Warning: Permanently added '[localhost]:25020' (ED25519) to the list of known hosts.
executing program
[ 135.163605][ T5329] loop0: detected capacity change from 0 to 512
[ 135.199137][ T5329] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor201: corrupted in-inode xattr: invalid ea_ino
[ 135.223940][ T5329] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz-executor201: couldn't read orphan inode 15 (err -117)
[ 135.271125][ T5329] EXT4-fs (loop0): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 135.291932][ T5329] ==================================================================
[ 135.307476][ T5329] BUG: KASAN: use-after-free in ext4_insert_dentry+0x3cd/0x780
[ 135.326631][ T5329] Write of size 251 at addr ffff88804124af14 by task syz-executor201/5329
[ 135.333774][ T5329]
[ 135.336153][ T5329] CPU: 0 UID: 0 PID: 5329 Comm: syz-executor201 Not tainted 6.14.0-rc5-syzkaller #0
[ 135.336172][ T5329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 135.336188][ T5329] Call Trace:
[ 135.336196][ T5329]
[ 135.336203][ T5329] dump_stack_lvl+0x241/0x360
[ 135.336221][ T5329] ? __pfx_dump_stack_lvl+0x10/0x10
[ 135.336232][ T5329] ? __pfx__printk+0x10/0x10
[ 135.336242][ T5329] ? _printk+0xd5/0x120
[ 135.336251][ T5329] ? __virt_addr_valid+0x183/0x530
[ 135.336261][ T5329] ? __virt_addr_valid+0x183/0x530
[ 135.336270][ T5329] print_report+0x16e/0x5b0
[ 135.336285][ T5329] ? __virt_addr_valid+0x183/0x530
[ 135.336293][ T5329] ? __virt_addr_valid+0x183/0x530
[ 135.336303][ T5329] ? __virt_addr_valid+0x45f/0x530
[ 135.336311][ T5329] ? __phys_addr+0xba/0x170
[ 135.336328][ T5329] ? ext4_insert_dentry+0x3cd/0x780
[ 135.336341][ T5329] kasan_report+0x143/0x180
[ 135.336355][ T5329] ? ext4_insert_dentry+0x3cd/0x780
[ 135.336369][ T5329] kasan_check_range+0x282/0x290
[ 135.336383][ T5329] ? ext4_insert_dentry+0x3cd/0x780
[ 135.336396][ T5329] __asan_memcpy+0x40/0x70
[ 135.336407][ T5329] ext4_insert_dentry+0x3cd/0x780
[ 135.336421][ T5329] add_dirent_to_buf+0x315/0x660
[ 135.336436][ T5329] ? __pfx_add_dirent_to_buf+0x10/0x10
[ 135.336450][ T5329] ? __ext4_handle_dirty_metadata+0x30d/0x820
[ 135.336463][ T5329] ? ext4_handle_dirty_dirblock+0xc0/0x350
[ 135.336477][ T5329] make_indexed_dir+0xcaf/0x1280
[ 135.336494][ T5329] ? __pfx_make_indexed_dir+0x10/0x10
[ 135.336508][ T5329] ? add_dirent_to_buf+0x2a7/0x660
[ 135.336520][ T5329] ? add_dirent_to_buf+0x2c5/0x660
[ 135.336534][ T5329] ? __pfx_add_dirent_to_buf+0x10/0x10
[ 135.336548][ T5329] ? __ext4_read_dirblock+0x486/0x790
[ 135.336561][ T5329] ext4_add_entry+0xb36/0xd30
[ 135.336574][ T5329] ? __pfx_ext4_add_entry+0x10/0x10
[ 135.336590][ T5329] ext4_add_nondir+0x8d/0x290
[ 135.336603][ T5329] ? ext4_symlink+0x70c/0xda0
[ 135.336616][ T5329] ext4_symlink+0xa10/0xda0
[ 135.336630][ T5329] ? __pfx_ext4_symlink+0x10/0x10
[ 135.336643][ T5329] ? inode_permission+0xff/0x460
[ 135.336658][ T5329] ? bpf_lsm_inode_symlink+0x9/0x10
[ 135.336671][ T5329] ? security_inode_symlink+0xbe/0x330
[ 135.336685][ T5329] vfs_symlink+0x137/0x2e0
