Warning: Permanently added '[localhost]:58777' (ED25519) to the list of known hosts.
executing program
[ 67.264444][ T5303] loop0: detected capacity change from 0 to 512
[ 67.286295][ T5303] EXT4-fs: Ignoring removed orlov option
[ 67.305762][ T5303] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor794: corrupted in-inode xattr: invalid ea_ino
[ 67.318253][ T5303] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz-executor794: couldn't read orphan inode 15 (err -117)
[ 67.323820][ T5303] EXT4-fs (loop0): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 67.334491][ T5303] ==================================================================
[ 67.337432][ T5303] BUG: KASAN: slab-use-after-free in ext4_insert_dentry+0x36a/0x6d0
[ 67.340636][ T5303] Write of size 251 at addr ffff888040bd2f14 by task syz-executor794/5303
[ 67.344638][ T5303]
[ 67.345554][ T5303] CPU: 0 UID: 0 PID: 5303 Comm: syz-executor794 Not tainted 6.14.0-rc1-syzkaller-00034-g92514ef226f5 #0
[ 67.345568][ T5303] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 67.345575][ T5303] Call Trace:
[ 67.345582][ T5303]
[ 67.345587][ T5303] dump_stack_lvl+0x241/0x360
[ 67.345604][ T5303] ? __pfx_dump_stack_lvl+0x10/0x10
[ 67.345614][ T5303] ? __pfx__printk+0x10/0x10
[ 67.345630][ T5303] ? _printk+0xd5/0x120
[ 67.345644][ T5303] ? __virt_addr_valid+0x183/0x530
[ 67.345659][ T5303] ? __virt_addr_valid+0x183/0x530
[ 67.345673][ T5303] print_report+0x169/0x550
[ 67.345688][ T5303] ? __virt_addr_valid+0x183/0x530
[ 67.345701][ T5303] ? __virt_addr_valid+0x183/0x530
[ 67.345713][ T5303] ? __virt_addr_valid+0x45f/0x530
[ 67.345726][ T5303] ? __phys_addr+0xba/0x170
[ 67.345739][ T5303] ? ext4_insert_dentry+0x36a/0x6d0
[ 67.345752][ T5303] kasan_report+0x143/0x180
[ 67.345766][ T5303] ? ext4_insert_dentry+0x36a/0x6d0
[ 67.345779][ T5303] kasan_check_range+0x282/0x290
[ 67.345788][ T5303] ? ext4_insert_dentry+0x36a/0x6d0
[ 67.345800][ T5303] __asan_memcpy+0x40/0x70
[ 67.345813][ T5303] ext4_insert_dentry+0x36a/0x6d0
[ 67.345826][ T5303] add_dirent_to_buf+0x315/0x660
[ 67.345841][ T5303] ? __pfx_add_dirent_to_buf+0x10/0x10
[ 67.345855][ T5303] ? __ext4_handle_dirty_metadata+0x30d/0x820
[ 67.345868][ T5303] ? ext4_handle_dirty_dirblock+0xc0/0x350
[ 67.345881][ T5303] make_indexed_dir+0xd0e/0x1350
[ 67.345897][ T5303] ? __pfx_make_indexed_dir+0x10/0x10
[ 67.345905][ T5303] ? add_dirent_to_buf+0x2a7/0x660
[ 67.345913][ T5303] ? add_dirent_to_buf+0x2c5/0x660
[ 67.345921][ T5303] ? __pfx_add_dirent_to_buf+0x10/0x10
[ 67.345929][ T5303] ? __ext4_read_dirblock+0x486/0x790
[ 67.345940][ T5303] ext4_add_entry+0xbcd/0xe00
[ 67.345954][ T5303] ? __pfx_ext4_add_entry+0x10/0x10
[ 67.345970][ T5303] ext4_add_nondir+0x8d/0x290
[ 67.345984][ T5303] ? ext4_symlink+0x70e/0xc90
[ 67.345998][ T5303] ext4_symlink+0x9b1/0xc90
[ 67.346012][ T5303] ? __pfx_ext4_symlink+0x10/0x10
[ 67.346026][ T5303] ? inode_permission+0xff/0x460
[ 67.346035][ T5303] ? bpf_lsm_inode_symlink+0x9/0x10
[ 67.346051][ T5303] ? security_inode_symlink+0xbe/0x330
