Warning: Permanently added '10.128.1.75' (ED25519) to the list of known hosts.
executing program
[ 50.988009][ T4163] loop0: detected capacity change from 0 to 64
[ 51.087382][ T4163] ==================================================================
[ 51.095587][ T4163] BUG: KASAN: slab-out-of-bounds in hfs_bnode_read+0x179/0x2a0
[ 51.103165][ T4163] Write of size 94 at addr ffff88801a7b9e00 by task syz-executor343/4163
[ 51.111586][ T4163]
[ 51.113927][ T4163] CPU: 1 PID: 4163 Comm: syz-executor343 Not tainted 5.15.176-syzkaller #0
[ 51.122508][ T4163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 51.132556][ T4163] Call Trace:
[ 51.135822][ T4163]
[ 51.138733][ T4163] dump_stack_lvl+0x1e3/0x2d0
[ 51.143402][ T4163] ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[ 51.149010][ T4163] ? _printk+0xd1/0x120
[ 51.153146][ T4163] ? __wake_up_klogd+0xcc/0x100
[ 51.157972][ T4163] ? panic+0x860/0x860
[ 51.162034][ T4163] ? _raw_spin_lock_irqsave+0xdd/0x120
[ 51.167492][ T4163] print_address_description+0x63/0x3b0
[ 51.173017][ T4163] ? hfs_bnode_read+0x179/0x2a0
[ 51.177845][ T4163] kasan_report+0x16b/0x1c0
[ 51.182342][ T4163] ? hfs_bnode_read+0x179/0x2a0
[ 51.187170][ T4163] kasan_check_range+0x27e/0x290
[ 51.192081][ T4163] ? hfs_bnode_read+0x179/0x2a0
[ 51.196907][ T4163] memcpy+0x3c/0x60
[ 51.200693][ T4163] hfs_bnode_read+0x179/0x2a0
[ 51.205355][ T4163] ? hfs_brec_insert+0x6dc/0xbd0
[ 51.210268][ T4163] hfs_bnode_read_key+0x16e/0x240
[ 51.215276][ T4163] ? hfs_bnode_read_u8+0x110/0x110
[ 51.220364][ T4163] ? do_raw_spin_unlock+0x137/0x8b0
[ 51.225541][ T4163] ? hfs_bnode_put+0x1bc/0x370
[ 51.230301][ T4163] hfs_brec_insert+0x7ef/0xbd0
[ 51.235055][ T4163] ? hfs_brec_keylen+0x350/0x350
[ 51.239966][ T4163] ? mutex_lock_nested+0x17/0x20
[ 51.244884][ T4163] hfs_cat_create+0x419/0xa60
[ 51.249541][ T4163] ? hfs_cat_build_key+0x170/0x170
[ 51.254638][ T4163] ? _raw_spin_unlock+0x24/0x40
[ 51.259484][ T4163] ? hfs_new_inode+0x8ca/0xb40
[ 51.264231][ T4163] hfs_create+0x62/0xd0
[ 51.268371][ T4163] ? hfs_lookup+0x2e0/0x2e0
[ 51.272869][ T4163] path_openat+0x130a/0x2f20
[ 51.277454][ T4163] ? do_filp_open+0x460/0x460
[ 51.282122][ T4163] do_filp_open+0x21c/0x460
[ 51.286603][ T4163] ? vfs_tmpfile+0x2e0/0x2e0
[ 51.291176][ T4163] ? _raw_spin_unlock+0x24/0x40
[ 51.296006][ T4163] ? alloc_fd+0x598/0x630
[ 51.300320][ T4163] do_sys_openat2+0x13b/0x4f0
[ 51.304976][ T4163] ? do_sys_open+0x220/0x220
[ 51.309550][ T4163] __x64_sys_openat+0x243/0x290
[ 51.314376][ T4163] ? __ia32_sys_open+0x270/0x270
[ 51.319292][ T4163] ? syscall_enter_from_user_mode+0x2e/0x240
[ 51.325248][ T4163] ? lockdep_hardirqs_on+0x94/0x130
[ 51.330425][ T4163] ? syscall_enter_from_user_mode+0x2e/0x240
[ 51.336385][ T4163] do_syscall_64+0x3b/0xb0
[ 51.340785][ T4163] ? clear_bhb_loop+0x15/0x70
[ 51.345438][ T4163] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 51.351304][ T4163] RIP: 0033:0x7fd49ead2ad9
[ 51.355697][ T4163] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 51.375278][ T4163] RSP: 002b:00007ffce5abec08 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 51.383692][ T4163] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd49ead2ad9
[ 51.391646][ T4163] RDX: 000000000000275a RSI: 0000000020000200 RDI: 00000000ffffff9c
[ 51.399598][ T4163] RBP: 00007fd49eb465f0 R08: 0000555561a834c0 R09: 0000555561a834c0
[ 51.407569][ T4163] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffce5abec30
[ 51.415519][ T4163] R13: 00007ffce5abee58 R14: 431bde82d7b634db R15: 00007fd49eb1b03b
[ 51.423487][ T4163]
[ 51.426487][ T4163]
[ 51.428804][ T4163] Allocated by task 4163:
[ 51.433103][ T4163] ____kasan_kmalloc+0xba/0xf0
