Warning: Permanently added '10.128.10.37' (ED25519) to the list of known hosts. executing program syzkaller login: [ 56.596277][ T4240] loop0: detected capacity change from 0 to 64 [ 56.616338][ T4240] ================================================================== [ 56.624444][ T4240] BUG: KASAN: slab-out-of-bounds in hfs_bnode_read_key+0x310/0x440 [ 56.632389][ T4240] Write of size 94 at addr ffff888029076f80 by task syz-executor988/4240 [ 56.640813][ T4240] [ 56.643170][ T4240] CPU: 1 PID: 4240 Comm: syz-executor988 Not tainted 6.1.119-syzkaller #0 [ 56.651677][ T4240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 56.661723][ T4240] Call Trace: [ 56.665000][ T4240] [ 56.667918][ T4240] dump_stack_lvl+0x1e3/0x2cb [ 56.672592][ T4240] ? nf_tcp_handle_invalid+0x642/0x642 [ 56.678040][ T4240] ? panic+0x764/0x764 [ 56.682109][ T4240] ? _printk+0xd1/0x111 [ 56.686283][ T4240] ? __virt_addr_valid+0x17f/0x530 [ 56.691395][ T4240] ? __virt_addr_valid+0x17f/0x530 [ 56.696495][ T4240] print_report+0x15f/0x4f0 [ 56.700986][ T4240] ? __virt_addr_valid+0x17f/0x530 [ 56.706080][ T4240] ? __virt_addr_valid+0x17f/0x530 [ 56.711171][ T4240] ? __virt_addr_valid+0x45b/0x530 [ 56.716263][ T4240] ? __phys_addr+0xb6/0x170 [ 56.720754][ T4240] ? hfs_bnode_read_key+0x310/0x440 [ 56.725936][ T4240] kasan_report+0x136/0x160 [ 56.730419][ T4240] ? hfs_bnode_read_key+0x310/0x440 [ 56.735596][ T4240] kasan_check_range+0x27f/0x290 [ 56.740515][ T4240] ? hfs_bnode_read_key+0x310/0x440 [ 56.745695][ T4240] memcpy+0x3c/0x60 [ 56.749488][ T4240] hfs_bnode_read_key+0x310/0x440 [ 56.754494][ T4240] hfs_brec_insert+0x7ef/0xbd0 [ 56.759245][ T4240] ? hfs_brec_keylen+0x350/0x350 [ 56.764163][ T4240] ? memcpy+0x3c/0x60 [ 56.768129][ T4240] hfs_cat_move+0x572/0x1050 [ 56.772701][ T4240] ? hfs_cat_delete+0x880/0x880 [ 56.777551][ T4240] ? rwsem_write_trylock+0x166/0x210 [ 56.782906][ T4240] ? clear_nonspinnable+0x60/0x60 [ 56.787912][ T4240] ? generic_permission+0x21c/0x4f0 [ 56.793096][ T4240] hfs_rename+0x242/0x320 [ 56.797405][ T4240] vfs_rename+0xd32/0x10f0 [ 56.801808][ T4240] ? __ia32_sys_link+0x90/0x90 [ 56.806553][ T4240] ? security_path_rename+0x17f/0x210 [ 56.811906][ T4240] do_renameat2+0xde0/0x1440 [ 56.816486][ T4240] ? fsnotify_move+0x4f0/0x4f0 [ 56.821232][ T4240] ? __virt_addr_valid+0x45b/0x530 [ 56.826326][ T4240] ? __check_object_size+0x4dd/0xa30 [ 56.831593][ T4240] ? getname_flags+0x1f9/0x4f0 [ 56.836339][ T4240] __x64_sys_renameat2+0xce/0xe0 [ 56.841259][ T4240] do_syscall_64+0x3b/0xb0 [ 56.845671][ T4240] ? clear_bhb_loop+0x45/0xa0 [ 56.850326][ T4240] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 56.856204][ T4240] RIP: 0033:0x7f5f8f7a1679 [ 56.860609][ T4240] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 56.880197][ T4240] RSP: 002b:00007ffe80e52b48 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 56.888589][ T4240] RAX: ffffffffffffffda RBX: 00007ffe80e52d18 RCX: 00007f5f8f7a1679 [ 56.896564][ T4240] RDX: 0000000000000004 RSI: 0000000020000380 RDI: 0000000000000004 [ 56.904516][ T4240] RBP: 00007f5f8f814610 R08: 0000000000000000 R09: 00007ffe80e52d18 [ 56.912474][ T4240] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000001 [ 56.920435][ T4240] R13: 00007ffe80e52d08 R14: 0000000000000001 R15: 0000000000000001 [ 56.928392][ T4240] [ 56.931388][ T4240] [ 56.933692][ T4240] Allocated by task 4240: [ 56.937994][ T4240] kasan_set_track+0x4b/0x70 [ 56.942749][ T4240] __kasan_kmalloc+0x97/0xb0 [ 56.947314][ T4240] __kmalloc+0xb2/0x230 [ 56.951445][ T4240] hfs_find_init+0x8c/0x1e0 [ 56.955952][ T4240] hfs_cat_move+0x143/0x1050 [ 56.960520][ T4240] hfs_rename+0x242/0x320 [ 56.964827][ T4240] vfs_rename+0xd32/0x10f0 [ 56.969221][ T4240] do_renameat2+0xde0/0x1440 [ 56.973791][ T4240] __x64_sys_renameat2+0xce/0xe0 [ 56.978712][ T4240] do_syscall_64+0x3b/0xb0 [ 56.983114][ T4240] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 56.988990][ T4240] [ 56.991322][ T4240] The buggy address belongs to the object at ffff888029076f80 [ 56.991322][ T4240] which belongs to the cache kmalloc-96 of size 96 [ 57.005267][ T4240] The buggy address is located 0 bytes inside of [ 57.005267][ T4240] 96-byte region [ffff888029076f80, ffff888029076fe0) [ 57.018281][ T4240] [ 57.020588][ T4240] The buggy address belongs to the physical page: [ 57.026984][ T4240] page:ffffea0000a41d80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29076 [ 57.037114][ T4240] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 57.044648][ T4240] raw: 00fff00000000200 ffffea000078ad80 dead000000000004 ffff888017c41780 [ 57.053211][ T4240] raw: 0000000000000000 0000000080200020 00000001ffffffff 0000000000000000 [ 57.061768][ T4240] page dumped because: kasan: bad access detected [ 57.068184][ T4240] page_owner tracks the page as allocated [ 57.073885][ T4240] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY), pid 3636, tgid 3636 (udevadm), ts 18649433585, free_ts 18639228915 [ 57.091576][ T4240] post_alloc_hook+0x18d/0x1b0 [ 57.096322][ T4240] get_page_from_freelist+0x3731/0x38d0 [ 57.101845][ T4240] __alloc_pages+0x28d/0x770 [ 57.106411][ T4240] alloc_slab_page+0x6a/0x150 [ 57.111069][ T4240] new_slab+0x84/0x2d0 [ 57.115120][ T4240] ___slab_alloc+0xc20/0x1270 [ 57.119772][ T4240] __kmem_cache_alloc_node+0x19f/0x260 [ 57.125209][ T4240] __kmalloc+0xa1/0x230 [ 57.129341][ T4240] tomoyo_encode+0x26b/0x530 [ 57.133931][ T4240] tomoyo_realpath_from_path+0x594/0x5d0 [ 57.139542][ T4240] tomoyo_check_open_permission+0x240/0x4c0 [ 57.145414][ T4240] security_file_open+0x5f/0xa0 [ 57.150242][ T4240] do_dentry_open+0x308/0x10f0 [ 57.154987][ T4240] path_openat+0x2644/0x2e60 [ 57.159557][ T4240] do_filp_open+0x230/0x480 [ 57.164040][ T4240] do_sys_openat2+0x13b/0x4f0 [ 57.168696][ T4240] page last free stack trace: [ 57.173350][ T4240] free_unref_page_prepare+0xf63/0x1120 [ 57.178872][ T4240] free_unref_page+0x33/0x3e0 [ 57.183526][ T4240] qlist_free_all+0x76/0xe0 [ 57.188009][ T4240] kasan_quarantine_reduce+0x156/0x170 [ 57.193447][ T4240] __kasan_slab_alloc+0x1f/0x70 [ 57.198274][ T4240] slab_post_alloc_hook+0x52/0x3a0 [ 57.203361][ T4240] __kmem_cache_alloc_node+0x137/0x260 [ 57.208800][ T4240] __kmalloc_node+0xa2/0x230 [ 57.213368][ T4240] kvmalloc_node+0x6e/0x180 [ 57.217881][ T4240] seq_read_iter+0x1fe/0xd10 [ 57.222454][ T4240] vfs_read+0x88d/0xbf0 [ 57.226617][ T4240] ksys_read+0x19c/0x2c0 [ 57.230837][ T4240] do_syscall_64+0x3b/0xb0 [ 57.235231][ T4240] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 57.241105][ T4240] [ 57.243406][ T4240] Memory state around the buggy address: [ 57.249008][ T4240] ffff888029076e80: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 57.257046][ T4240] ffff888029076f00: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 57.265087][ T4240] >ffff888029076f80: 00 00 00 00 00 00 00 00 00 06 fc