[ 67.346130][ T5303] vfs_symlink+0x137/0x2e0
[ 67.346145][ T5303] do_symlinkat+0x222/0x3a0
[ 67.346160][ T5303] ? __pfx_do_symlinkat+0x10/0x10
[ 67.346173][ T5303] ? strncpy_from_user+0x146/0x270
[ 67.346185][ T5303] ? getname_flags+0x1e3/0x540
[ 67.346195][ T5303] __x64_sys_symlink+0x7a/0x90
[ 67.346206][ T5303] do_syscall_64+0xf3/0x230
[ 67.346243][ T5303] ? clear_bhb_loop+0x35/0x90
[ 67.346258][ T5303] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 67.346272][ T5303] RIP: 0033:0x7f9e95bc2f59
[ 67.346282][ T5303] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 67.346290][ T5303] RSP: 002b:00007ffd30361538 EFLAGS: 00000246 ORIG_RAX: 0000000000000058
[ 67.346303][ T5303] RAX: ffffffffffffffda RBX: 0030656c69662f2e RCX: 00007f9e95bc2f59
[ 67.346311][ T5303] RDX: 0000000000000000 RSI: 0000200000000cc0 RDI: 0000200000000dc0
[ 67.346318][ T5303] RBP: 0000200000000180 R08: 0000555580f3b4c0 R09: 0000555580f3b4c0
[ 67.346324][ T5303] R10: 0000555580f3b4c0 R11: 0000000000000246 R12: 00007ffd30361560
[ 67.346330][ T5303] R13: 00007ffd30361788 R14: 431bde82d7b634db R15: 00007f9e95c0c03b
[ 67.346340][ T5303]
[ 67.346344][ T5303]
[ 67.469957][ T5303] The buggy address belongs to the physical page:
[ 67.472329][ T5303] page: refcount:3 mapcount:0 mapping:ffff88800048cd78 index:0x3f pfn:0x40bd2
[ 67.475567][ T5303] memcg:ffff88801c6b6000
[ 67.477213][ T5303] aops:def_blk_aops ino:700000 dentry name(?):""
[ 67.479647][ T5303] flags: 0x4fff10000004014(referenced|dirty|private|node=1|zone=1|lastcpupid=0x7ff)
[ 67.483071][ T5303] raw: 04fff10000004014 0000000000000000 dead000000000122 ffff88800048cd78
[ 67.486208][ T5303] raw: 000000000000003f ffff8880451ecbc8 00000003ffffffff ffff88801c6b6000
[ 67.489334][ T5303] page dumped because: kasan: bad access detected
[ 67.491684][ T5303] page_owner tracks the page as allocated
[ 67.493659][ T5303] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x148c40(GFP_NOFS|__GFP_NOFAIL|__GFP_COMP|__GFP_HARDWALL), pid 5303, tgid 5303 (syz-executor794), ts 67334324581, free_ts 67317210438
[ 67.500918][ T5303] post_alloc_hook+0x1f4/0x240
[ 67.502758][ T5303] get_page_from_freelist+0x365c/0x37a0
[ 67.504844][ T5303] __alloc_frozen_pages_noprof+0x292/0x710
[ 67.506990][ T5303] alloc_pages_mpol+0x311/0x660
[ 67.508770][ T5303] alloc_pages_noprof+0x121/0x190
[ 67.510662][ T5303] folio_alloc_noprof+0x1e/0x30
[ 67.512514][ T5303] filemap_alloc_folio_noprof+0xe1/0x540
[ 67.514669][ T5303] __filemap_get_folio+0x438/0xae0
[ 67.516778][ T5303] bdev_getblk+0x1d4/0x670
[ 67.518454][ T5303] ext4_getblk+0x31b/0x880
[ 67.520121][ T5303] ext4_bread+0x2e/0x180
[ 67.521712][ T5303] ext4_append+0x327/0x5c0
[ 67.523414][ T5303] make_indexed_dir+0x430/0x1350
[ 67.525278][ T5303] ext4_add_entry+0xbcd/0xe00
[ 67.527094][ T5303] ext4_add_nondir+0x8d/0x290
[ 67.528867][ T5303] ext4_symlink+0x9b1/0xc90
[ 67.530676][ T5303] page last free pid 4726 tgid 4726 stack trace:
[ 67.533124][ T5303] free_frozen_pages+0xe0d/0x10e0
[ 67.535079][ T5303] rcu_core+0xaaa/0x17a0
