Warning: Permanently added '10.128.1.54' (ED25519) to the list of known hosts.
executing program
[ 50.286498][ T4162] loop0: detected capacity change from 0 to 512
[ 50.399259][ T4162] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz-executor598: inode #1: comm syz-executor598: iget: illegal inode #
[ 50.414031][ T4162] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz-executor598: error while reading EA inode 1 err=-117
[ 50.427160][ T4162] EXT4-fs (loop0): 1 orphan inode deleted
[ 50.432920][ T4162] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 50.450532][ T4162] ==================================================================
[ 50.458704][ T4162] BUG: KASAN: use-after-free in ext4_insert_dentry+0x366/0x6c0
[ 50.466270][ T4162] Write of size 250 at addr ffff88806f7d9f18 by task syz-executor598/4162
[ 50.474745][ T4162]
[ 50.477055][ T4162] CPU: 1 PID: 4162 Comm: syz-executor598 Not tainted 5.15.173-syzkaller #0
[ 50.485611][ T4162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 50.495647][ T4162] Call Trace:
[ 50.498905][ T4162]
[ 50.501814][ T4162] dump_stack_lvl+0x1e3/0x2d0
[ 50.506476][ T4162] ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[ 50.512085][ T4162] ? _printk+0xd1/0x120
[ 50.516224][ T4162] ? __wake_up_klogd+0xcc/0x100
[ 50.521053][ T4162] ? panic+0x860/0x860
[ 50.525093][ T4162] ? _raw_spin_lock_irqsave+0xdd/0x120
[ 50.530533][ T4162] print_address_description+0x63/0x3b0
[ 50.536060][ T4162] ? ext4_insert_dentry+0x366/0x6c0
[ 50.541236][ T4162] kasan_report+0x16b/0x1c0
[ 50.545716][ T4162] ? ext4_insert_dentry+0x366/0x6c0
[ 50.550889][ T4162] kasan_check_range+0x27e/0x290
[ 50.555801][ T4162] ? ext4_insert_dentry+0x366/0x6c0
[ 50.560974][ T4162] memcpy+0x3c/0x60
[ 50.564758][ T4162] ext4_insert_dentry+0x366/0x6c0
[ 50.569761][ T4162] add_dirent_to_buf+0x384/0x7d0
[ 50.574683][ T4162] ? ext4_dx_add_entry+0x1620/0x1620
[ 50.579956][ T4162] ? __ext4_handle_dirty_metadata+0x2ef/0x800
[ 50.586011][ T4162] make_indexed_dir+0xf34/0x15a0
[ 50.590931][ T4162] ? add_dirent_to_buf+0x7d0/0x7d0
[ 50.596018][ T4162] ? add_dirent_to_buf+0x54e/0x7d0
[ 50.601106][ T4162] ? ext4_dx_add_entry+0x1620/0x1620
[ 50.606364][ T4162] ? __ext4_read_dirblock+0x522/0x890
[ 50.611714][ T4162] ext4_add_entry+0xde2/0x12b0
[ 50.616458][ T4162] ? ext4_inc_count+0x190/0x190
[ 50.621286][ T4162] ? ext4_init_new_dir+0x7c8/0xa20
[ 50.626373][ T4162] ? ext4_init_dot_dotdot+0x4e0/0x4e0
[ 50.631722][ T4162] ext4_mkdir+0x54f/0xce0
[ 50.636034][ T4162] ? ext4_symlink+0xed0/0xed0
[ 50.640686][ T4162] ? inode_permission+0xf7/0x450
[ 50.645597][ T4162] ? bpf_lsm_inode_mkdir+0x5/0x10
[ 50.650594][ T4162] ? security_inode_mkdir+0xb4/0x100
[ 50.655853][ T4162] vfs_mkdir+0x3b6/0x590
[ 50.660080][ T4162] do_mkdirat+0x260/0x520
[ 50.664416][ T4162] ? vfs_mkdir+0x590/0x590
[ 50.668806][ T4162] ? getname_flags+0x1ec/0x4e0
[ 50.673546][ T4162] __x64_sys_mkdirat+0x85/0x90
[ 50.678286][ T4162] do_syscall_64+0x3b/0xb0
[ 50.682676][ T4162] ? clear_bhb_loop+0x15/0x70
[ 50.687333][ T4162] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 50.693200][ T4162] RIP: 0033:0x7f97ab04df69
[ 50.697603][ T4162] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 1b 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 50.717182][ T4162] RSP: 002b:00007ffc31551f88 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 50.725571][ T4162] RAX: ffffffffffffffda RBX: 00007ffc315520a0 RCX: 00007f97ab04df69