fc fc fc fc fc [ 57.273123][ T4240] ^ [ 57.279539][ T4240] ffff888029077000: 00 00 00 00 fc fc 00 00 00 00 fc fc 00 00 00 00 [ 57.287636][ T4240] ffff888029077080: fc fc 00 00 00 00 fc fc 00 00 00 00 fc fc 00 00 [ 57.295684][ T4240] ================================================================== [ 57.303979][ T4240] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 57.311181][ T4240] CPU: 1 PID: 4240 Comm: syz-executor988 Not tainted 6.1.119-syzkaller #0 [ 57.319675][ T4240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 57.329722][ T4240] Call Trace: [ 57.332989][ T4240] [ 57.335911][ T4240] dump_stack_lvl+0x1e3/0x2cb [ 57.340598][ T4240] ? nf_tcp_handle_invalid+0x642/0x642 [ 57.346067][ T4240] ? panic+0x764/0x764 [ 57.350136][ T4240] ? preempt_schedule_common+0xa6/0xd0 [ 57.355596][ T4240] ? vscnprintf+0x59/0x80 [ 57.359919][ T4240] panic+0x318/0x764 [ 57.363805][ T4240] ? check_panic_on_warn+0x1d/0xa0 [ 57.368908][ T4240] ? memcpy_page_flushcache+0xfc/0xfc [ 57.374270][ T4240] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 57.380244][ T4240] ? _raw_spin_unlock+0x40/0x40 [ 57.385089][ T4240] ? print_report+0x4a3/0x4f0 [ 57.389753][ T4240] check_panic_on_warn+0x7e/0xa0 [ 57.394677][ T4240] ? hfs_bnode_read_key+0x310/0x440 [ 57.399862][ T4240] end_report+0x66/0x110 [ 57.404107][ T4240] kasan_report+0x143/0x160 [ 57.408599][ T4240] ? hfs_bnode_read_key+0x310/0x440 [ 57.413785][ T4240] kasan_check_range+0x27f/0x290 [ 57.418713][ T4240] ? hfs_bnode_read_key+0x310/0x440 [ 57.423899][ T4240] memcpy+0x3c/0x60 [ 57.427697][ T4240] hfs_bnode_read_key+0x310/0x440 [ 57.432710][ T4240] hfs_brec_insert+0x7ef/0xbd0 [ 57.437465][ T4240] ? hfs_brec_keylen+0x350/0x350 [ 57.442386][ T4240] ? memcpy+0x3c/0x60 [ 57.446359][ T4240] hfs_cat_move+0x572/0x1050 [ 57.450938][ T4240] ? hfs_cat_delete+0x880/0x880 [ 57.455785][ T4240] ? rwsem_write_trylock+0x166/0x210 [ 57.461063][ T4240] ? clear_nonspinnable+0x60/0x60 [ 57.466075][ T4240] ? generic_permission+0x21c/0x4f0 [ 57.471261][ T4240] hfs_rename+0x242/0x320 [ 57.475580][ T4240] vfs_rename+0xd32/0x10f0 [ 57.479990][ T4240] ? __ia32_sys_link+0x90/0x90 [ 57.484752][ T4240] ? security_path_rename+0x17f/0x210 [ 57.490113][ T4240] do_renameat2+0xde0/0x1440 [ 57.494708][ T4240] ? fsnotify_move+0x4f0/0x4f0 [ 57.499464][ T4240] ? __virt_addr_valid+0x45b/0x530 [ 57.504569][ T4240] ? __check_object_size+0x4dd/0xa30 [ 57.509849][ T4240] ? getname_flags+0x1f9/0x4f0 [ 57.514603][ T4240] __x64_sys_renameat2+0xce/0xe0 [ 57.519533][ T4240] do_syscall_64+0x3b/0xb0 [ 57.523936][ T4240] ? clear_bhb_loop+0x45/0xa0 [ 57.528599][ T4240] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 57.534486][ T4240] RIP: 0033:0x7f5f8f7a1679 [ 57.538889][ T4240] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 57.558482][ T4240] RSP: 002b:00007ffe80e52b48 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 57.566888][ T4240] RAX: ffffffffffffffda RBX: 00007ffe80e52d18 RCX: 00007f5f8f7a1679 [ 57.574848][ T4240] RDX: 0000000000000004 RSI: 0000000020000380 RDI: 0000000000000004 [ 57.582819][ T4240] RBP: 00007f5f8f814610 R08: 0000000000000000 R09: 00007ffe80e52d18 [ 57.591019][ T4240] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000001 [ 57.599002][ T4240] R13: 00007ffe80e52d08 R14: 0000000000000001 R15: 0000000000000001 [ 57.606974][ T4240] [ 57.610216][ T4240] Kernel Offset: disabled [ 57.614551][ T4240] Rebooting in 86400 seconds..