Warning: Permanently added '[localhost]:8008' (ED25519) to the list of known hosts.
executing program
[ 77.407911][ T5310] loop0: detected capacity change from 0 to 512
[ 77.447152][ T5310] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor645: corrupted in-inode xattr: invalid ea_ino
[ 77.466599][ T5310] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz-executor645: couldn't read orphan inode 15 (err -117)
[ 77.478103][ T5310] EXT4-fs (loop0): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 77.489423][ T5310] ==================================================================
[ 77.492581][ T5310] BUG: KASAN: slab-use-after-free in ext4_insert_dentry+0x3cd/0x780
[ 77.495944][ T5310] Write of size 251 at addr ffff88803ccc0f14 by task syz-executor645/5310
[ 77.500616][ T5310]
[ 77.501438][ T5310] CPU: 0 UID: 0 PID: 5310 Comm: syz-executor645 Not tainted 6.14.0-rc5-syzkaller #0
[ 77.501448][ T5310] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 77.501453][ T5310] Call Trace:
[ 77.501484][ T5310]
[ 77.501490][ T5310] dump_stack_lvl+0x241/0x360
[ 77.501507][ T5310] ? __pfx_dump_stack_lvl+0x10/0x10
[ 77.501515][ T5310] ? __pfx__printk+0x10/0x10
[ 77.501521][ T5310] ? _printk+0xd5/0x120
[ 77.501526][ T5310] ? __virt_addr_valid+0x183/0x530
[ 77.501533][ T5310] ? __virt_addr_valid+0x183/0x530
[ 77.501539][ T5310] print_report+0x16e/0x5b0
[ 77.501547][ T5310] ? __virt_addr_valid+0x183/0x530
[ 77.501555][ T5310] ? __virt_addr_valid+0x183/0x530
[ 77.501563][ T5310] ? __virt_addr_valid+0x45f/0x530
[ 77.501570][ T5310] ? __phys_addr+0xba/0x170
[ 77.501586][ T5310] ? ext4_insert_dentry+0x3cd/0x780
[ 77.501599][ T5310] kasan_report+0x143/0x180
[ 77.501611][ T5310] ? ext4_insert_dentry+0x3cd/0x780
[ 77.501625][ T5310] kasan_check_range+0x282/0x290
[ 77.501637][ T5310] ? ext4_insert_dentry+0x3cd/0x780
[ 77.501649][ T5310] __asan_memcpy+0x40/0x70
[ 77.501661][ T5310] ext4_insert_dentry+0x3cd/0x780
[ 77.501673][ T5310] add_dirent_to_buf+0x315/0x660
[ 77.501687][ T5310] ? __pfx_add_dirent_to_buf+0x10/0x10
[ 77.501702][ T5310] ? __ext4_handle_dirty_metadata+0x30d/0x820
[ 77.501713][ T5310] ? ext4_handle_dirty_dirblock+0xc0/0x350
[ 77.501725][ T5310] make_indexed_dir+0xcaf/0x1280
[ 77.501741][ T5310] ? __pfx_make_indexed_dir+0x10/0x10
[ 77.501753][ T5310] ? add_dirent_to_buf+0x2a7/0x660
[ 77.501764][ T5310] ? add_dirent_to_buf+0x2c5/0x660
[ 77.501777][ T5310] ? __pfx_add_dirent_to_buf+0x10/0x10
[ 77.501790][ T5310] ? __ext4_read_dirblock+0x486/0x790
[ 77.501810][ T5310] ext4_add_entry+0xb36/0xd30
[ 77.501823][ T5310] ? __pfx_ext4_add_entry+0x10/0x10
[ 77.501837][ T5310] ext4_add_nondir+0x8d/0x290
[ 77.501849][ T5310] ? ext4_symlink+0x70c/0xda0
[ 77.501862][ T5310] ext4_symlink+0xa10/0xda0
[ 77.501876][ T5310] ? __pfx_ext4_symlink+0x10/0x10
[ 77.501890][ T5310] ? inode_permission+0xff/0x460
[ 77.501904][ T5310] ? bpf_lsm_inode_symlink+0x9/0x10
[ 77.501947][ T5310] ? security_inode_symlink+0xbe/0x330
[ 77.501960][ T5310] vfs_symlink+0x137/0x2e0
