Warning: Permanently added '10.128.10.33' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 37.153873] ====================================================== [ 37.153873] WARNING: the mand mount option is being deprecated and [ 37.153873] will be removed in v5.15! [ 37.153873] ====================================================== [ 37.180613] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 37.191948] ================================================================== [ 37.199407] BUG: KASAN: slab-out-of-bounds in hfs_asc2mac+0x68f/0x710 [ 37.205979] Write of size 1 at addr ffff8880b5363cce by task syz-executor239/8096 [ 37.213584] [ 37.215213] CPU: 1 PID: 8096 Comm: syz-executor239 Not tainted 4.19.211-syzkaller #0 [ 37.223084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 37.232429] Call Trace: [ 37.235000] dump_stack+0x1fc/0x2ef [ 37.238611] print_address_description.cold+0x54/0x219 [ 37.243868] kasan_report_error.cold+0x8a/0x1b9 [ 37.248517] ? hfs_asc2mac+0x68f/0x710 [ 37.252389] __asan_report_store1_noabort+0x88/0x90 [ 37.257383] ? hfs_asc2mac+0x68f/0x710 [ 37.261249] hfs_asc2mac+0x68f/0x710 [ 37.264946] ? hfs_mac2asc+0x530/0x530 [ 37.268811] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 37.273822] ? __kmalloc+0x38e/0x3c0 [ 37.277518] ? hfs_find_init+0x91/0x230 [ 37.281474] hfs_cat_build_key+0xbe/0x1a0 [ 37.285614] hfs_lookup+0x1c2/0x300 [ 37.289222] ? hfs_rename+0x200/0x200 [ 37.293005] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 37.298872] ? __d_lookup_rcu+0x6b0/0x6b0 [ 37.303004] ? __lockdep_init_map+0x100/0x5a0 [ 37.307481] ? __lockdep_init_map+0x100/0x5a0 [ 37.311957] __lookup_slow+0x246/0x4a0 [ 37.315825] ? follow_dotdot_rcu+0x1040/0x1040 [ 37.320390] ? lookup_fast+0x4e9/0x1080 [ 37.324345] ? walk_component+0x798/0xda0 [ 37.328477] walk_component+0x7ac/0xda0 [ 37.332430] ? lookup_fast+0x1080/0x1080 [ 37.336473] ? walk_component+0xda0/0xda0 [ 37.340604] path_lookupat+0x1ff/0x8d0 [ 37.344469] ? do_mount+0xde9/0x2f50 [ 37.348163] ? path_mountpoint+0xac0/0xac0 [ 37.352384] ? mark_held_locks+0xf0/0xf0 [ 37.356426] ? putname+0xe1/0x120 [ 37.359863] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 37.364860] ? kmem_cache_free+0x226/0x260 [ 37.369073] filename_lookup+0x1ac/0x5a0 [ 37.373113] ? filename_parentat+0x590/0x590 [ 37.377505] ? check_preemption_disabled+0x41/0x280 [ 37.382500] ? getname_kernel+0x4e/0x370 [ 37.386543] ? memcpy+0x35/0x50 [ 37.389801] ? getname_kernel+0x21e/0x370 [ 37.393930] do_mount+0xde9/0x2f50 [ 37.397453] ? lock_downgrade+0x720/0x720 [ 37.401579] ? lock_acquire+0x170/0x3c0 [ 37.405532] ? __might_fault+0xef/0x1d0 [ 37.409486] ? copy_mount_string+0x40/0x40 [ 37.413698] ? __might_fault+0x192/0x1d0 [ 37.417737] ? _copy_from_user+0xd2/0x130 [ 37.421868] ? copy_mount_options+0x26f/0x380 [ 37.426345] ksys_mount+0xcf/0x130 [ 37.429865] __x64_sys_mount+0xba/0x150 [ 37.433818] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 37.438377] do_syscall_64+0xf9/0x620 [ 37.442159] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 37.447327] RIP: 0033:0x7fed41c68b59 [ 37.451019] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 37.469896] RSP: 002b:00007ffd884e8ed8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 37.477580] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fed41c68b59 [ 37.484831] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000100 [ 37.492075] RBP: 00007fed41c28160 R08: 0000000000000000 R09: 0000000000000000 [ 37.499321] R10: 0000000000269415 R11: 0000000000000246 R12: 00007fed41c281f0 [ 37.506564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 37.513818] [ 37.515427] Allocated by task 8096: [ 37.519035] __kmalloc+0x15a/0x3c0 [ 37.522550] hfs_find_init+0x91/0x230 [ 37.526327] hfs_lookup+0xfe/0x300 [ 37.529843] __lookup_slow+0x246/0x4a0 [ 37.533709] walk_component+0x7ac/0xda0 [ 37.537661] path_lookupat+0x1ff/0x8d0 [ 37.541527] filename_lookup+0x1ac/0x5a0 [ 37.545567] do_mount+0xde9/0x2f50 [ 37.549084] ksys_mount+0xcf/0x130 [ 37.552601] __x64_sys_mount+0xba/0x150 [ 37.556551] do_syscall_64+0xf9/0x620 [ 37.560328] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 37.565488] [ 37.567091] Freed by task 0: [ 37.570082] (stack is not available) [ 37.573766] [ 37.575371] The buggy address belongs to the object at ffff8880b5363c80 [ 37.575371] which belongs to the cache kmalloc-96 of size 96 [ 37.587827] The buggy address is located 78 bytes