Warning: Permanently added '[localhost]:36720' (ED25519) to the list of known hosts.
executing program
[ 69.515560][ T5310] loop0: detected capacity change from 0 to 4096
[ 69.526161][ T5310] =======================================================
[ 69.526161][ T5310] WARNING: The mand mount option has been deprecated and
[ 69.526161][ T5310] and is ignored by this kernel. Remove the mand
[ 69.526161][ T5310] option from the mount to silence this warning.
[ 69.526161][ T5310] =======================================================
[ 69.563109][ T5311] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 69.571655][ T5310] ==================================================================
[ 69.574620][ T5310] BUG: KASAN: use-after-free in nilfs_find_entry+0x29c/0x660
[ 69.577381][ T5310] Read of size 2 at addr ffff888048f39008 by task syz-executor334/5310
[ 69.581203][ T5310]
[ 69.582201][ T5310] CPU: 0 UID: 0 PID: 5310 Comm: syz-executor334 Not tainted 6.12.0-rc6-syzkaller-00169-g906bd684e4b1 #0
[ 69.586268][ T5310] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 69.590373][ T5310] Call Trace:
[ 69.591624][ T5310]
[ 69.592775][ T5310] dump_stack_lvl+0x241/0x360
[ 69.594582][ T5310] ? __pfx_dump_stack_lvl+0x10/0x10
[ 69.596578][ T5310] ? __pfx__printk+0x10/0x10
[ 69.598305][ T5310] ? _printk+0xd5/0x120
[ 69.599892][ T5310] ? __virt_addr_valid+0x183/0x530
[ 69.601836][ T5310] ? __virt_addr_valid+0x183/0x530
[ 69.603777][ T5310] print_report+0x169/0x550
[ 69.605827][ T5310] ? __virt_addr_valid+0x183/0x530
[ 69.607886][ T5310] ? __virt_addr_valid+0x183/0x530
[ 69.609840][ T5310] ? __virt_addr_valid+0x45f/0x530
[ 69.611741][ T5310] ? __phys_addr+0xba/0x170
[ 69.613487][ T5310] ? nilfs_find_entry+0x29c/0x660
[ 69.615255][ T5310] kasan_report+0x143/0x180
[ 69.616828][ T5310] ? nilfs_find_entry+0x29c/0x660
[ 69.618706][ T5310] nilfs_find_entry+0x29c/0x660
[ 69.620505][ T5310] nilfs_inode_by_name+0xad/0x240
[ 69.622391][ T5310] ? common_perm+0x18d/0x1f0
[ 69.624204][ T5310] ? __pfx_nilfs_inode_by_name+0x10/0x10
[ 69.626347][ T5310] ? apparmor_path_mknod+0x228/0x2e0
[ 69.628350][ T5310] nilfs_lookup+0xed/0x210
[ 69.629985][ T5310] ? generic_permission+0x1e0/0x550
[ 69.631918][ T5310] ? __pfx_nilfs_lookup+0x10/0x10
[ 69.633861][ T5310] ? inode_permission+0xff/0x460
[ 69.635787][ T5310] ? __pfx_nilfs_permission+0x10/0x10
[ 69.637886][ T5310] ? bpf_lsm_inode_create+0x9/0x10
[ 69.639898][ T5310] ? security_inode_create+0xbe/0x340
[ 69.641922][ T5310] ? __pfx_nilfs_lookup+0x10/0x10
[ 69.643851][ T5310] path_openat+0x11a7/0x3590
[ 69.645654][ T5310] ? __pfx_path_openat+0x10/0x10
[ 69.647502][ T5310] do_filp_open+0x235/0x490
[ 69.649261][ T5310] ? __pfx_do_filp_open+0x10/0x10
[ 69.651222][ T5310] ? _raw_spin_unlock+0x28/0x50
[ 69.653171][ T5310] ? alloc_fd+0x5a1/0x640
[ 69.654829][ T5310] do_sys_openat2+0x13e/0x1d0
[ 69.656635][ T5310] ? mntput_no_expire+0xc2/0x850
[ 69.658334][ T5310] ? __pfx_do_sys_openat2+0x10/0x10
[ 69.660270][ T5310] ? __pfx_mntput_no_expire+0x10/0x10
[ 69.662242][ T5310] __x64_sys_openat+0x247/0x2a0
[ 69.664022][ T5310] ? __pfx___x64_sys_openat+0x10/0x10
[ 69.666000][ T5310] ? do_syscall_64+0x100/0x230
[ 69.667784][ T5310] ? do_syscall_64+0xb6/0x230
[ 69.669532][ T5310] do_syscall_64+0xf3/0x230
[ 69.671232][ T5310] ? clear_bhb_loop+0x35/0x90
[ 69.673091][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 69.675322][ T5310] RIP: 0033:0x7fd472823b99
[ 69.676965][ T5310] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 69.684208][ T5310] RSP: 002b:00007fff91507d48 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 69.687273][ T5310] RAX: ffffffffffffffda RBX: 6569727261626f6e RCX: 00007fd472823b99
[ 69.690605][ T5310] RDX: 000000000000275a RSI: 0000000020000080 RDI: 00000000ffffff9c
[ 69.693521][ T5310] RBP: 00007fd4728975f0 R08: 0000000000000ee3 R09: 00005555568904c0
[ 69.696477][ T5310] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff91507d70
