Contact linux-ext4@vger.kernel.org if you think we should keep it. EXT4-fs (sda1): noacl option not supported EXT4-fs (sda1): re-mounted. Opts: sb=0x0000000000000009,data_err=ignore,barrier=0x000000006acd3bb0,block_validity,user_xattr,debug_want_extra_isize=0x000000000000e457,noblock_validity,nogrpid,noacl, ================================================================== BUG: KASAN: use-after-free in memset include/linux/string.h:329 [inline] BUG: KASAN: use-after-free in __ext4_expand_extra_isize.isra.13+0x108/0x1b0 fs/ext4/inode.c:5780 Write of size 58423 at addr ffff880193f96ca0 by task syz-executor0/1838 CPU: 1 PID: 1838 Comm: syz-executor0 Not tainted 4.14.78+ #22 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0xb9/0x11b lib/dump_stack.c:53 print_address_description+0x60/0x22b mm/kasan/report.c:252 kasan_report_error mm/kasan/report.c:351 [inline] kasan_report.cold.6+0x11b/0x2dd mm/kasan/report.c:409 memset+0x1f/0x40 mm/kasan/kasan.c:285 memset include/linux/string.h:329 [inline] __ext4_expand_extra_isize.isra.13+0x108/0x1b0 fs/ext4/inode.c:5780 ext4_try_to_expand_extra_isize fs/ext4/inode.c:5832 [inline] ext4_mark_inode_dirty+0x46c/0x7e0 fs/ext4/inode.c:5908 ext4_unlink+0x747/0xeb0 fs/ext4/namei.c:3041 vfs_unlink2+0x23b/0x470 fs/namei.c:4026 do_unlinkat+0x467/0x650 fs/namei.c:4097 do_syscall_64+0x19b/0x4b0 arch/x86/entry/common.c:289 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x4572b7 RSP: 002b:00007ffca5c8eed8 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004572b7 RDX: 00007ffca5c8eef0 RSI: 00007ffca5c8eef0 RDI: 00007ffca5c8ef80 RBP: 000000000000030a R08: 0000000000000000 R09: 0000000000000010 R10: 000000000000000a R11: 0000000000000246 R12: 00007ffca5c90010 R13: 0000000001c6b940 R14: 0000000000000000 R15: 0000000000000000 The buggy address belongs to the page: page:ffffea00064fe580 count:2 mapcount:0 mapping:ffff8801d9aa8950 index:0x440 flags: 0x4000000000001074(referenced|dirty|lru|active|private) raw: 4000000000001074 ffff8801d9aa8950 0000000000000440 00000002ffffffff raw: ffffea00063d0160 ffffea000653b2a0 ffff8801988481f8 ffff8801da81aa80 page dumped because: kasan: bad access detected page->mem_cgroup:ffff8801da81aa80 Memory state around the buggy address: ffff880193f97f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ffff880193f97f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 >ffff880193f98000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ^ ffff880193f98080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ffff880193f98100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ==================================================================