inside of [ 37.587827] 96-byte region [ffff8880b5363c80, ffff8880b5363ce0) [ 37.599502] The buggy address belongs to the page: [ 37.604406] page:ffffea0002d4d8c0 count:1 mapcount:0 mapping:ffff88813bff04c0 index:0x0 [ 37.612523] flags: 0xfff00000000100(slab) [ 37.616651] raw: 00fff00000000100 ffffea0002a719c8 ffff88813bff1448 ffff88813bff04c0 [ 37.624508] raw: 0000000000000000 ffff8880b5363000 0000000100000020 0000000000000000 [ 37.632359] page dumped because: kasan: bad access detected [ 37.638040] [ 37.639641] Memory state around the buggy address: [ 37.644545] ffff8880b5363b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 37.651879] ffff8880b5363c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 37.659218] >ffff8880b5363c80: 00 00 00 00 00 00 00 00 00 06 fc fc fc fc fc fc [ 37.666553] ^ [ 37.672237] ffff8880b5363d00: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 37.679572] ffff8880b5363d80: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 37.686904] ================================================================== [ 37.694233] Disabling lock debugging due to kernel taint [ 37.702694] Kernel panic - not syncing: panic_on_warn set ... [ 37.702694] [ 37.710068] CPU: 0 PID: 8096 Comm: syz-executor239 Tainted: G B 4.19.211-syzkaller #0 [ 37.719324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 37.728668] Call Trace: [ 37.731248] dump_stack+0x1fc/0x2ef [ 37.734854] panic+0x26a/0x50e [ 37.738023] ? __warn_printk+0xf3/0xf3 [ 37.741887] ? preempt_schedule_common+0x45/0xc0 [ 37.746625] ? ___preempt_schedule+0x16/0x18 [ 37.751015] ? trace_hardirqs_on+0x55/0x210 [ 37.755315] kasan_end_report+0x43/0x49 [ 37.759266] kasan_report_error.cold+0xa7/0x1b9 [ 37.763920] ? hfs_asc2mac+0x68f/0x710 [ 37.767782] __asan_report_store1_noabort+0x88/0x90 [ 37.772774] ? hfs_asc2mac+0x68f/0x710 [ 37.776638] hfs_asc2mac+0x68f/0x710 [ 37.780329] ? hfs_mac2asc+0x530/0x530 [ 37.784195] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 37.789188] ? __kmalloc+0x38e/0x3c0 [ 37.792877] ? hfs_find_init+0x91/0x230 [ 37.796830] hfs_cat_build_key+0xbe/0x1a0 [ 37.800955] hfs_lookup+0x1c2/0x300 [ 37.804558] ? hfs_rename+0x200/0x200 [ 37.808333] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 37.814194] ? __d_lookup_rcu+0x6b0/0x6b0 [ 37.818320] ? __lockdep_init_map+0x100/0x5a0 [ 37.822809] ? __lockdep_init_map+0x100/0x5a0 [ 37.827280] __lookup_slow+0x246/0x4a0 [ 37.831144] ? follow_dotdot_rcu+0x1040/0x1040 [ 37.835702] ? lookup_fast+0x4e9/0x1080 [ 37.839655] ? walk_component+0x798/0xda0 [ 37.843779] walk_component+0x7ac/0xda0 [ 37.847732] ? lookup_fast+0x1080/0x1080 [ 37.851770] ? walk_component+0xda0/0xda0 [ 37.855899] path_lookupat+0x1ff/0x8d0 [ 37.859780] ? do_mount+0xde9/0x2f50 [ 37.863470] ? path_mountpoint+0xac0/0xac0 [ 37.867681] ? mark_held_locks+0xf0/0xf0 [ 37.871720] ? putname+0xe1/0x120 [ 37.875148] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 37.880139] ? kmem_cache_free+0x226/0x260 [ 37.884351] filename_lookup+0x1ac/0x5a0 [ 37.888386] ? filename_parentat+0x590/0x590 [ 37.892777] ? check_preemption_disabled+0x41/0x280 [ 37.897771] ? getname_kernel+0x4e/0x370 [ 37.901811] ? memcpy+0x35/0x50 [ 37.905065] ? getname_kernel+0x21e/0x370 [ 37.909197] do_mount+0xde9/0x2f50 [ 37.912715] ? lock_downgrade+0x720/0x720 [ 37.916838] ? lock_acquire+0x170/0x3c0 [ 37.920789] ? __might_fault+0xef/0x1d0 [ 37.924740] ? copy_mount_string+0x40/0x40 [ 37.928953] ? __might_fault+0x192/0x1d0 [ 37.932990] ? _copy_from_user+0xd2/0x130 [ 37.937114] ? copy_mount_options+0x26f/0x380 [ 37.941600] ksys_mount+0xcf/0x130 [ 37.945120] __x64_sys_mount+0xba/0x150 [ 37.949075] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 37.953648] do_syscall_64+0xf9/0x620 [ 37.957431] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 37.962598] RIP: 0033:0x7fed41c68b59 [ 37.966292] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 37.985172] RSP: 002b:00007ffd884e8ed8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 37.992860] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fed41c68b59 [ 38.000110] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000100 [ 38.007356] RBP: 00007fed41c28160 R08: 0000000000000000 R09: 0000000000000000 [ 38.014601] R10: 0000000000269415 R11: 0000000000000246 R12: 00007fed41c281f0 [ 38.021845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 38.029288] Kernel Offset: disabled [ 38.032900] Rebooting in 86400 seconds..