[ 69.699623][ T5310] R13: 00007fff91507f98 R14: 431bde82d7b634db R15: 00007fd47286c03b
[ 69.702616][ T5310]
[ 69.703888][ T5310]
[ 69.704787][ T5310] The buggy address belongs to the physical page:
[ 69.707086][ T5310] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x7f0a3df02 pfn:0x48f39
[ 69.710556][ T5310] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff)
[ 69.713406][ T5310] raw: 04fff00000000000 ffffea000123ce88 ffff88801fc44cb0 0000000000000000
[ 69.716666][ T5310] raw: 00000007f0a3df02 0000000000000000 00000000ffffffff 0000000000000000
[ 69.719652][ T5310] page dumped because: kasan: bad access detected
[ 69.721976][ T5310] page_owner tracks the page as freed
[ 69.723937][ T5310] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO), pid 5300, tgid 5300 (sshd), ts 68164329439, free_ts 68237870503
[ 69.730222][ T5310] post_alloc_hook+0x1f3/0x230
[ 69.732027][ T5310] get_page_from_freelist+0x303f/0x3190
[ 69.734171][ T5310] __alloc_pages_noprof+0x292/0x710
[ 69.736162][ T5310] alloc_pages_mpol_noprof+0x3e8/0x680
[ 69.738216][ T5310] vma_alloc_folio_noprof+0x12e/0x230
[ 69.740239][ T5310] folio_prealloc+0x31/0x170
[ 69.741870][ T5310] handle_pte_fault+0x24dd/0x6820
[ 69.743670][ T5310] handle_mm_fault+0x1106/0x1bb0
[ 69.745570][ T5310] exc_page_fault+0x459/0x8c0
[ 69.747319][ T5310] asm_exc_page_fault+0x26/0x30
[ 69.749167][ T5310] page last free pid 5300 tgid 5300 stack trace:
[ 69.751515][ T5310] free_unref_folios+0xf12/0x18d0
[ 69.753470][ T5310] folios_put_refs+0x76c/0x860
[ 69.755262][ T5310] free_pages_and_swap_cache+0x2ea/0x690
[ 69.757585][ T5310] tlb_flush_mmu+0x3a3/0x680
[ 69.759445][ T5310] tlb_finish_mmu+0xd4/0x200
[ 69.761228][ T5310] vms_clear_ptes+0x437/0x530
[ 69.762993][ T5310] vms_complete_munmap_vmas+0x208/0x910
[ 69.765058][ T5310] do_vmi_align_munmap+0x613/0x730
[ 69.766922][ T5310] do_vmi_munmap+0x24e/0x2d0
[ 69.768645][ T5310] __vm_munmap+0x24c/0x480
[ 69.770315][ T5310] __x64_sys_munmap+0x60/0x70
[ 69.772050][ T5310] do_syscall_64+0xf3/0x230
[ 69.773705][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 69.775902][ T5310]
[ 69.776832][ T5310] Memory state around the buggy address:
[ 69.778783][ T5310] ffff888048f38f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 69.781690][ T5310] ffff888048f38f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 69.784744][ T5310] >ffff888048f39000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 69.787705][ T5310] ^
[ 69.789396][ T5310] ffff888048f39080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 69.792478][ T5310] ffff888048f39100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 69.795386][ T5310] ==================================================================
[ 69.807515][ T5310] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 69.810393][ T5310] CPU: 0 UID: 0 PID: 5310 Comm: syz-executor334 Not tainted 6.12.0-rc6-syzkaller-00169-g906bd684e4b1 #0
[ 69.814524][ T5310] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 69.818588][ T5310] Call Trace:
[ 69.819783][ T5310]
[ 69.820803][ T5310] dump_stack_lvl+0x241/0x360
[ 69.822437][ T5310] ? __pfx_dump_stack_lvl+0x10/0x10
[ 69.824227][ T5310] ? __pfx__printk+0x10/0x10
[ 69.826011][ T5310] ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 69.828373][ T5310] ? vscnprintf+0x5d/0x90
[ 69.830014][ T5310] panic+0x349/0x880
[ 69.831541][ T5310] ? check_panic_on_warn+0x21/0xb0
[ 69.833505][ T5310] ? __pfx_panic+0x10/0x10
[ 69.835187][ T5310] ? _raw_spin_unlock_irqrestore+0x130/0x140
[ 69.837553][ T5310] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 69.839912][ T5310] check_panic_on_warn+0x86/0xb0
[ 69.841673][ T5310] ? nilfs_find_entry+0x29c/0x660
[ 69.843503][ T5310] end_report+0x77/0x160
[ 69.845029][ T5310] kasan_report+0x154/0x180
[ 69.846759][ T5310] ? nilfs_find_entry+0x29c/0x660
[ 69.848723][ T5310] nilfs_find_entry+0x29c/0x660