[ 51.437843][ T4163] __kmalloc+0x168/0x300
[ 51.442059][ T4163] hfs_find_init+0x8c/0x1e0
[ 51.446537][ T4163] hfs_cat_create+0x17e/0xa60
[ 51.451200][ T4163] hfs_create+0x62/0xd0
[ 51.455356][ T4163] path_openat+0x130a/0x2f20
[ 51.459936][ T4163] do_filp_open+0x21c/0x460
[ 51.464425][ T4163] do_sys_openat2+0x13b/0x4f0
[ 51.469080][ T4163] __x64_sys_openat+0x243/0x290
[ 51.473908][ T4163] do_syscall_64+0x3b/0xb0
[ 51.478299][ T4163] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 51.484168][ T4163]
[ 51.486466][ T4163] The buggy address belongs to the object at ffff88801a7b9e00
[ 51.486466][ T4163] which belongs to the cache kmalloc-96 of size 96
[ 51.500318][ T4163] The buggy address is located 0 bytes inside of
[ 51.500318][ T4163] 96-byte region [ffff88801a7b9e00, ffff88801a7b9e60)
[ 51.513311][ T4163] The buggy address belongs to the page:
[ 51.518934][ T4163] page:ffffea000069ee40 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88801a7b9000 pfn:0x1a7b9
[ 51.530371][ T4163] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 51.537901][ T4163] raw: 00fff00000000200 ffffea0000708980 0000001700000017 ffff888017441780
[ 51.546461][ T4163] raw: ffff88801a7b9000 000000008020001b 00000001ffffffff 0000000000000000
[ 51.555033][ T4163] page dumped because: kasan: bad access detected
[ 51.561443][ T4163] page_owner tracks the page as allocated
[ 51.567133][ T4163] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY), pid 3550, ts 24653136660, free_ts 24649182329
[ 51.582992][ T4163] get_page_from_freelist+0x3b78/0x3d40
[ 51.588521][ T4163] __alloc_pages+0x272/0x700
[ 51.593104][ T4163] new_slab+0xbb/0x4b0
[ 51.597147][ T4163] ___slab_alloc+0x6f6/0xe10
[ 51.601710][ T4163] __kmalloc+0x1c9/0x300
[ 51.605925][ T4163] tomoyo_encode+0x26b/0x530
[ 51.610488][ T4163] tomoyo_realpath_from_path+0x5a2/0x5e0
[ 51.616096][ T4163] tomoyo_path_perm+0x273/0x6b0
[ 51.620920][ T4163] security_inode_getattr+0xcf/0x120
[ 51.626208][ T4163] vfs_getattr+0x26/0x360
[ 51.630514][ T4163] vfs_statx+0x18f/0x3b0
[ 51.634743][ T4163] __x64_sys_newfstatat+0x12c/0x1b0
[ 51.639912][ T4163] do_syscall_64+0x3b/0xb0
[ 51.644303][ T4163] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 51.650176][ T4163] page last free stack trace:
[ 51.654820][ T4163] free_unref_page_prepare+0xc34/0xcf0
[ 51.660256][ T4163] free_unref_page+0x95/0x2d0
[ 51.664905][ T4163] ___cache_free+0xe3/0x100
[ 51.669380][ T4163] qlist_free_all+0x36/0x90
[ 51.673859][ T4163] kasan_quarantine_reduce+0x162/0x180
[ 51.679288][ T4163] __kasan_slab_alloc+0x2f/0xc0
[ 51.684110][ T4163] slab_post_alloc_hook+0x53/0x380
[ 51.689195][ T4163] kmem_cache_alloc+0xf3/0x280
[ 51.693929][ T4163] shmem_alloc_inode+0x16/0x30
[ 51.698666][ T4163] new_inode_pseudo+0x60/0x210
[ 51.703498][ T4163] new_inode+0x25/0x1d0
[ 51.707651][ T4163] shmem_get_inode+0x327/0xad0
[ 51.712387][ T4163] shmem_symlink+0x118/0x7a0
[ 51.716950][ T4163] vfs_symlink+0x247/0x3d0
[ 51.721341][ T4163] do_symlinkat+0x1fd/0x600
[ 51.725816][ T4163] __x64_sys_symlink+0x7a/0x90
[ 51.730550][ T4163]
[ 51.732849][ T4163] Memory state around the buggy address:
[ 51.738452][ T4163] ffff88801a7b9d00: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc
[ 51.746487][ T4163] ffff88801a7b9d80: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc
[ 51.754518][ T4163] >ffff88801a7b9e00: 00 00 00 00 00 00 00 00 00 06 fc fc fc fc fc fc
[ 51.762578][ T4163] ^
[ 51.768968][ T4163] ffff88801a7b9e80: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[ 51.777015][ T4163] ffff88801a7b9f00: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc
[ 51.785051][ T4163] ==================================================================
