0x7cd/0x11d0 [ 90.515768][ T5320] ? kasan_save_track+0x4f/0x80 [ 90.517920][ T5320] ? kasan_save_track+0x3e/0x80 [ 90.520131][ T5320] ? __pfx_ext4_map_blocks+0x10/0x10 [ 90.522478][ T5320] ? __bfs+0x153/0x290 [ 90.524232][ T5320] ? __pfx_hlock_conflict+0x10/0x10 [ 90.526539][ T5320] _ext4_get_block+0x1e3/0x470 [ 90.528699][ T5320] ? __pfx__ext4_get_block+0x10/0x10 [ 90.531007][ T5320] ext4_get_block_unwritten+0x2e/0x100 [ 90.533423][ T5320] ext4_block_write_begin+0xb14/0x1950 [ 90.535777][ T5320] ? __pfx_ext4_get_block_unwritten+0x10/0x10 [ 90.538417][ T5320] ? __pfx_ext4_block_write_begin+0x10/0x10 [ 90.541140][ T5320] ? folio_mapping+0x16f/0x1f0 [ 90.543306][ T5320] ? ext4_inode_journal_mode+0x193/0x470 [ 90.545758][ T5320] ext4_write_begin+0xb40/0x18c0 [ 90.548035][ T5320] ? __pfx_ext4_write_begin+0x10/0x10 [ 90.550346][ T5320] ? block_commit_write+0x23f/0x270 [ 90.552642][ T5320] ext4_da_write_begin+0x355/0xd80 [ 90.554771][ T5320] ? ext4_write_end+0x7ae/0xa10 [ 90.556935][ T5320] ? __pfx_ext4_da_write_begin+0x10/0x10 [ 90.559469][ T5320] generic_perform_write+0x2e2/0x8f0 [ 90.561850][ T5320] ? __pfx_generic_perform_write+0x10/0x10 [ 90.564433][ T5320] ? file_update_time_flags+0x400/0x4a0 [ 90.566735][ T5320] ? ext4_write_checks+0x24b/0x2c0 [ 90.568850][ T5320] ext4_buffered_write_iter+0xce/0x3a0 [ 90.571036][ T5320] ext4_file_write_iter+0x298/0x1bf0 [ 90.573182][ T5320] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 90.575486][ T5320] vfs_write+0x61d/0xb90 [ 90.577095][ T5320] ? __pfx_vfs_write+0x10/0x10 [ 90.578995][ T5320] ? __fget_files+0x2a/0x420 [ 90.580938][ T5320] ksys_write+0x150/0x270 [ 90.582914][ T5320] ? __pfx_ksys_write+0x10/0x10 [ 90.584941][ T5320] do_syscall_64+0x14d/0xf80 [ 90.587000][ T5320] ? trace_irq_disable+0x3b/0x150 [ 90.589202][ T5320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.591809][ T5320] ? clear_bhb_loop+0x40/0x90 [ 90.593938][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.596582][ T5320] RIP: 0033:0x7fb74679c629 [ 90.598653][ T5320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.606682][ T5320] RSP: 002b:00007fb747655028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 90.610165][ T5320] RAX: ffffffffffffffda RBX: 00007fb746a15fa0 RCX: 00007fb74679c629 [ 90.613662][ T5320] RDX: 00000000fffffdef RSI: 00002000000000c0 RDI: 0000000000000007 [ 90.617071][ T5320] RBP: 00007fb746832b39 R08: 0000000000000000 R09: 0000000000000000 [ 90.620725][ T5320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.624191][ T5320] R13: 00007fb746a16038 R14: 00007fb746a15fa0 R15: 00007ffeb1a89928 [ 90.627670][ T5320] [ 90.629270][ T5320] Kernel Offset: disabled [ 90.631132][ T5320] Rebooting in 86400 seconds..