[ 77.501972][ T5310] do_symlinkat+0x222/0x3a0
[ 77.501985][ T5310] ? __pfx_do_symlinkat+0x10/0x10
[ 77.501996][ T5310] ? strncpy_from_user+0x146/0x270
[ 77.502010][ T5310] ? getname_flags+0x1e3/0x540
[ 77.502023][ T5310] __x64_sys_symlink+0x7a/0x90
[ 77.502035][ T5310] do_syscall_64+0xf3/0x230
[ 77.502097][ T5310] ? clear_bhb_loop+0x35/0x90
[ 77.502114][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 77.502129][ T5310] RIP: 0033:0x7fe1a8a8a2a9
[ 77.502141][ T5310] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 21 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 77.502150][ T5310] RSP: 002b:00007fff669e2e28 EFLAGS: 00000246 ORIG_RAX: 0000000000000058
[ 77.502163][ T5310] RAX: ffffffffffffffda RBX: 0030656c69662f2e RCX: 00007fe1a8a8a2a9
[ 77.502171][ T5310] RDX: 0000000000000000 RSI: 0000400000000cc0 RDI: 0000400000000dc0
[ 77.502177][ T5310] RBP: 0000400000000180 R08: 00007fff669e2e60 R09: 00007fff669e2e60
[ 77.502184][ T5310] R10: 00007fff669e2e60 R11: 0000000000000246 R12: 0000000000000001
[ 77.502191][ T5310] R13: 0000000000000000 R14: 431bde82d7b634db R15: 00007fff669e2e80
[ 77.502200][ T5310]
[ 77.502204][ T5310]
[ 77.641191][ T5310] The buggy address belongs to the physical page:
[ 77.643517][ T5310] page: refcount:3 mapcount:0 mapping:ffff88800047cd78 index:0x3f pfn:0x3ccc0
[ 77.646713][ T5310] memcg:ffff888030afe000
[ 77.648266][ T5310] aops:def_blk_aops ino:700000 dentry name(?):""
[ 77.650426][ T5310] flags: 0x4fff10000004014(referenced|dirty|private|node=1|zone=1|lastcpupid=0x7ff)
[ 77.653833][ T5310] raw: 04fff10000004014 0000000000000000 dead000000000122 ffff88800047cd78
[ 77.657522][ T5310] raw: 000000000000003f ffff888045256910 00000003ffffffff ffff888030afe000
[ 77.661576][ T5310] page dumped because: kasan: bad access detected
[ 77.664205][ T5310] page_owner tracks the page as allocated
[ 77.666271][ T5310] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x148c40(GFP_NOFS|__GFP_NOFAIL|__GFP_COMP|__GFP_HARDWALL), pid 5310, tgid 5310 (syz-executor645), ts 77489199211, free_ts 77472439261
[ 77.673407][ T5310] post_alloc_hook+0x1f4/0x240
[ 77.675846][ T5310] get_page_from_freelist+0x365c/0x37a0
[ 77.679394][ T5310] __alloc_frozen_pages_noprof+0x292/0x710
[ 77.682313][ T5310] alloc_pages_mpol+0x311/0x660
[ 77.684056][ T5310] alloc_pages_noprof+0x121/0x190
[ 77.685899][ T5310] folio_alloc_noprof+0x1e/0x30
[ 77.687793][ T5310] filemap_alloc_folio_noprof+0xe1/0x540
[ 77.689857][ T5310] __filemap_get_folio+0x438/0xae0
[ 77.691948][ T5310] bdev_getblk+0x1d4/0x670
[ 77.693660][ T5310] ext4_getblk+0x31b/0x880
[ 77.695350][ T5310] ext4_bread+0x2e/0x180
[ 77.696832][ T5310] ext4_append+0x327/0x5c0
[ 77.698966][ T5310] make_indexed_dir+0x3ff/0x1280
[ 77.701436][ T5310] ext4_add_entry+0xb36/0xd30
[ 77.703834][ T5310] ext4_add_nondir+0x8d/0x290
[ 77.705749][ T5310] ext4_symlink+0xa10/0xda0
[ 77.707516][ T5310] page last free pid 5311 tgid 5311 stack trace:
[ 77.709900][ T5310] free_frozen_pages+0xe0d/0x10e0
