Warning: Permanently added '10.128.1.72' (ED25519) to the list of known hosts.
executing program
[ 48.514998][ T3499] loop0: detected capacity change from 0 to 1024
[ 48.634621][ T3499] ==================================================================
[ 48.642835][ T3499] BUG: KASAN: slab-out-of-bounds in hfsplus_uni2asc+0x576/0x11f0
[ 48.650801][ T3499] Read of size 2 at addr ffff88814705a40c by task syz-executor297/3499
[ 48.659133][ T3499]
[ 48.661456][ T3499] CPU: 1 PID: 3499 Comm: syz-executor297 Not tainted 5.15.155-syzkaller #0
[ 48.670020][ T3499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
[ 48.680053][ T3499] Call Trace:
[ 48.683315][ T3499]
[ 48.686224][ T3499] dump_stack_lvl+0x1e3/0x2d0
[ 48.690886][ T3499] ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[ 48.696530][ T3499] ? _printk+0xd1/0x120
[ 48.700687][ T3499] ? __wake_up_klogd+0xcc/0x100
[ 48.705517][ T3499] ? panic+0x860/0x860
[ 48.709561][ T3499] ? _raw_spin_lock_irqsave+0xdd/0x120
[ 48.715024][ T3499] print_address_description+0x63/0x3b0
[ 48.720555][ T3499] ? hfsplus_uni2asc+0x576/0x11f0
[ 48.725557][ T3499] kasan_report+0x16b/0x1c0
[ 48.730051][ T3499] ? hfsplus_uni2asc+0x576/0x11f0
[ 48.735073][ T3499] hfsplus_uni2asc+0x576/0x11f0
[ 48.739911][ T3499] hfsplus_readdir+0x90c/0x12f0
[ 48.744754][ T3499] ? hfsplus_rename+0x1b0/0x1b0
[ 48.749611][ T3499] ? __might_sleep+0xc0/0xc0
[ 48.754181][ T3499] ? __fdget_pos+0x2cb/0x380
[ 48.758750][ T3499] ? mutex_lock_io_nested+0x60/0x60
[ 48.763931][ T3499] ? iterate_dir+0x10a/0x570
[ 48.768501][ T3499] ? iterate_dir+0x10a/0x570
[ 48.773065][ T3499] ? fsnotify_perm+0x438/0x5a0
[ 48.777893][ T3499] iterate_dir+0x224/0x570
[ 48.782290][ T3499] ? hfsplus_rename+0x1b0/0x1b0
[ 48.787119][ T3499] __se_sys_getdents+0x1e8/0x4c0
[ 48.792041][ T3499] ? __x64_sys_getdents+0x80/0x80
[ 48.797056][ T3499] ? fillonedir+0x4b0/0x4b0
[ 48.801542][ T3499] ? syscall_enter_from_user_mode+0x2e/0x240
[ 48.807504][ T3499] ? lockdep_hardirqs_on+0x94/0x130
[ 48.812683][ T3499] ? syscall_enter_from_user_mode+0x2e/0x240
[ 48.818642][ T3499] do_syscall_64+0x3b/0xb0
[ 48.823041][ T3499] ? clear_bhb_loop+0x15/0x70
[ 48.827699][ T3499] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 48.833660][ T3499] RIP: 0033:0x7f11c44a9639
[ 48.838068][ T3499] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 48.857665][ T3499] RSP: 002b:00007fff6ccc5a08 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[ 48.866068][ T3499] RAX: ffffffffffffffda RBX: 00007fff6ccc5bd8 RCX: 00007f11c44a9639
[ 48.874033][ T3499] RDX: 0000000000000090 RSI: 0000000020000180 RDI: 0000000000000004
[ 48.881994][ T3499] RBP: 00007f11c451d610 R08: 0000000000000000 R09: 00007fff6ccc5bd8
[ 48.889941][ T3499] R10: 000000000000069c R11: 0000000000000246 R12: 0000000000000001
[ 48.897905][ T3499] R13: 00007fff6ccc5bc8 R14: 0000000000000001 R15: 0000000000000001
[ 48.905886][ T3499]
[ 48.908988][ T3499]
[ 48.911300][ T3499] Allocated by task 3499:
[ 48.915601][ T3499] ____kasan_kmalloc+0xba/0xf0