[ 50.733535][ T4162] RDX: 5be60480b9579340 RSI: 0000000020000940 RDI: 00000000ffffff9c
[ 50.741483][ T4162] RBP: 00007ffc315520a8 R08: 00007f97ab091250 R09: 00007f97ab091250
[ 50.749426][ T4162] R10: 00007f97ab091250 R11: 0000000000000246 R12: 0000000000000000
[ 50.757368][ T4162] R13: 0000000000000000 R14: 00007f97ab0c26a0 R15: 000000000000001c
[ 50.765323][ T4162]
[ 50.768319][ T4162]
[ 50.770616][ T4162] The buggy address belongs to the page:
[ 50.776226][ T4162] page:ffffea0001bdf640 refcount:3 mapcount:0 mapping:ffff88801d9d4f30 index:0x3f pfn:0x6f7d9
[ 50.786443][ T4162] memcg:ffff888140774000
[ 50.790690][ T4162] aops:def_blk_aops ino:700000
[ 50.795437][ T4162] flags: 0xfff0000000202a(referenced|dirty|active|private|node=0|zone=1|lastcpupid=0x7ff)
[ 50.805329][ T4162] raw: 00fff0000000202a 0000000000000000 dead000000000122 ffff88801d9d4f30
[ 50.813888][ T4162] raw: 000000000000003f ffff8880727efae0 00000003ffffffff ffff888140774000
[ 50.822442][ T4162] page dumped because: kasan: bad access detected
[ 50.828830][ T4162] page_owner tracks the page as allocated
[ 50.834513][ T4162] page last allocated via order 0, migratetype Movable, gfp_mask 0x108c48(GFP_NOFS|__GFP_NOFAIL|__GFP_HARDWALL|__GFP_MOVABLE), pid 4162, ts 50450137623, free_ts 44746523910
[ 50.851588][ T4162] get_page_from_freelist+0x3b78/0x3d40
[ 50.857112][ T4162] __alloc_pages+0x272/0x700
[ 50.861688][ T4162] __page_cache_alloc+0xd4/0x4a0
[ 50.866603][ T4162] pagecache_get_page+0xa91/0x1010
[ 50.871685][ T4162] __getblk_gfp+0x22a/0xaf0
[ 50.876161][ T4162] ext4_getblk+0x259/0x710
[ 50.880548][ T4162] ext4_bread+0x2a/0x170
[ 50.884762][ T4162] ext4_append+0x31f/0x5c0
[ 50.889152][ T4162] make_indexed_dir+0x515/0x15a0
[ 50.894058][ T4162] ext4_add_entry+0xde2/0x12b0
[ 50.898796][ T4162] ext4_mkdir+0x54f/0xce0
[ 50.903096][ T4162] vfs_mkdir+0x3b6/0x590
[ 50.907308][ T4162] do_mkdirat+0x260/0x520
[ 50.911608][ T4162] __x64_sys_mkdirat+0x85/0x90
[ 50.916344][ T4162] do_syscall_64+0x3b/0xb0
[ 50.920731][ T4162] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 50.926608][ T4162] page last free stack trace:
[ 50.931256][ T4162] free_unref_page_prepare+0xc34/0xcf0
[ 50.936687][ T4162] free_unref_page_list+0x1f7/0x8e0
[ 50.941855][ T4162] release_pages+0x1bb9/0x1f40
[ 50.946591][ T4162] tlb_finish_mmu+0x177/0x320
[ 50.951251][ T4162] exit_mmap+0x3cd/0x670
[ 50.955467][ T4162] __mmput+0x112/0x3b0
[ 50.959505][ T4162] exit_mm+0x688/0x7f0
[ 50.963544][ T4162] do_exit+0x626/0x2480
[ 50.967670][ T4162] do_group_exit+0x144/0x310
[ 50.972234][ T4162] __x64_sys_exit_group+0x3b/0x40
[ 50.977230][ T4162] do_syscall_64+0x3b/0xb0
[ 50.981618][ T4162] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 50.987487][ T4162]
[ 50.989784][ T4162] Memory state around the buggy address:
[ 50.995384][ T4162] ffff88806f7d9f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 51.003414][ T4162] ffff88806f7d9f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 51.011449][ T4162] >ffff88806f7da000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 51.019481][ T4162] ^
[ 51.023519][ T4162] ffff88806f7da080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 51.031550][ T4162] ffff88806f7da100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 51.039576][ T4162] ==================================================================
[ 51.047604][ T4162] Disabling lock debugging due to kernel taint
