Warning: Permanently added '[localhost]:51090' (ED25519) to the list of known hosts.
executing program
[ 85.245537][ T5102] loop0: detected capacity change from 0 to 64
[ 85.284618][ T5102] ==================================================================
[ 85.287655][ T5102] BUG: KASAN: slab-out-of-bounds in hfs_bnode_read_key+0x314/0x450
[ 85.290615][ T5102] Write of size 94 at addr ffff8880123cd100 by task syz-executor237/5102
[ 85.294724][ T5102]
[ 85.295592][ T5102] CPU: 0 UID: 0 PID: 5102 Comm: syz-executor237 Not tainted 6.11.0-syzkaller-11993-g3efc57369a0c #0
[ 85.299536][ T5102] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 85.303468][ T5102] Call Trace:
[ 85.304757][ T5102]
[ 85.305889][ T5102] dump_stack_lvl+0x241/0x360
[ 85.307637][ T5102] ? __pfx_dump_stack_lvl+0x10/0x10
[ 85.309703][ T5102] ? __pfx__printk+0x10/0x10
[ 85.311710][ T5102] ? _printk+0xd5/0x120
[ 85.313580][ T5102] ? __virt_addr_valid+0x183/0x530
[ 85.315822][ T5102] ? __virt_addr_valid+0x183/0x530
[ 85.318007][ T5102] print_report+0x169/0x550
[ 85.319457][ T5102] ? __virt_addr_valid+0x183/0x530
[ 85.321198][ T5102] ? __virt_addr_valid+0x183/0x530
[ 85.322895][ T5102] ? __virt_addr_valid+0x45f/0x530
[ 85.324587][ T5102] ? __phys_addr+0xba/0x170
[ 85.326054][ T5102] ? hfs_bnode_read_key+0x314/0x450
[ 85.327755][ T5102] kasan_report+0x143/0x180
[ 85.329232][ T5102] ? hfs_bnode_read_key+0x314/0x450
[ 85.331067][ T5102] kasan_check_range+0x282/0x290
[ 85.332842][ T5102] ? hfs_bnode_read_key+0x314/0x450
[ 85.334697][ T5102] __asan_memcpy+0x40/0x70
[ 85.336423][ T5102] hfs_bnode_read_key+0x314/0x450
[ 85.338204][ T5102] hfs_brec_insert+0x7f3/0xbd0
[ 85.339927][ T5102] ? __pfx_hfs_brec_insert+0x10/0x10
[ 85.341854][ T5102] hfs_cat_create+0x41d/0xa50
[ 85.343564][ T5102] ? __pfx_hfs_cat_create+0x10/0x10
[ 85.345510][ T5102] ? _raw_spin_unlock+0x28/0x50
[ 85.347321][ T5102] ? hfs_new_inode+0x86e/0xaf0
[ 85.349108][ T5102] hfs_mkdir+0x6c/0xe0
[ 85.350544][ T5102] vfs_mkdir+0x2f9/0x4f0
[ 85.352099][ T5102] do_mkdirat+0x264/0x3a0
[ 85.353679][ T5102] ? __might_fault+0xaa/0x120
[ 85.355279][ T5102] ? __pfx_do_mkdirat+0x10/0x10
[ 85.356949][ T5102] ? strncpy_from_user+0x131/0x250
[ 85.358742][ T5102] ? getname_flags+0x1e3/0x540
[ 85.360388][ T5102] __x64_sys_mkdir+0x6c/0x80
[ 85.361906][ T5102] do_syscall_64+0xf3/0x230
[ 85.363400][ T5102] ? clear_bhb_loop+0x35/0x90
[ 85.365044][ T5102] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 85.367160][ T5102] RIP: 0033:0x7fbdd6057a99
[ 85.368726][ T5102] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 85.375887][ T5102] RSP: 002b:00007ffe2eb7e0b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[ 85.379098][ T5102] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbdd6057a99
[ 85.382103][ T5102] RDX: 00007fbdd6057a99 RSI: 0000000000000000 RDI: 0000000020000300
[ 85.384991][ T5102] RBP: 00007fbdd60cb5f0 R08: 00005555615064c0 R09: 00005555615064c0
[ 85.388078][ T5102] R10: 00000000000002b3 R11: 0000000000000246 R12: 00007ffe2eb7e0e0
[ 85.391033][ T5102] R13: 00007ffe2eb7e308 R14: 431bde82d7b634db R15: 00007fbdd60a003b
[ 85.394013][ T5102]
[ 85.395158][ T5102]
[ 85.396047][ T5102] Allocated by task 5102:
[ 85.397519][ T5102] kasan_save_track+0x3f/0x80
[ 85.399218][ T5102] __kasan_kmalloc+0x98/0xb0
[ 85.400877][ T5102] __kmalloc_noprof+0x1fc/0x400
[ 85.402479][ T5102] hfs_find_init+0x90/0x1f0
[ 85.404100][ T5102] hfs_cat_create+0x182/0xa50
[ 85.405870][ T5102] hfs_mkdir+0x6c/0xe0
[ 85.407436][ T5102] vfs_mkdir+0x2f9/0x4f0
[ 85.409129][ T5102] do_mkdirat+0x264/0x3a0
