EXT4-fs (sda1): Cannot specify journal on remount ================================================================== BUG: KASAN: use-after-free in memset include/linux/string.h:329 [inline] BUG: KASAN: use-after-free in __ext4_expand_extra_isize.isra.13+0x108/0x1b0 fs/ext4/inode.c:5775 Write of size 10792 at addr ffff8801a00139a0 by task syz-executor0/9637 CPU: 1 PID: 9637 Comm: syz-executor0 Not tainted 4.14.67+ #1 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0xb9/0x11b lib/dump_stack.c:53 print_address_description+0x60/0x22b mm/kasan/report.c:252 kasan_report_error mm/kasan/report.c:351 [inline] kasan_report.cold.6+0x11b/0x2dd mm/kasan/report.c:409 memset+0x1f/0x40 mm/kasan/kasan.c:285 memset include/linux/string.h:329 [inline] __ext4_expand_extra_isize.isra.13+0x108/0x1b0 fs/ext4/inode.c:5775 ext4_try_to_expand_extra_isize fs/ext4/inode.c:5827 [inline] ext4_mark_inode_dirty+0x46c/0x7e0 fs/ext4/inode.c:5903 ext4_setattr+0x19af/0x2280 fs/ext4/inode.c:5477 notify_change2+0xad7/0xdd0 fs/attr.c:315 do_truncate2+0x10f/0x1c0 fs/open.c:63 handle_truncate fs/namei.c:2998 [inline] do_last fs/namei.c:3417 [inline] path_openat+0xaea/0x23a0 fs/namei.c:3550 do_filp_open+0x197/0x270 fs/namei.c:3584 do_sys_open+0x2ef/0x580 fs/open.c:1071 do_syscall_64+0x19b/0x4b0 arch/x86/entry/common.c:289 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x457099 RSP: 002b:00007f84b3a35c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007f84b3a366d4 RCX: 0000000000457099 RDX: 0000000000002761 RSI: 0000000020000100 RDI: ffffffffffffffff RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff R13: 00000000004d3318 R14: 00000000004c819c R15: 0000000000000000 The buggy address belongs to the page: page:ffffea00068004c0 count:2 mapcount:0 mapping:ffff8801da4170d0 index:0x4ab flags: 0x4000000000001074(referenced|dirty|lru|active|private) raw: 4000000000001074 ffff8801da4170d0 00000000000004ab 00000002ffffffff raw: ffffea0006cdfe60 ffffea0006802c20 ffff8801c692cb28 ffff8801da81aa80 page dumped because: kasan: bad access detected page->mem_cgroup:ffff8801da81aa80 Memory state around the buggy address: ffff8801a0015f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ffff8801a0015f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 >ffff8801a0016000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ^ ffff8801a0016080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ffff8801a0016100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ==================================================================