Warning: Permanently added '[localhost]:51945' (ED25519) to the list of known hosts.
executing program
[ 84.490162][ T5099] loop0: detected capacity change from 0 to 64
[ 84.544390][ T5099] ==================================================================
[ 84.547393][ T5099] BUG: KASAN: slab-out-of-bounds in hfs_bnode_read_key+0x314/0x450
[ 84.550397][ T5099] Write of size 94 at addr ffff88803d61b300 by task syz-executor340/5099
[ 84.554447][ T5099]
[ 84.555361][ T5099] CPU: 0 UID: 0 PID: 5099 Comm: syz-executor340 Not tainted 6.11.0-syzkaller-11993-g3efc57369a0c #0
[ 84.559367][ T5099] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 84.563251][ T5099] Call Trace:
[ 84.564478][ T5099]
[ 84.565558][ T5099] dump_stack_lvl+0x241/0x360
[ 84.567237][ T5099] ? __pfx_dump_stack_lvl+0x10/0x10
[ 84.568944][ T5099] ? __pfx__printk+0x10/0x10
[ 84.570532][ T5099] ? _printk+0xd5/0x120
[ 84.572041][ T5099] ? __virt_addr_valid+0x183/0x530
[ 84.573975][ T5099] ? __virt_addr_valid+0x183/0x530
[ 84.575929][ T5099] print_report+0x169/0x550
[ 84.577627][ T5099] ? __virt_addr_valid+0x183/0x530
[ 84.579630][ T5099] ? __virt_addr_valid+0x183/0x530
[ 84.581793][ T5099] ? __virt_addr_valid+0x45f/0x530
[ 84.583898][ T5099] ? __phys_addr+0xba/0x170
[ 84.585796][ T5099] ? hfs_bnode_read_key+0x314/0x450
[ 84.587902][ T5099] kasan_report+0x143/0x180
[ 84.589667][ T5099] ? hfs_bnode_read_key+0x314/0x450
[ 84.591700][ T5099] kasan_check_range+0x282/0x290
[ 84.593497][ T5099] ? hfs_bnode_read_key+0x314/0x450
[ 84.595306][ T5099] __asan_memcpy+0x40/0x70
[ 84.596947][ T5099] hfs_bnode_read_key+0x314/0x450
[ 84.598756][ T5099] hfs_brec_insert+0x7f3/0xbd0
[ 84.600528][ T5099] ? __pfx_hfs_brec_insert+0x10/0x10
[ 84.602515][ T5099] hfs_cat_create+0x41d/0xa50
[ 84.604199][ T5099] ? __pfx_hfs_cat_create+0x10/0x10
[ 84.606155][ T5099] ? _raw_spin_unlock+0x28/0x50
[ 84.607900][ T5099] ? hfs_new_inode+0x86e/0xaf0
[ 84.609793][ T5099] hfs_mkdir+0x6c/0xe0
[ 84.611370][ T5099] vfs_mkdir+0x2f9/0x4f0
[ 84.613237][ T5099] do_mkdirat+0x264/0x3a0
[ 84.615240][ T5099] ? __might_fault+0xaa/0x120
[ 84.617200][ T5099] ? __pfx_do_mkdirat+0x10/0x10
[ 84.619007][ T5099] ? strncpy_from_user+0x131/0x250
[ 84.621766][ T5099] ? getname_flags+0x1e3/0x540
[ 84.623669][ T5099] __x64_sys_mkdir+0x6c/0x80
[ 84.625585][ T5099] do_syscall_64+0xf3/0x230
[ 84.627385][ T5099] ? clear_bhb_loop+0x35/0x90
[ 84.629262][ T5099] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 84.631515][ T5099] RIP: 0033:0x7f92aa034a99
[ 84.633269][ T5099] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 84.640636][ T5099] RSP: 002b:00007ffe53ec49b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[ 84.643561][ T5099] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f92aa034a99
[ 84.646543][ T5099] RDX: 00007f92aa034a99 RSI: 0000000000000000 RDI: 0000000020000300
[ 84.649556][ T5099] RBP: 00007f92aa0a85f0 R08: 0000555564eb34c0 R09: 0000555564eb34c0
[ 84.652479][ T5099] R10: 00000000000002b3 R11: 0000000000000246 R12: 00007ffe53ec49e0
[ 84.655449][ T5099] R13: 00007ffe53ec4c08 R14: 431bde82d7b634db R15: 00007f92aa07d03b
[ 84.658479][ T5099]
[ 84.659643][ T5099]
[ 84.660586][ T5099] Allocated by task 5099:
[ 84.662078][ T5099] kasan_save_track+0x3f/0x80
[ 84.663760][ T5099] __kasan_kmalloc+0x98/0xb0
[ 84.665462][ T5099] __kmalloc_noprof+0x1fc/0x400
[ 84.667265][ T5099] hfs_find_init+0x90/0x1f0
[ 84.668909][ T5099] hfs_cat_create+0x182/0xa50
[ 84.670725][ T5099] hfs_mkdir+0x6c/0xe0
[ 84.672303][ T5099] vfs_mkdir+0x2f9/0x4f0
[ 84.673806][ T5099] do_mkdirat+0x264/0x3a0
[ 84.675223][ T5099] __x64_sys_mkdir+0x6c/0x80
[ 84.677080][ T5099] do_syscall_64+0xf3/0x230
