Warning: Permanently added '10.128.1.71' (ED25519) to the list of known hosts. executing program [ 60.352337][ T5216] ================================================================== [ 60.360439][ T5216] BUG: KASAN: slab-out-of-bounds in smk_access+0xae/0x4e0 [ 60.367576][ T5216] Read of size 8 at addr ffff8880202b03c0 by task syz-executor367/5216 [ 60.376395][ T5216] [ 60.378730][ T5216] CPU: 0 UID: 60928 PID: 5216 Comm: syz-executor367 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 60.389815][ T5216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 60.399863][ T5216] Call Trace: [ 60.403128][ T5216] [ 60.406044][ T5216] dump_stack_lvl+0x241/0x360 [ 60.410715][ T5216] ? __pfx_dump_stack_lvl+0x10/0x10 [ 60.415903][ T5216] ? __pfx__printk+0x10/0x10 [ 60.420479][ T5216] ? _printk+0xd5/0x120 [ 60.424613][ T5216] ? __virt_addr_valid+0x183/0x530 [ 60.429716][ T5216] ? __virt_addr_valid+0x183/0x530 [ 60.434807][ T5216] print_report+0x169/0x550 [ 60.439295][ T5216] ? __virt_addr_valid+0x183/0x530 [ 60.444384][ T5216] ? __virt_addr_valid+0x183/0x530 [ 60.449472][ T5216] ? __virt_addr_valid+0x45f/0x530 [ 60.454559][ T5216] ? __phys_addr+0xba/0x170 [ 60.459039][ T5216] ? smk_access+0xae/0x4e0 [ 60.463436][ T5216] kasan_report+0x143/0x180 [ 60.467926][ T5216] ? smk_access+0xae/0x4e0 [ 60.472330][ T5216] smk_access+0xae/0x4e0 [ 60.476556][ T5216] smack_watch_key+0x2f4/0x3a0 [ 60.481301][ T5216] ? __pfx_smack_watch_key+0x10/0x10 [ 60.486571][ T5216] ? __kasan_kmalloc+0x98/0xb0 [ 60.491320][ T5216] security_watch_key+0x86/0x250 [ 60.496243][ T5216] keyctl_watch_key+0x2b7/0x480 [ 60.501079][ T5216] __se_sys_keyctl+0x106/0xa50 [ 60.505824][ T5216] ? do_futex+0x33b/0x560 [ 60.510135][ T5216] ? __pfx___se_sys_keyctl+0x10/0x10 [ 60.515404][ T5216] ? __might_fault+0xaa/0x120 [ 60.520074][ T5216] ? rcu_is_watching+0x15/0xb0 [ 60.524826][ T5216] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 60.530881][ T5216] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 60.536849][ T5216] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 60.543163][ T5216] ? do_syscall_64+0x100/0x230 [ 60.547915][ T5216] ? __x64_sys_keyctl+0x20/0xc0 [ 60.552751][ T5216] do_syscall_64+0xf3/0x230 [ 60.557238][ T5216] ? clear_bhb_loop+0x35/0x90 [ 60.561900][ T5216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.567791][ T5216] RIP: 0033:0x7fbebbbc2fe9 [ 60.572201][ T5216] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 71 1d 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 60.591798][ T5216] RSP: 002b:00007fbebbb74238 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 60.600202][ T5216] RAX: ffffffffffffffda RBX: 00007fbebbc463e8 RCX: 00007fbebbbc2fe9 [ 60.608159][ T5216] RDX: 0000000000000004 RSI: 0000000016bf1cf5 RDI: 0000000000000020 [ 60.616121][ T5216] RBP: 00007fbebbc463e0 R08: 0000000000000000 R09: 00007fbebbb746c0 [ 60.624075][ T5216] R10: 0000000000000000 R11: 0000000000000246 R12: 00676e697279656b [ 60.632028][ T5216] R13: 0000000000000002 R14: 00007ffe798160c0 R15: 00007ffe798161a8 [ 60.639988][ T5216] [ 60.643012][ T5216] [ 60.645315][ T5216] Allocated by task 5216: [ 60.649625][ T5216] kasan_save_track+0x3f/0x80 [ 60.654289][ T5216] __kasan_kmalloc+0x98/0xb0 [ 60.658862][ T5216] __kmalloc_node_track_caller_noprof+0x225/0x440 [ 60.665268][ T5216] kmemdup_noprof+0x2a/0x60 [ 60.669755][ T5216] key_alloc+0x388/0xff0 [ 60.673981][ T5216] __key_create_or_update+0xa55/0xc70 [ 60.679335][ T5216] key_create_or_update+0x42/0x60 [ 60.684342][ T5216] __se_sys_add_key+0x33f/0x490 [ 60.689173][ T5216] do_syscall_64+0xf3/0x230 [ 60.693664][ T5216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.699545][ T5216] [ 60.701850][ T5216] The buggy address belongs to the object at ffff8880202b03c0 [ 60.701850][ T5216] which belongs to the cache kmalloc-8 of size 8 [ 60.715534][ T5216] The buggy address is located 0 bytes inside of [ 60.715534][ T5216] allocated 5-byte region [ffff8880202b03c0, ffff8880202b03c5) [ 60.729308][ T5216] [ 60.731615][ T5216] The buggy address belongs to the physical page: [ 60.738010][ T5216] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x202b0 [ 60.746755][ T5216] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 60.753849][ T5216] page_type: 0xfdffffff(slab) [ 60.758505][ T5216] raw: 00fff00000000000 ffff88801a841500 ffffea0000bba600 dead000000000002 [ 60.767079][ T5216] raw: 0000000000000000 0000000080800080 00000001fdffffff 0000000000000000 [ 60.775642][ T5216] page dumped because: kasan: bad access detected [ 60.782037][ T5216] page_owner tracks the page as allocated [ 60.787740][ T5216] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 3183568899, free_ts 3069912852 [ 60.806037][ T5216] post_alloc_hook+0x1f3/0x230 [ 60.810785][ T5216] get_page_from_freelist+0x2e4c/0x2f10 [ 60.816312][ T5216] __alloc_pages_noprof+0x256/0x6c0 [ 60.821578][ T5216] alloc_slab_page+0x5f/0x120 [ 60.826241][ T5216] allocate_slab+0x5a/0x2f0 [ 60.830724][ T5216] ___slab_alloc+0xcd1/0x14b0 [ 60.835380][ T5216] __slab_alloc+0x58/0xa0 [ 60.839688][ T5216] __kmalloc_noprof+0x25a/0x400 [ 60.844525][ T5216] acpi_ns_internalize_name+0x419/0x610 [ 60.850054][ T5216] acpi_ns_get_node+0x1b7/0x3c0 [ 60.854884][ T5216] acpi_get_handle+0x19b/0x2a0 [ 60.859632][ T5216] acpi_has_method+0x9e/0xf0 [ 60.864289][ T5216] acpi_add_single_object+0xe5e/0x1e00 [ 60.869732][ T5216] acpi_bus_check_add+0x32b/0x980 [ 60.874738][ T5216] acpi_ns_walk_namespace+0x294/0x4f0 [ 60.880091][ T5216] acpi_walk_namespace+0xeb/0x130 [ 60.885099][ T5216] page last free pid 1 tgid 1 stack trace: [ 60.890880][ T5216] free_unref_page+0xd19/0xea0 [ 60.895625][ T5216] __put_partials+0xeb/0x130 [ 60.900198][ T5216] put_cpu_partial+0x17c/0x250 [ 60.904945][ T5216] __slab_free+0x2ea/0x3d0 [ 60.909371][ T5216] qlist_free_all+0x9e/0x140 [ 60.913942][ T5216] kasan_quarantine_remove_cache+0x15d/0x180 [ 60.919904][ T5216] kmem_cache_shrink+0xd/0x20 [ 60.924566][ T5216] acpi_os_purge_cache+0x15/0x20 [ 60.929487][ T5216] acpi_purge_cached_objects+0x8f/0xc0 [ 60.934932][ T5216] acpi_initialize_objects+0x2e/0xa0 [ 60.940204][ T5216] acpi_bus_init+0xda/0xbc0 [ 60.944688][ T5216] acpi_init+0xb4/0x240 [ 60.948825][ T5216] do_one_initcall+0x248/0x880 [ 60.953574][ T5216] do_initcall_level+0x157/0x210 [ 60.958497][ T5216] do_initcalls+0x3f/0x80 [ 60.962807][ T5216] kernel_init_freeable+0x435/0x5d0 [ 60.967988][ T5216] [ 60.970291][ T5216] Memory state around the buggy address: [ 60.975905][ T5216] ffff8880202b0280: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 60.984038][ T5216] ffff8880202b0300: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 60.992080][ T5216] >ffff8880202b0380: fa fc fc fc 00 fc fc fc 05 fc fc fc 00 fc fc fc [ 61.000160][ T5216] ^ [ 61.006290][ T5216] ffff8880202b0400: 05 fc fc fc fa fc fc fc fa fc fc fc 00 fc fc fc [ 61.014331][ T5216] ffff8880202b0480: 00 fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 61.022385][ T5216] ================================================================== [ 61.035813][ T5216] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 61.043050][ T5216] CPU: 1 UID: 60928 PID: 5216 Comm: syz-executor367 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 61.054142][ T5216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 61.064206][ T5216] Call Trace: [ 61.067470][ T5216] [ 61.070383][ T5216] dump_stack_lvl+0x241/0x360 [ 61.075043][ T5216] ? __pfx_dump_stack_lvl+0x10/0x10 [ 61.080224][ T5216] ? __pfx__printk+0x10/0x10 [ 61.084790][ T5216] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 61.090768][ T5216] ? vscnprintf+0x5d/0x90 [ 61.095126][ T5216] panic+0x349/0x860 [ 61.100154][ T5216] ? check_panic_on_warn+0x21/0xb0 [ 61.105260][ T5216] ? __pfx_panic+0x10/0x10 [ 61.109680][ T5216] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 61.115661][ T5216] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 61.121986][ T5216] check_panic_on_warn+0x86/0xb0 [ 61.126910][ T5216] ? smk_access+0xae/0x4e0 [ 61.131322][ T5216] end_report+0x77/0x160 [ 61.135544][ T5216] kasan_report+0x154/0x180 [ 61.140027][ T5216] ? smk_access+0xae/0x4e0 [ 61.144433][ T5216] smk_access+0xae/0x4e0 [ 61.148676][ T5216] smack_watch_key+0x2f4/0x3a0 [ 61.153420][ T5216] ? __pfx_smack_watch_key+0x10/0x10 [ 61.158687][ T5216] ? __kasan_kmalloc+0x98/0xb0 [ 61.163430][ T5216] security_watch_key+0x86/0x250 [ 61.168352][ T5216] keyctl_watch_key+0x2b7/0x480 [ 61.173180][ T5216] __se_sys_keyctl+0x106/0xa50 [ 61.177924][ T5216] ? do_futex+0x33b/0x560 [ 61.182232][ T5216] ? __pfx___se_sys_keyctl+0x10/0x10 [ 61.187493][ T5216] ? __might_fault+0xaa/0x120 [ 61.192150][ T5216] ? rcu_is_watching+0x15/0xb0 [ 61.196895][ T5216] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 61.202956][ T5216] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 61.208930][ T5216] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 61.215254][ T5216] ? do_syscall_64+0x100/0x230 [ 61.220007][ T5216] ? __x64_sys_keyctl+0x20/0xc0 [ 61.224843][ T5216] do_syscall_64+0xf3/0x230 [ 61.229332][ T5216] ? clear_bhb_loop+0x35/0x90 [ 61.233989][ T5216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.239868][ T5216] RIP: 0033:0x7fbebbbc2fe9 [ 61.244265][ T5216] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 71 1d 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 61.263852][ T5216] RSP: 002b:00007fbebbb74238 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 61.272248][ T5216] RAX: ffffffffffffffda RBX: 00007fbebbc463e8 RCX: 00007fbebbbc2fe9 [ 61.280215][ T5216] RDX: 0000000000000004 RSI: 0000000016bf1cf5 RDI: 0000000000000020 [ 61.288172][ T5216] RBP: 00007fbebbc463e0 R08: 0000000000000000 R09: 00007fbebbb746c0 [ 61.296128][ T5216] R10: 0000000000000000 R11: 0000000000000246 R12: 00676e697279656b [ 61.304085][ T5216] R13: 0000000000000002 R14: 00007ffe798160c0 R15: 00007ffe798161a8 [ 61.312046][ T5216] [ 61.315273][ T5216] Kernel Offset: disabled [ 61.319584][ T5216] Rebooting in 86400 seconds..