[ 51.793166][ T4163] Disabling lock debugging due to kernel taint
[ 51.799400][ T4163] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 51.806601][ T4163] CPU: 1 PID: 4163 Comm: syz-executor343 Tainted: G B 5.15.176-syzkaller #0
[ 51.816810][ T4163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 51.826896][ T4163] Call Trace:
[ 51.830159][ T4163]
[ 51.833068][ T4163] dump_stack_lvl+0x1e3/0x2d0
[ 51.837738][ T4163] ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[ 51.843347][ T4163] ? panic+0x860/0x860
[ 51.847393][ T4163] ? rcu_is_watching+0x11/0xa0
[ 51.852219][ T4163] panic+0x318/0x860
[ 51.856093][ T4163] ? check_panic_on_warn+0x1d/0xa0
[ 51.861176][ T4163] ? fb_is_primary_device+0xd0/0xd0
[ 51.866360][ T4163] ? _raw_spin_unlock_irqrestore+0xd4/0x130
[ 51.872229][ T4163] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 51.878097][ T4163] ? _raw_spin_unlock+0x40/0x40
[ 51.882937][ T4163] ? print_memory_metadata+0xe2/0x140
[ 51.888292][ T4163] check_panic_on_warn+0x7e/0xa0
[ 51.893234][ T4163] ? hfs_bnode_read+0x179/0x2a0
[ 51.898089][ T4163] end_report+0x6d/0xf0
[ 51.902244][ T4163] kasan_report+0x18e/0x1c0
[ 51.906744][ T4163] ? hfs_bnode_read+0x179/0x2a0
[ 51.911594][ T4163] kasan_check_range+0x27e/0x290
[ 51.916512][ T4163] ? hfs_bnode_read+0x179/0x2a0
[ 51.921349][ T4163] memcpy+0x3c/0x60
[ 51.925147][ T4163] hfs_bnode_read+0x179/0x2a0
[ 51.929892][ T4163] ? hfs_brec_insert+0x6dc/0xbd0
[ 51.934808][ T4163] hfs_bnode_read_key+0x16e/0x240
[ 51.939818][ T4163] ? hfs_bnode_read_u8+0x110/0x110
[ 51.945017][ T4163] ? do_raw_spin_unlock+0x137/0x8b0
[ 51.950217][ T4163] ? hfs_bnode_put+0x1bc/0x370
[ 51.954961][ T4163] hfs_brec_insert+0x7ef/0xbd0
[ 51.959714][ T4163] ? hfs_brec_keylen+0x350/0x350
[ 51.964634][ T4163] ? mutex_lock_nested+0x17/0x20
[ 51.969556][ T4163] hfs_cat_create+0x419/0xa60
[ 51.974219][ T4163] ? hfs_cat_build_key+0x170/0x170
[ 51.979312][ T4163] ? _raw_spin_unlock+0x24/0x40
[ 51.984145][ T4163] ? hfs_new_inode+0x8ca/0xb40
[ 51.988902][ T4163] hfs_create+0x62/0xd0
[ 51.993038][ T4163] ? hfs_lookup+0x2e0/0x2e0
[ 51.997526][ T4163] path_openat+0x130a/0x2f20
[ 52.002122][ T4163] ? do_filp_open+0x460/0x460
[ 52.006778][ T4163] do_filp_open+0x21c/0x460
[ 52.011257][ T4163] ? vfs_tmpfile+0x2e0/0x2e0
[ 52.015824][ T4163] ? _raw_spin_unlock+0x24/0x40
[ 52.020655][ T4163] ? alloc_fd+0x598/0x630
[ 52.024970][ T4163] do_sys_openat2+0x13b/0x4f0
[ 52.029652][ T4163] ? do_sys_open+0x220/0x220
[ 52.034222][ T4163] __x64_sys_openat+0x243/0x290
[ 52.039052][ T4163] ? __ia32_sys_open+0x270/0x270
[ 52.044080][ T4163] ? syscall_enter_from_user_mode+0x2e/0x240
[ 52.050051][ T4163] ? lockdep_hardirqs_on+0x94/0x130
[ 52.055254][ T4163] ? syscall_enter_from_user_mode+0x2e/0x240
[ 52.061226][ T4163] do_syscall_64+0x3b/0xb0
[ 52.065622][ T4163] ? clear_bhb_loop+0x15/0x70
[ 52.070274][ T4163] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 52.076151][ T4163] RIP: 0033:0x7fd49ead2ad9
[ 52.080548][ T4163] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 52.100161][ T4163] RSP: 002b:00007ffce5abec08 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 52.108590][ T4163] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd49ead2ad9
[ 52.116549][ T4163] RDX: 000000000000275a RSI: 0000000020000200 RDI: 00000000ffffff9c
[ 52.124679][ T4163] RBP: 00007fd49eb465f0 R08: 0000555561a834c0 R09: 0000555561a834c0
[ 52.132631][ T4163] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffce5abec30
[ 52.140600][ T4163] R13: 00007ffce5abee58 R14: 431bde82d7b634db R15: 00007fd49eb1b03b
[ 52.148587][ T4163]
[ 52.151910][ T4163] Kernel Offset: disabled
[ 52.156239][ T4163] Rebooting in 86400 seconds..