[ 51.054382][ T4162] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 51.061572][ T4162] CPU: 1 PID: 4162 Comm: syz-executor598 Tainted: G B 5.15.173-syzkaller #0
[ 51.071519][ T4162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 51.081547][ T4162] Call Trace:
[ 51.084817][ T4162]
[ 51.087725][ T4162] dump_stack_lvl+0x1e3/0x2d0
[ 51.092378][ T4162] ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[ 51.097982][ T4162] ? panic+0x860/0x860
[ 51.102022][ T4162] ? preempt_schedule_common+0xa6/0xd0
[ 51.107451][ T4162] ? preempt_schedule+0xd9/0xe0
[ 51.112271][ T4162] panic+0x318/0x860
[ 51.116145][ T4162] ? check_panic_on_warn+0x1d/0xa0
[ 51.121226][ T4162] ? fb_is_primary_device+0xd0/0xd0
[ 51.126410][ T4162] ? _raw_spin_unlock_irqrestore+0x128/0x130
[ 51.132375][ T4162] ? _raw_spin_unlock+0x40/0x40
[ 51.137196][ T4162] ? print_memory_metadata+0xe2/0x140
[ 51.142539][ T4162] check_panic_on_warn+0x7e/0xa0
[ 51.147447][ T4162] ? ext4_insert_dentry+0x366/0x6c0
[ 51.152615][ T4162] end_report+0x6d/0xf0
[ 51.156743][ T4162] kasan_report+0x18e/0x1c0
[ 51.161217][ T4162] ? ext4_insert_dentry+0x366/0x6c0
[ 51.166389][ T4162] kasan_check_range+0x27e/0x290
[ 51.171296][ T4162] ? ext4_insert_dentry+0x366/0x6c0
[ 51.176478][ T4162] memcpy+0x3c/0x60
[ 51.180258][ T4162] ext4_insert_dentry+0x366/0x6c0
[ 51.185254][ T4162] add_dirent_to_buf+0x384/0x7d0
[ 51.190162][ T4162] ? ext4_dx_add_entry+0x1620/0x1620
[ 51.195424][ T4162] ? __ext4_handle_dirty_metadata+0x2ef/0x800
[ 51.201466][ T4162] make_indexed_dir+0xf34/0x15a0
[ 51.206379][ T4162] ? add_dirent_to_buf+0x7d0/0x7d0
[ 51.211461][ T4162] ? add_dirent_to_buf+0x54e/0x7d0
[ 51.216545][ T4162] ? ext4_dx_add_entry+0x1620/0x1620
[ 51.221800][ T4162] ? __ext4_read_dirblock+0x522/0x890
[ 51.227143][ T4162] ext4_add_entry+0xde2/0x12b0
[ 51.231881][ T4162] ? ext4_inc_count+0x190/0x190
[ 51.236709][ T4162] ? ext4_init_new_dir+0x7c8/0xa20
[ 51.241793][ T4162] ? ext4_init_dot_dotdot+0x4e0/0x4e0
[ 51.247152][ T4162] ext4_mkdir+0x54f/0xce0
[ 51.251458][ T4162] ? ext4_symlink+0xed0/0xed0
[ 51.256109][ T4162] ? inode_permission+0xf7/0x450
[ 51.261019][ T4162] ? bpf_lsm_inode_mkdir+0x5/0x10
[ 51.266016][ T4162] ? security_inode_mkdir+0xb4/0x100
[ 51.271286][ T4162] vfs_mkdir+0x3b6/0x590
[ 51.275499][ T4162] do_mkdirat+0x260/0x520
[ 51.279798][ T4162] ? vfs_mkdir+0x590/0x590
[ 51.284187][ T4162] ? getname_flags+0x1ec/0x4e0
[ 51.288932][ T4162] __x64_sys_mkdirat+0x85/0x90
[ 51.293664][ T4162] do_syscall_64+0x3b/0xb0
[ 51.298054][ T4162] ? clear_bhb_loop+0x15/0x70
[ 51.302703][ T4162] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 51.308572][ T4162] RIP: 0033:0x7f97ab04df69
[ 51.312961][ T4162] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 1b 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 51.332553][ T4162] RSP: 002b:00007ffc31551f88 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 51.340939][ T4162] RAX: ffffffffffffffda RBX: 00007ffc315520a0 RCX: 00007f97ab04df69
[ 51.348897][ T4162] RDX: 5be60480b9579340 RSI: 0000000020000940 RDI: 00000000ffffff9c
[ 51.356839][ T4162] RBP: 00007ffc315520a8 R08: 00007f97ab091250 R09: 00007f97ab091250
[ 51.364784][ T4162] R10: 00007f97ab091250 R11: 0000000000000246 R12: 0000000000000000
[ 51.372728][ T4162] R13: 0000000000000000 R14: 00007f97ab0c26a0 R15: 000000000000001c
[ 51.380678][ T4162]
[ 51.383877][ T4162] Kernel Offset: disabled
[ 51.388198][ T4162] Rebooting in 86400 seconds..