[ 135.336700][ T5329] do_symlinkat+0x222/0x3a0
[ 135.336716][ T5329] ? __pfx_do_symlinkat+0x10/0x10
[ 135.336727][ T5329] ? strncpy_from_user+0x146/0x270
[ 135.336745][ T5329] ? getname_flags+0x1e3/0x540
[ 135.336761][ T5329] __x64_sys_symlink+0x7a/0x90
[ 135.336774][ T5329] do_syscall_64+0xf3/0x230
[ 135.336856][ T5329] ? clear_bhb_loop+0x35/0x90
[ 135.336874][ T5329] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 135.336890][ T5329] RIP: 0033:0x7f8514f22489
[ 135.336903][ T5329] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 135.336913][ T5329] RSP: 002b:00007ffd26fde9f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000058
[ 135.336927][ T5329] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8514f22489
[ 135.336936][ T5329] RDX: 0000000000000000 RSI: 0000400000000cc0 RDI: 0000400000000dc0
[ 135.336944][ T5329] RBP: 0000000000000000 R08: 00007ffd26fdea50 R09: 00007ffd26fdea50
[ 135.336952][ T5329] R10: 00007ffd26fdea50 R11: 0000000000000246 R12: 00007ffd26fdea50
[ 135.336959][ T5329] R13: 00007ffd26fdeb30 R14: 431bde82d7b634db R15: 00007f8514f6b01d
[ 135.336971][ T5329]
[ 135.336975][ T5329]
[ 135.774532][ T5329] The buggy address belongs to the physical page:
[ 135.778974][ T5329] page: refcount:3 mapcount:0 mapping:ffff888031d4cd78 index:0x3f pfn:0x4124a
[ 135.786925][ T5329] memcg:ffff888030aa6000
[ 135.788779][ T5329] aops:def_blk_aops ino:700000 dentry name(?):""
[ 135.791366][ T5329] flags: 0x4fff10000004014(referenced|dirty|private|node=1|zone=1|lastcpupid=0x7ff)
[ 135.796417][ T5329] raw: 04fff10000004014 0000000000000000 dead000000000122 ffff888031d4cd78
[ 135.802620][ T5329] raw: 000000000000003f ffff888045229cb0 00000003ffffffff ffff888030aa6000
[ 135.806922][ T5329] page dumped because: kasan: bad access detected
[ 135.810005][ T5329] page_owner tracks the page as allocated
[ 135.816652][ T5329] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x148c40(GFP_NOFS|__GFP_NOFAIL|__GFP_COMP|__GFP_HARDWALL), pid 5329, tgid 5329 (syz-executor201), ts 135291729097, free_ts 135100290600
[ 135.828111][ T5329] post_alloc_hook+0x1f4/0x240
[ 135.830535][ T5329] get_page_from_freelist+0x365c/0x37a0
[ 135.833261][ T5329] __alloc_frozen_pages_noprof+0x292/0x710
[ 135.837554][ T5329] alloc_pages_mpol+0x311/0x660
[ 135.840271][ T5329] alloc_pages_noprof+0x121/0x190
[ 135.844009][ T5329] folio_alloc_noprof+0x1e/0x30
[ 135.846927][ T5329] filemap_alloc_folio_noprof+0xe1/0x540
[ 135.850164][ T5329] __filemap_get_folio+0x438/0xae0
[ 135.852129][ T5329] bdev_getblk+0x1d4/0x670
[ 135.853853][ T5329] ext4_getblk+0x31b/0x880
[ 135.858632][ T5329] ext4_bread+0x2e/0x180
[ 135.865516][ T5329] ext4_append+0x327/0x5c0
[ 135.867298][ T5329] make_indexed_dir+0x3ff/0x1280
[ 135.875841][ T5329] ext4_add_entry+0xb36/0xd30
[ 135.877857][ T5329] ext4_add_nondir+0x8d/0x290
[ 135.884004][ T5329] ext4_symlink+0xa10/0xda0
[ 135.889127][ T5329] page last free pid 5327 tgid 5327 stack trace:
[ 135.895448][ T5329] free_frozen_pages+0xe0d/0x10e0