[ 69.850536][ T5310] nilfs_inode_by_name+0xad/0x240
[ 69.852472][ T5310] ? common_perm+0x18d/0x1f0
[ 69.854149][ T5310] ? __pfx_nilfs_inode_by_name+0x10/0x10
[ 69.856328][ T5310] ? apparmor_path_mknod+0x228/0x2e0
[ 69.858318][ T5310] nilfs_lookup+0xed/0x210
[ 69.860032][ T5310] ? generic_permission+0x1e0/0x550
[ 69.861996][ T5310] ? __pfx_nilfs_lookup+0x10/0x10
[ 69.863909][ T5310] ? inode_permission+0xff/0x460
[ 69.865783][ T5310] ? __pfx_nilfs_permission+0x10/0x10
[ 69.867825][ T5310] ? bpf_lsm_inode_create+0x9/0x10
[ 69.869834][ T5310] ? security_inode_create+0xbe/0x340
[ 69.871865][ T5310] ? __pfx_nilfs_lookup+0x10/0x10
[ 69.873772][ T5310] path_openat+0x11a7/0x3590
[ 69.875540][ T5310] ? __pfx_path_openat+0x10/0x10
[ 69.877450][ T5310] do_filp_open+0x235/0x490
[ 69.879203][ T5310] ? __pfx_do_filp_open+0x10/0x10
[ 69.881138][ T5310] ? _raw_spin_unlock+0x28/0x50
[ 69.882999][ T5310] ? alloc_fd+0x5a1/0x640
[ 69.884675][ T5310] do_sys_openat2+0x13e/0x1d0
[ 69.886468][ T5310] ? mntput_no_expire+0xc2/0x850
[ 69.888367][ T5310] ? __pfx_do_sys_openat2+0x10/0x10
[ 69.890381][ T5310] ? __pfx_mntput_no_expire+0x10/0x10
[ 69.892486][ T5310] __x64_sys_openat+0x247/0x2a0
[ 69.894359][ T5310] ? __pfx___x64_sys_openat+0x10/0x10
[ 69.896360][ T5310] ? do_syscall_64+0x100/0x230
[ 69.898167][ T5310] ? do_syscall_64+0xb6/0x230
[ 69.899980][ T5310] do_syscall_64+0xf3/0x230
[ 69.901746][ T5310] ? clear_bhb_loop+0x35/0x90
[ 69.903557][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 69.905894][ T5310] RIP: 0033:0x7fd472823b99
[ 69.907655][ T5310] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 69.914957][ T5310] RSP: 002b:00007fff91507d48 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 69.918148][ T5310] RAX: ffffffffffffffda RBX: 6569727261626f6e RCX: 00007fd472823b99
[ 69.921157][ T5310] RDX: 000000000000275a RSI: 0000000020000080 RDI: 00000000ffffff9c
[ 69.924145][ T5310] RBP: 00007fd4728975f0 R08: 0000000000000ee3 R09: 00005555568904c0
[ 69.927076][ T5310] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff91507d70
[ 69.930065][ T5310] R13: 00007fff91507f98 R14: 431bde82d7b634db R15: 00007fd47286c03b
[ 69.932922][ T5310]
[ 69.934353][ T5310] Kernel Offset: disabled
[ 69.935991][ T5310] Rebooting in 86400 seconds..
VM DIAGNOSIS:
06:38:51 Registers:
info registers vcpu 0
CPU#0
RAX=0000000000000066 RBX=ffffffff9a719ec0 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=0000000000000000 RSP=ffffc9000d056ef0
R8 =ffffffff854ae41b R9 =1ffff1100679b046 R10=dffffc0000000000 R11=ffffffff854ae3d0
R12=dffffc0000000000 R13=ffffffff9a414efe R14=0000000000000066 R15=00000000000003f8
RIP=ffffffff854ae44e RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055555688f380 ffffffff 00c00000
GS =0000 ffff88801fc00000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007f90c8395ed8 CR3=00000000433fc000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000fc000000 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 656c6c6f72746e6f 632e70756f726763
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff91507340 00007fff91507320
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff91507480 00007fff91507300
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd472889164 00007fd47289c240
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff91507340
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff91507480
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff91507480 00007fff91507300
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff91507340 00007fff91507320
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00003273666c696e
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000002c2c 646578616c65723d 726564726f2c6472 61637369646f6e2c
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 64726f2c79726576 6f6365726f6e2c64 7261637369646f6e 2c72656972726162
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000