[ 84.678692][ T5099] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 84.680873][ T5099]
[ 84.681769][ T5099] The buggy address belongs to the object at ffff88803d61b300
[ 84.681769][ T5099] which belongs to the cache kmalloc-96 of size 96
[ 84.686873][ T5099] The buggy address is located 0 bytes inside of
[ 84.686873][ T5099] allocated 78-byte region [ffff88803d61b300, ffff88803d61b34e)
[ 84.692101][ T5099]
[ 84.693052][ T5099] The buggy address belongs to the physical page:
[ 84.695446][ T5099] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3d61b
[ 84.698906][ T5099] anon flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff)
[ 84.701879][ T5099] page_type: f5(slab)
[ 84.703530][ T5099] raw: 04fff00000000000 ffff88801ac41280 ffffea0000c2e040 dead000000000005
[ 84.706708][ T5099] raw: 0000000000000000 0000000080200020 00000001f5000000 0000000000000000
[ 84.710047][ T5099] page dumped because: kasan: bad access detected
[ 84.712350][ T5099] page_owner tracks the page as allocated
[ 84.714481][ T5099] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 4595, tgid 4595 (udevd), ts 35422086721, free_ts 33395434471
[ 84.721239][ T5099] post_alloc_hook+0x1f3/0x230
[ 84.722959][ T5099] get_page_from_freelist+0x3045/0x3190
[ 84.725049][ T5099] __alloc_pages_noprof+0x256/0x6c0
[ 84.726823][ T5099] alloc_pages_mpol_noprof+0x3e8/0x680
[ 84.728721][ T5099] alloc_slab_page+0x6a/0x120
[ 84.730427][ T5099] allocate_slab+0x5a/0x2f0
[ 84.732378][ T5099] ___slab_alloc+0xcd1/0x14b0
[ 84.733977][ T5099] __slab_alloc+0x58/0xa0
[ 84.735544][ T5099] __kmalloc_noprof+0x25a/0x400
[ 84.737427][ T5099] tomoyo_encode+0x26f/0x540
[ 84.739116][ T5099] tomoyo_realpath_from_path+0x59e/0x5e0
[ 84.741291][ T5099] tomoyo_check_open_permission+0x255/0x500
[ 84.743587][ T5099] security_file_open+0x777/0x990
[ 84.745552][ T5099] do_dentry_open+0x369/0x1460
[ 84.747370][ T5099] vfs_open+0x3e/0x330
[ 84.749036][ T5099] path_openat+0x2c84/0x3590
[ 84.751097][ T5099] page last free pid 16 tgid 16 stack trace:
[ 84.753351][ T5099] free_unref_page+0xcfb/0xf20
[ 84.755141][ T5099] rcu_core+0xaaa/0x17a0
[ 84.756655][ T5099] handle_softirqs+0x2c5/0x980
[ 84.758426][ T5099] run_ksoftirqd+0xca/0x130
[ 84.760131][ T5099] smpboot_thread_fn+0x544/0xa30
[ 84.761953][ T5099] kthread+0x2f0/0x390
[ 84.763523][ T5099] ret_from_fork+0x4b/0x80
[ 84.765178][ T5099] ret_from_fork_asm+0x1a/0x30
[ 84.766964][ T5099]
[ 84.767868][ T5099] Memory state around the buggy address:
[ 84.769945][ T5099] ffff88803d61b200: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[ 84.772884][ T5099] ffff88803d61b280: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[ 84.775850][ T5099] >ffff88803d61b300: 00 00 00 00 00 00 00 00 00 06 fc fc fc fc fc fc
[ 84.778894][ T5099] ^
[ 84.781660][ T5099] ffff88803d61b380: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc
[ 84.785117][ T5099] ffff88803d61b400: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[ 84.788143][ T5099] ==================================================================
[ 85.055779][ T5099] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 85.058919][ T5099] CPU: 0 UID: 0 PID: 5099 Comm: syz-executor340 Not tainted 6.11.0-syzkaller-11993-g3efc57369a0c #0
[ 85.062570][ T5099] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 85.066314][ T5099] Call Trace:
[ 85.067587][ T5099]
[ 85.068751][ T5099] dump_stack_lvl+0x241/0x360
[ 85.070505][ T5099] ? __pfx_dump_stack_lvl+0x10/0x10
[ 85.072409][ T5099] ? __pfx__printk+0x10/0x10
[ 85.074008][ T5099] ? preempt_schedule+0xe1/0xf0
[ 85.075665][ T5099] ? vscnprintf+0x5d/0x90
[ 85.077239][ T5099] panic+0x349/0x880
[ 85.078564][ T5099] ? check_panic_on_warn+0x21/0xb0
[ 85.080342][ T5099] ? __pfx_panic+0x10/0x10