[ 67.536710][ T5303] handle_softirqs+0x2d4/0x9b0
[ 67.538640][ T5303] __irq_exit_rcu+0xf7/0x220
[ 67.540456][ T5303] irq_exit_rcu+0x9/0x30
[ 67.542389][ T5303] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 67.545045][ T5303] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 67.547340][ T5303]
[ 67.548257][ T5303] Memory state around the buggy address:
[ 67.550332][ T5303] ffff888040bd2f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 67.552948][ T5303] ffff888040bd2f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 67.555878][ T5303] >ffff888040bd3000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 67.558845][ T5303] ^
[ 67.560389][ T5303] ffff888040bd3080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 67.563259][ T5303] ffff888040bd3100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 67.566037][ T5303] ==================================================================
[ 67.572455][ T5303] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 67.575081][ T5303] CPU: 0 UID: 0 PID: 5303 Comm: syz-executor794 Not tainted 6.14.0-rc1-syzkaller-00034-g92514ef226f5 #0
[ 67.579241][ T5303] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 67.583082][ T5303] Call Trace:
[ 67.584415][ T5303]
[ 67.585580][ T5303] dump_stack_lvl+0x241/0x360
[ 67.587211][ T5303] ? __pfx_dump_stack_lvl+0x10/0x10
[ 67.589085][ T5303] ? __pfx__printk+0x10/0x10
[ 67.590814][ T5303] ? preempt_schedule+0xe1/0xf0
[ 67.592617][ T5303] ? vscnprintf+0x5d/0x90
[ 67.594209][ T5303] panic+0x349/0x880
[ 67.595679][ T5303] ? check_panic_on_warn+0x21/0xb0
[ 67.597491][ T5303] ? __pfx_panic+0x10/0x10
[ 67.599103][ T5303] ? _raw_spin_unlock_irqrestore+0x130/0x140
[ 67.601282][ T5303] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 67.603587][ T5303] ? print_report+0x502/0x550
[ 67.605309][ T5303] check_panic_on_warn+0x86/0xb0
[ 67.607124][ T5303] ? ext4_insert_dentry+0x36a/0x6d0
[ 67.609013][ T5303] end_report+0x77/0x160
[ 67.610615][ T5303] kasan_report+0x154/0x180
[ 67.612309][ T5303] ? ext4_insert_dentry+0x36a/0x6d0
[ 67.614354][ T5303] kasan_check_range+0x282/0x290
[ 67.616150][ T5303] ? ext4_insert_dentry+0x36a/0x6d0
[ 67.618366][ T5303] __asan_memcpy+0x40/0x70
[ 67.620445][ T5303] ext4_insert_dentry+0x36a/0x6d0
[ 67.622404][ T5303] add_dirent_to_buf+0x315/0x660
[ 67.624249][ T5303] ? __pfx_add_dirent_to_buf+0x10/0x10
[ 67.626258][ T5303] ? __ext4_handle_dirty_metadata+0x30d/0x820
[ 67.628646][ T5303] ? ext4_handle_dirty_dirblock+0xc0/0x350
[ 67.630804][ T5303] make_indexed_dir+0xd0e/0x1350
[ 67.632669][ T5303] ? __pfx_make_indexed_dir+0x10/0x10
[ 67.634648][ T5303] ? add_dirent_to_buf+0x2a7/0x660
[ 67.636519][ T5303] ? add_dirent_to_buf+0x2c5/0x660
[ 67.638442][ T5303] ? __pfx_add_dirent_to_buf+0x10/0x10
[ 67.640525][ T5303] ? __ext4_read_dirblock+0x486/0x790
[ 67.642563][ T5303] ext4_add_entry+0xbcd/0xe00
[ 67.644353][ T5303] ? __pfx_ext4_add_entry+0x10/0x10
[ 67.646369][ T5303] ext4_add_nondir+0x8d/0x290
[ 67.648226][ T5303] ? ext4_symlink+0x70e/0xc90