[ 135.897367][ T5329] __put_partials+0x160/0x1c0
[ 135.905701][ T5329] put_cpu_partial+0x17c/0x250
[ 135.907623][ T5329] __slab_free+0x290/0x380
[ 135.917804][ T5329] qlist_free_all+0x9a/0x140
[ 135.919916][ T5329] kasan_quarantine_reduce+0x14f/0x170
[ 135.923937][ T5329] __kasan_slab_alloc+0x23/0x80
[ 135.925809][ T5329] kmem_cache_alloc_noprof+0x1d9/0x380
[ 135.929148][ T5329] getname_flags+0xb7/0x540
[ 135.932653][ T5329] do_sys_openat2+0xd2/0x1d0
[ 135.935318][ T5329] __x64_sys_openat+0x247/0x2a0
[ 135.938470][ T5329] do_syscall_64+0xf3/0x230
[ 135.940152][ T5329] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 135.950908][ T5329]
[ 135.952790][ T5329] Memory state around the buggy address:
[ 135.958597][ T5329] ffff88804124af00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 135.965677][ T5329] ffff88804124af80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 135.972761][ T5329] >ffff88804124b000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 135.977926][ T5329] ^
[ 135.983069][ T5329] ffff88804124b080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 135.989734][ T5329] ffff88804124b100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 135.993260][ T5329] ==================================================================
[ 136.011398][ T5329] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 136.017594][ T5329] CPU: 0 UID: 0 PID: 5329 Comm: syz-executor201 Not tainted 6.14.0-rc5-syzkaller #0
[ 136.029214][ T5329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 136.035454][ T5329] Call Trace:
[ 136.036900][ T5329]
[ 136.038104][ T5329] dump_stack_lvl+0x241/0x360
[ 136.039849][ T5329] ? __pfx_dump_stack_lvl+0x10/0x10
[ 136.083671][ T5329] ? __pfx__printk+0x10/0x10
[ 136.086011][ T5329] ? preempt_schedule+0xe1/0xf0
[ 136.094004][ T5329] ? vscnprintf+0x5d/0x90
[ 136.095745][ T5329] panic+0x349/0x880
[ 136.097615][ T5329] ? check_panic_on_warn+0x21/0xb0
[ 136.114419][ T5329] ? __pfx_panic+0x10/0x10
[ 136.116544][ T5329] ? _raw_spin_unlock_irqrestore+0x130/0x140
[ 136.119316][ T5329] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 136.130211][ T5329] ? print_report+0x519/0x5b0
[ 136.142684][ T5329] check_panic_on_warn+0x86/0xb0
[ 136.144539][ T5329] ? ext4_insert_dentry+0x3cd/0x780
[ 136.146831][ T5329] end_report+0x77/0x160
[ 136.150399][ T5329] kasan_report+0x154/0x180
[ 136.152260][ T5329] ? ext4_insert_dentry+0x3cd/0x780
[ 136.154055][ T5329] kasan_check_range+0x282/0x290
[ 136.155859][ T5329] ? ext4_insert_dentry+0x3cd/0x780
[ 136.157799][ T5329] __asan_memcpy+0x40/0x70
[ 136.159726][ T5329] ext4_insert_dentry+0x3cd/0x780
[ 136.161527][ T5329] add_dirent_to_buf+0x315/0x660
[ 136.169636][ T5329] ? __pfx_add_dirent_to_buf+0x10/0x10
[ 136.173774][ T5329] ? __ext4_handle_dirty_metadata+0x30d/0x820
[ 136.188240][ T5329] ? ext4_handle_dirty_dirblock+0xc0/0x350
[ 136.190668][ T5329] make_indexed_dir+0xcaf/0x1280
[ 136.200828][ T5329] ? __pfx_make_indexed_dir+0x10/0x10
[ 136.205046][ T5329] ? add_dirent_to_buf+0x2a7/0x660
[ 136.209736][ T5329] ? add_dirent_to_buf+0x2c5/0x660