[ 85.081932][ T5099] ? _raw_spin_unlock_irqrestore+0x130/0x140
[ 85.084002][ T5099] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 85.086275][ T5099] ? print_report+0x502/0x550
[ 85.088084][ T5099] check_panic_on_warn+0x86/0xb0
[ 85.089921][ T5099] ? hfs_bnode_read_key+0x314/0x450
[ 85.091828][ T5099] end_report+0x77/0x160
[ 85.093384][ T5099] kasan_report+0x154/0x180
[ 85.095083][ T5099] ? hfs_bnode_read_key+0x314/0x450
[ 85.096874][ T5099] kasan_check_range+0x282/0x290
[ 85.098611][ T5099] ? hfs_bnode_read_key+0x314/0x450
[ 85.100284][ T5099] __asan_memcpy+0x40/0x70
[ 85.102126][ T5099] hfs_bnode_read_key+0x314/0x450
[ 85.103987][ T5099] hfs_brec_insert+0x7f3/0xbd0
[ 85.105807][ T5099] ? __pfx_hfs_brec_insert+0x10/0x10
[ 85.107865][ T5099] hfs_cat_create+0x41d/0xa50
[ 85.109737][ T5099] ? __pfx_hfs_cat_create+0x10/0x10
[ 85.111759][ T5099] ? _raw_spin_unlock+0x28/0x50
[ 85.113659][ T5099] ? hfs_new_inode+0x86e/0xaf0
[ 85.115378][ T5099] hfs_mkdir+0x6c/0xe0
[ 85.116969][ T5099] vfs_mkdir+0x2f9/0x4f0
[ 85.118575][ T5099] do_mkdirat+0x264/0x3a0
[ 85.120205][ T5099] ? __might_fault+0xaa/0x120
[ 85.122117][ T5099] ? __pfx_do_mkdirat+0x10/0x10
[ 85.123934][ T5099] ? strncpy_from_user+0x131/0x250
[ 85.125610][ T5099] ? getname_flags+0x1e3/0x540
[ 85.127425][ T5099] __x64_sys_mkdir+0x6c/0x80
[ 85.129226][ T5099] do_syscall_64+0xf3/0x230
[ 85.131057][ T5099] ? clear_bhb_loop+0x35/0x90
[ 85.132844][ T5099] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 85.134978][ T5099] RIP: 0033:0x7f92aa034a99
[ 85.136751][ T5099] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 85.144243][ T5099] RSP: 002b:00007ffe53ec49b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[ 85.147245][ T5099] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f92aa034a99
[ 85.149992][ T5099] RDX: 00007f92aa034a99 RSI: 0000000000000000 RDI: 0000000020000300
[ 85.152947][ T5099] RBP: 00007f92aa0a85f0 R08: 0000555564eb34c0 R09: 0000555564eb34c0
[ 85.155806][ T5099] R10: 00000000000002b3 R11: 0000000000000246 R12: 00007ffe53ec49e0
[ 85.158740][ T5099] R13: 00007ffe53ec4c08 R14: 431bde82d7b634db R15: 00007f92aa07d03b
[ 85.161774][ T5099]
[ 85.163197][ T5099] Kernel Offset: disabled
[ 85.164869][ T5099] Rebooting in 86400 seconds..
VM DIAGNOSIS:
15:31:37 Registers:
info registers vcpu 0
CPU#0
RAX=0000000000000073 RBX=ffffffff9a711e40 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=0000000000000000 RSP=ffffc90002ccf150
R8 =ffffffff8549649b R9 =1ffff11003d8e046 R10=dffffc0000000000 R11=ffffffff85496450
R12=dffffc0000000000 R13=ffffffff9a40cf01 R14=0000000000000073 R15=00000000000003f8
RIP=ffffffff854964ce RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555564eb2380 ffffffff 00c00000
GS =0000 ffff88801fc00000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=0000561c793d48d0 CR3=000000001268e000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000ffffffff Opmask01=0000000000000006 Opmask02=0000000000000007 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0073657479625f65 6369767265735f6f
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe53ec3fb0 00007ffe53ec3f90
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe53ec40f0 00007ffe53ec3f70
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f92aa099544 00007f92aa0ad240
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe53ec3fb0
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe53ec40f0
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe53ec40f0 00007ffe53ec3f70
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe53ec3fb0 00007ffe53ec3f90
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000736668
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000