[ 77.711746][ T5310] __put_partials+0x160/0x1c0
[ 77.713366][ T5310] put_cpu_partial+0x17c/0x250
[ 77.715138][ T5310] __slab_free+0x290/0x380
[ 77.716716][ T5310] qlist_free_all+0x9a/0x140
[ 77.718767][ T5310] kasan_quarantine_reduce+0x14f/0x170
[ 77.720893][ T5310] __kasan_slab_alloc+0x23/0x80
[ 77.723315][ T5310] kmem_cache_alloc_noprof+0x1d9/0x380
[ 77.725958][ T5310] getname_flags+0xb7/0x540
[ 77.728274][ T5310] do_sys_openat2+0xd2/0x1d0
[ 77.730149][ T5310] __x64_sys_openat+0x247/0x2a0
[ 77.732369][ T5310] do_syscall_64+0xf3/0x230
[ 77.734230][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 77.736731][ T5310]
[ 77.737747][ T5310] Memory state around the buggy address:
[ 77.740041][ T5310] ffff88803ccc0f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 77.744053][ T5310] ffff88803ccc0f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 77.747913][ T5310] >ffff88803ccc1000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 77.751250][ T5310] ^
[ 77.753243][ T5310] ffff88803ccc1080: fb fb fb fc fc fc fc fc fc fc fc fa fb fb fb fb
[ 77.756656][ T5310] ffff88803ccc1100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc
[ 77.760102][ T5310] ==================================================================
[ 77.772793][ T5310] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 77.775892][ T5310] CPU: 0 UID: 0 PID: 5310 Comm: syz-executor645 Not tainted 6.14.0-rc5-syzkaller #0
[ 77.780379][ T5310] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 77.784762][ T5310] Call Trace:
[ 77.786143][ T5310]
[ 77.787423][ T5310] dump_stack_lvl+0x241/0x360
[ 77.789436][ T5310] ? __pfx_dump_stack_lvl+0x10/0x10
[ 77.791711][ T5310] ? __pfx__printk+0x10/0x10
[ 77.793850][ T5310] ? preempt_schedule+0xe1/0xf0
[ 77.796087][ T5310] ? vscnprintf+0x5d/0x90
[ 77.797884][ T5310] panic+0x349/0x880
[ 77.799654][ T5310] ? check_panic_on_warn+0x21/0xb0
[ 77.801860][ T5310] ? __pfx_panic+0x10/0x10
[ 77.803882][ T5310] ? _raw_spin_unlock_irqrestore+0x130/0x140
[ 77.807296][ T5310] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 77.810316][ T5310] ? print_report+0x519/0x5b0
[ 77.812211][ T5310] check_panic_on_warn+0x86/0xb0
[ 77.814267][ T5310] ? ext4_insert_dentry+0x3cd/0x780
[ 77.816465][ T5310] end_report+0x77/0x160
[ 77.818185][ T5310] kasan_report+0x154/0x180
[ 77.819865][ T5310] ? ext4_insert_dentry+0x3cd/0x780
[ 77.822010][ T5310] kasan_check_range+0x282/0x290
[ 77.824147][ T5310] ? ext4_insert_dentry+0x3cd/0x780
[ 77.826774][ T5310] __asan_memcpy+0x40/0x70
[ 77.829194][ T5310] ext4_insert_dentry+0x3cd/0x780
[ 77.831587][ T5310] add_dirent_to_buf+0x315/0x660
[ 77.833612][ T5310] ? __pfx_add_dirent_to_buf+0x10/0x10
[ 77.835762][ T5310] ? __ext4_handle_dirty_metadata+0x30d/0x820
[ 77.838252][ T5310] ? ext4_handle_dirty_dirblock+0xc0/0x350
[ 77.840570][ T5310] make_indexed_dir+0xcaf/0x1280
[ 77.842372][ T5310] ? __pfx_make_indexed_dir+0x10/0x10
[ 77.844239][ T5310] ? add_dirent_to_buf+0x2a7/0x660
[ 77.846083][ T5310] ? add_dirent_to_buf+0x2c5/0x660