[ 136.229584][ T5329] ? __pfx_add_dirent_to_buf+0x10/0x10
[ 136.231880][ T5329] ? __ext4_read_dirblock+0x486/0x790
[ 136.239594][ T5329] ext4_add_entry+0xb36/0xd30
[ 136.241621][ T5329] ? __pfx_ext4_add_entry+0x10/0x10
[ 136.243711][ T5329] ext4_add_nondir+0x8d/0x290
[ 136.250842][ T5329] ? ext4_symlink+0x70c/0xda0
[ 136.256081][ T5329] ext4_symlink+0xa10/0xda0
[ 136.260215][ T5329] ? __pfx_ext4_symlink+0x10/0x10
[ 136.265229][ T5329] ? inode_permission+0xff/0x460
[ 136.267706][ T5329] ? bpf_lsm_inode_symlink+0x9/0x10
[ 136.270853][ T5329] ? security_inode_symlink+0xbe/0x330
[ 136.274951][ T5329] vfs_symlink+0x137/0x2e0
[ 136.276821][ T5329] do_symlinkat+0x222/0x3a0
[ 136.279555][ T5329] ? __pfx_do_symlinkat+0x10/0x10
[ 136.283698][ T5329] ? strncpy_from_user+0x146/0x270
[ 136.285975][ T5329] ? getname_flags+0x1e3/0x540
[ 136.287935][ T5329] __x64_sys_symlink+0x7a/0x90
[ 136.289843][ T5329] do_syscall_64+0xf3/0x230
[ 136.295174][ T5329] ? clear_bhb_loop+0x35/0x90
[ 136.298822][ T5329] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 136.303594][ T5329] RIP: 0033:0x7f8514f22489
[ 136.306035][ T5329] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 136.316384][ T5329] RSP: 002b:00007ffd26fde9f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000058
[ 136.324007][ T5329] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8514f22489
[ 136.327648][ T5329] RDX: 0000000000000000 RSI: 0000400000000cc0 RDI: 0000400000000dc0
[ 136.331366][ T5329] RBP: 0000000000000000 R08: 00007ffd26fdea50 R09: 00007ffd26fdea50
[ 136.335267][ T5329] R10: 00007ffd26fdea50 R11: 0000000000000246 R12: 00007ffd26fdea50
[ 136.339362][ T5329] R13: 00007ffd26fdeb30 R14: 431bde82d7b634db R15: 00007f8514f6b01d
[ 136.346357][ T5329]
[ 136.348377][ T5329] Kernel Offset: disabled
[ 136.352467][ T5329] Rebooting in 86400 seconds..
VM DIAGNOSIS:
12:32:44 Registers:
info registers vcpu 0
CPU#0
RAX=000000000000005b RBX=ffffffff9a9960a0 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=0000000000000000 RSP=ffffc9000333ef30
R8 =ffffffff8583ed4b R9 =1ffff11003dd6046 R10=dffffc0000000000 R11=ffffffff8583ed00
R12=dffffc0000000000 R13=000000000000005b R14=000000000000005b R15=00000000000003f8
RIP=ffffffff8583ed7e RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555894be480 ffffffff 00c00000
GS =0000 ffff88801fc00000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007fca8a800ed8 CR3=000000003f2d8000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000ffffffff Opmask01=0000000000000007 Opmask02=000000000000000f Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7864696f6972702e 6f6972705f74656e
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6565656565656565 6565656565656565
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7272727272727272 7272727272727272
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd26fddff0 00007ffd26fddfd0
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000034747865
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000