[ 67.650050][ T5303] ext4_symlink+0x9b1/0xc90
[ 67.651844][ T5303] ? __pfx_ext4_symlink+0x10/0x10
[ 67.653769][ T5303] ? inode_permission+0xff/0x460
[ 67.655631][ T5303] ? bpf_lsm_inode_symlink+0x9/0x10
[ 67.657515][ T5303] ? security_inode_symlink+0xbe/0x330
[ 67.659677][ T5303] vfs_symlink+0x137/0x2e0
[ 67.661442][ T5303] do_symlinkat+0x222/0x3a0
[ 67.663197][ T5303] ? __pfx_do_symlinkat+0x10/0x10
[ 67.665139][ T5303] ? strncpy_from_user+0x146/0x270
[ 67.667033][ T5303] ? getname_flags+0x1e3/0x540
[ 67.668825][ T5303] __x64_sys_symlink+0x7a/0x90
[ 67.670720][ T5303] do_syscall_64+0xf3/0x230
[ 67.672534][ T5303] ? clear_bhb_loop+0x35/0x90
[ 67.674325][ T5303] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 67.676608][ T5303] RIP: 0033:0x7f9e95bc2f59
[ 67.678480][ T5303] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 67.685399][ T5303] RSP: 002b:00007ffd30361538 EFLAGS: 00000246 ORIG_RAX: 0000000000000058
[ 67.688550][ T5303] RAX: ffffffffffffffda RBX: 0030656c69662f2e RCX: 00007f9e95bc2f59
[ 67.691709][ T5303] RDX: 0000000000000000 RSI: 0000200000000cc0 RDI: 0000200000000dc0
[ 67.694852][ T5303] RBP: 0000200000000180 R08: 0000555580f3b4c0 R09: 0000555580f3b4c0
[ 67.698105][ T5303] R10: 0000555580f3b4c0 R11: 0000000000000246 R12: 00007ffd30361560
[ 67.701099][ T5303] R13: 00007ffd30361788 R14: 431bde82d7b634db R15: 00007f9e95c0c03b
[ 67.704177][ T5303]
[ 67.705667][ T5303] Kernel Offset: disabled
[ 67.707457][ T5303] Rebooting in 86400 seconds..
VM DIAGNOSIS:
18:59:23 Registers:
info registers vcpu 0
CPU#0
RAX=000000000000007a RBX=ffffffff9a746080 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=0000000000000000 RSP=ffffc9000d0beef0
R8 =ffffffff8576c5ab R9 =1ffff11003e12046 R10=dffffc0000000000 R11=ffffffff8576c560
R12=dffffc0000000000 R13=000000000000007a R14=000000000000007a R15=00000000000003f8
RIP=ffffffff8576c5de RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555580f3a380 ffffffff 00c00000
GS =0000 ffff88801fc00000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=000056121577a548 CR3=0000000043ca2000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000ff800000 Opmask01=0000000000000007 Opmask02=000000000000000f Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7864696f6972702e 6f6972705f74656e
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6565656565656565 6565656565656565
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7272727272727272 7272727272727272
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ff00000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 180001075e444242 4242424242424242
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 42424242420a424f 17021b0006015e42
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000034747865
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 303030303078303d 6570697274732c30 3030303030303030 3030303030303078
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 002c3d61746f7571 6a7273752c363030 3030303030303030
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000