[ 48.920365][ T3499] __kmalloc+0x168/0x300
[ 48.924677][ T3499] hfsplus_find_init+0x81/0x1c0
[ 48.929594][ T3499] hfsplus_readdir+0x204/0x12f0
[ 48.934431][ T3499] iterate_dir+0x224/0x570
[ 48.938854][ T3499] __se_sys_getdents+0x1e8/0x4c0
[ 48.943792][ T3499] do_syscall_64+0x3b/0xb0
[ 48.948398][ T3499] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 48.954643][ T3499]
[ 48.956960][ T3499] The buggy address belongs to the object at ffff88814705a000
[ 48.956960][ T3499] which belongs to the cache kmalloc-2k of size 2048
[ 48.971001][ T3499] The buggy address is located 1036 bytes inside of
[ 48.971001][ T3499] 2048-byte region [ffff88814705a000, ffff88814705a800)
[ 48.984430][ T3499] The buggy address belongs to the page:
[ 48.990040][ T3499] page:ffffea00051c1600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x147058
[ 49.000340][ T3499] head:ffffea00051c1600 order:3 compound_mapcount:0 compound_pincount:0
[ 49.008647][ T3499] flags: 0x57ff80000010200(slab|head|node=1|zone=2|lastcpupid=0xfff)
[ 49.016870][ T3499] raw: 057ff80000010200 dead000000000100 dead000000000122 ffff888011c42000
[ 49.025468][ T3499] raw: 0000000000000000 0000000080080008 00000001ffffffff 0000000000000000
[ 49.034021][ T3499] page dumped because: kasan: bad access detected
[ 49.040842][ T3499] page_owner tracks the page as allocated
[ 49.046533][ T3499] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 6705429472, free_ts 0
[ 49.064391][ T3499] get_page_from_freelist+0x322a/0x33c0
[ 49.069940][ T3499] __alloc_pages+0x272/0x700
[ 49.074503][ T3499] alloc_page_interleave+0x22/0x1c0
[ 49.079699][ T3499] new_slab+0xbb/0x4b0
[ 49.083745][ T3499] ___slab_alloc+0x6f6/0xe10
[ 49.088308][ T3499] kmem_cache_alloc_trace+0x1a0/0x290
[ 49.093674][ T3499] acpi_ds_create_walk_state+0xff/0x2a0
[ 49.099199][ T3499] acpi_ps_execute_method+0x241/0x870
[ 49.104550][ T3499] acpi_ns_evaluate+0x636/0x9f0
[ 49.109378][ T3499] acpi_evaluate_object+0x597/0xaf0
[ 49.114550][ T3499] acpi_evaluate_integer+0x117/0x2e0
[ 49.119827][ T3499] acpi_bus_get_status+0x176/0x3a0
[ 49.124929][ T3499] acpi_serdev_add_device+0x1a9/0x870
[ 49.130293][ T3499] acpi_ns_walk_namespace+0x28c/0x4e0
[ 49.135639][ T3499] acpi_walk_namespace+0xe7/0x130
[ 49.140651][ T3499] serdev_controller_add+0x370/0x4c0
[ 49.145916][ T3499] page_owner free stack trace missing
[ 49.151261][ T3499]
[ 49.153562][ T3499] Memory state around the buggy address:
[ 49.159164][ T3499] ffff88814705a300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 49.167200][ T3499] ffff88814705a380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 49.175354][ T3499] >ffff88814705a400: 00 04 fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 49.183399][ T3499] ^
[ 49.187702][ T3499] ffff88814705a480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 49.195740][ T3499] ffff88814705a500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 49.203802][ T3499] ==================================================================