[ 77.848469][ T5310] ? __pfx_add_dirent_to_buf+0x10/0x10
[ 77.851710][ T5310] ? __ext4_read_dirblock+0x486/0x790
[ 77.854645][ T5310] ext4_add_entry+0xb36/0xd30
[ 77.857018][ T5310] ? __pfx_ext4_add_entry+0x10/0x10
[ 77.859590][ T5310] ext4_add_nondir+0x8d/0x290
[ 77.861378][ T5310] ? ext4_symlink+0x70c/0xda0
[ 77.863246][ T5310] ext4_symlink+0xa10/0xda0
[ 77.865076][ T5310] ? __pfx_ext4_symlink+0x10/0x10
[ 77.867098][ T5310] ? inode_permission+0xff/0x460
[ 77.869010][ T5310] ? bpf_lsm_inode_symlink+0x9/0x10
[ 77.870968][ T5310] ? security_inode_symlink+0xbe/0x330
[ 77.872956][ T5310] vfs_symlink+0x137/0x2e0
[ 77.874692][ T5310] do_symlinkat+0x222/0x3a0
[ 77.876418][ T5310] ? __pfx_do_symlinkat+0x10/0x10
[ 77.878484][ T5310] ? strncpy_from_user+0x146/0x270
[ 77.880460][ T5310] ? getname_flags+0x1e3/0x540
[ 77.882287][ T5310] __x64_sys_symlink+0x7a/0x90
[ 77.884113][ T5310] do_syscall_64+0xf3/0x230
[ 77.885811][ T5310] ? clear_bhb_loop+0x35/0x90
[ 77.887897][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 77.892560][ T5310] RIP: 0033:0x7fe1a8a8a2a9
[ 77.894855][ T5310] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 21 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 77.902324][ T5310] RSP: 002b:00007fff669e2e28 EFLAGS: 00000246 ORIG_RAX: 0000000000000058
[ 77.905436][ T5310] RAX: ffffffffffffffda RBX: 0030656c69662f2e RCX: 00007fe1a8a8a2a9
[ 77.908476][ T5310] RDX: 0000000000000000 RSI: 0000400000000cc0 RDI: 0000400000000dc0
[ 77.911764][ T5310] RBP: 0000400000000180 R08: 00007fff669e2e60 R09: 00007fff669e2e60
[ 77.915347][ T5310] R10: 00007fff669e2e60 R11: 0000000000000246 R12: 0000000000000001
[ 77.918596][ T5310] R13: 0000000000000000 R14: 431bde82d7b634db R15: 00007fff669e2e80
[ 77.921577][ T5310]
[ 77.923019][ T5310] Kernel Offset: disabled
[ 77.924730][ T5310] Rebooting in 86400 seconds..
VM DIAGNOSIS:
14:16:51 Registers:
info registers vcpu 0
CPU#0
RAX=0000000000000020 RBX=ffffffff9a9960a0 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=0000000000000000 RSP=ffffc9000d11ef30
R8 =ffffffff8583ed4b R9 =1ffff11003e4e046 R10=dffffc0000000000 R11=ffffffff8583ed00
R12=dffffc0000000000 R13=0000000000000020 R14=0000000000000020 R15=00000000000003f8
RIP=ffffffff8583ed7e RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555588c37380 ffffffff 00c00000
GS =0000 ffff88801fc00000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=0000561e7cefcb90 CR3=00000000441e0000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000ffffffff Opmask01=0000000000000007 Opmask02=000000000000000f Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7864696f6972702e 6f6972705f74656e
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6565656565656565 6565656565656565
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7272727272727272 7272727272727272
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff669e2420 00007fff669e2400
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000034747865
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000