[ 49.211842][ T3499] Disabling lock debugging due to kernel taint
[ 49.218715][ T3499] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 49.225947][ T3499] CPU: 1 PID: 3499 Comm: syz-executor297 Tainted: G B 5.15.155-syzkaller #0
[ 49.235902][ T3499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
[ 49.245957][ T3499] Call Trace:
[ 49.249217][ T3499]
[ 49.252138][ T3499] dump_stack_lvl+0x1e3/0x2d0
[ 49.256805][ T3499] ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[ 49.262520][ T3499] ? panic+0x860/0x860
[ 49.266828][ T3499] ? preempt_schedule_common+0xa6/0xd0
[ 49.272304][ T3499] ? preempt_schedule+0xd9/0xe0
[ 49.277147][ T3499] panic+0x318/0x860
[ 49.281025][ T3499] ? check_panic_on_warn+0x1d/0xa0
[ 49.286114][ T3499] ? fb_is_primary_device+0xd0/0xd0
[ 49.291479][ T3499] ? _raw_spin_unlock_irqrestore+0x128/0x130
[ 49.297434][ T3499] ? _raw_spin_unlock+0x40/0x40
[ 49.302272][ T3499] ? print_memory_metadata+0xe2/0x140
[ 49.307625][ T3499] check_panic_on_warn+0x7e/0xa0
[ 49.312542][ T3499] ? hfsplus_uni2asc+0x576/0x11f0
[ 49.317541][ T3499] end_report+0x6d/0xf0
[ 49.321672][ T3499] kasan_report+0x18e/0x1c0
[ 49.326153][ T3499] ? hfsplus_uni2asc+0x576/0x11f0
[ 49.331166][ T3499] hfsplus_uni2asc+0x576/0x11f0
[ 49.336010][ T3499] hfsplus_readdir+0x90c/0x12f0
[ 49.340857][ T3499] ? hfsplus_rename+0x1b0/0x1b0
[ 49.345694][ T3499] ? __might_sleep+0xc0/0xc0
[ 49.350279][ T3499] ? __fdget_pos+0x2cb/0x380
[ 49.354847][ T3499] ? mutex_lock_io_nested+0x60/0x60
[ 49.360023][ T3499] ? iterate_dir+0x10a/0x570
[ 49.364590][ T3499] ? iterate_dir+0x10a/0x570
[ 49.369158][ T3499] ? fsnotify_perm+0x438/0x5a0
[ 49.373910][ T3499] iterate_dir+0x224/0x570
[ 49.378327][ T3499] ? hfsplus_rename+0x1b0/0x1b0
[ 49.383153][ T3499] __se_sys_getdents+0x1e8/0x4c0
[ 49.388069][ T3499] ? __x64_sys_getdents+0x80/0x80
[ 49.393084][ T3499] ? fillonedir+0x4b0/0x4b0
[ 49.397573][ T3499] ? syscall_enter_from_user_mode+0x2e/0x240
[ 49.403626][ T3499] ? lockdep_hardirqs_on+0x94/0x130
[ 49.408799][ T3499] ? syscall_enter_from_user_mode+0x2e/0x240
[ 49.414752][ T3499] do_syscall_64+0x3b/0xb0
[ 49.419145][ T3499] ? clear_bhb_loop+0x15/0x70
[ 49.423807][ T3499] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 49.429696][ T3499] RIP: 0033:0x7f11c44a9639
[ 49.434094][ T3499] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 49.453692][ T3499] RSP: 002b:00007fff6ccc5a08 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[ 49.462196][ T3499] RAX: ffffffffffffffda RBX: 00007fff6ccc5bd8 RCX: 00007f11c44a9639
[ 49.470173][ T3499] RDX: 0000000000000090 RSI: 0000000020000180 RDI: 0000000000000004
[ 49.478139][ T3499] RBP: 00007f11c451d610 R08: 0000000000000000 R09: 00007fff6ccc5bd8
[ 49.486121][ T3499] R10: 000000000000069c R11: 0000000000000246 R12: 0000000000000001
[ 49.494085][ T3499] R13: 00007fff6ccc5bc8 R14: 0000000000000001 R15: 0000000000000001
[ 49.502039][ T3499]
[ 49.505292][ T3499] Kernel Offset: disabled
[ 49.509605][ T3499] Rebooting in 86400 seconds..