[ 85.410807][ T5102] __x64_sys_mkdir+0x6c/0x80
[ 85.412642][ T5102] do_syscall_64+0xf3/0x230
[ 85.414422][ T5102] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 85.416698][ T5102]
[ 85.417604][ T5102] The buggy address belongs to the object at ffff8880123cd100
[ 85.417604][ T5102] which belongs to the cache kmalloc-96 of size 96
[ 85.422295][ T5102] The buggy address is located 0 bytes inside of
[ 85.422295][ T5102] allocated 78-byte region [ffff8880123cd100, ffff8880123cd14e)
[ 85.426523][ T5102]
[ 85.427181][ T5102] The buggy address belongs to the physical page:
[ 85.428939][ T5102] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x123cd
[ 85.431825][ T5102] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 85.434407][ T5102] page_type: f5(slab)
[ 85.435932][ T5102] raw: 00fff00000000000 ffff88801ac41280 ffffea0000498a00 dead000000000004
[ 85.438994][ T5102] raw: 0000000000000000 0000000080200020 00000001f5000000 0000000000000000
[ 85.442231][ T5102] page dumped because: kasan: bad access detected
[ 85.444439][ T5102] page_owner tracks the page as allocated
[ 85.446571][ T5102] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 4576, tgid 4576 (init), ts 31018946504, free_ts 31015095312
[ 85.452955][ T5102] post_alloc_hook+0x1f3/0x230
[ 85.454634][ T5102] get_page_from_freelist+0x3045/0x3190
[ 85.456521][ T5102] __alloc_pages_noprof+0x256/0x6c0
[ 85.458231][ T5102] alloc_pages_mpol_noprof+0x3e8/0x680
[ 85.460093][ T5102] alloc_slab_page+0x6a/0x120
[ 85.461483][ T5102] allocate_slab+0x5a/0x2f0
[ 85.463067][ T5102] ___slab_alloc+0xcd1/0x14b0
[ 85.464546][ T5102] __slab_alloc+0x58/0xa0
[ 85.466081][ T5102] __kmalloc_noprof+0x25a/0x400
[ 85.467779][ T5102] tomoyo_commit_ok+0x29/0x1d0
[ 85.469557][ T5102] tomoyo_assign_domain+0x625/0x840
[ 85.471318][ T5102] tomoyo_find_next_domain+0xe1c/0x1d40
[ 85.473331][ T5102] tomoyo_bprm_check_security+0x114/0x180
[ 85.475476][ T5102] security_bprm_check+0x86/0x250
[ 85.477322][ T5102] bprm_execve+0xa56/0x1770
[ 85.478904][ T5102] do_execveat_common+0x55f/0x6f0
[ 85.480638][ T5102] page last free pid 4575 tgid 4575 stack trace:
[ 85.482486][ T5102] free_unref_folios+0xf12/0x18d0
[ 85.484256][ T5102] folios_put_refs+0x76c/0x860
[ 85.486035][ T5102] free_pages_and_swap_cache+0x5c8/0x690
[ 85.488021][ T5102] tlb_flush_mmu+0x3a3/0x680
[ 85.489774][ T5102] tlb_finish_mmu+0xd4/0x200
[ 85.491343][ T5102] exit_mmap+0x496/0xc40
[ 85.492990][ T5102] __mmput+0x115/0x390
[ 85.494586][ T5102] exit_mm+0x220/0x310
[ 85.496203][ T5102] do_exit+0x9b2/0x28e0
[ 85.497707][ T5102] do_group_exit+0x207/0x2c0
[ 85.499325][ T5102] __x64_sys_exit_group+0x3f/0x40
[ 85.501213][ T5102] x64_sys_call+0x2634/0x2640
[ 85.502970][ T5102] do_syscall_64+0xf3/0x230
[ 85.504507][ T5102] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 85.506606][ T5102]
[ 85.507426][ T5102] Memory state around the buggy address:
[ 85.509381][ T5102] ffff8880123cd000: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc
[ 85.512284][ T5102] ffff8880123cd080: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc
[ 85.515231][ T5102] >ffff8880123cd100: 00 00 00 00 00 00 00 00 00 06 fc fc fc fc fc fc
[ 85.518166][ T5102] ^
[ 85.520420][ T5102] ffff8880123cd180: 00 00 00 00 00 00 00 00 00 00 00 06 fc fc fc fc
[ 85.523133][ T5102] ffff8880123cd200: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc
[ 85.526213][ T5102] ==================================================================
[ 85.802831][ T5102] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 85.805940][ T5102] CPU: 0 UID: 0 PID: 5102 Comm: syz-executor237 Not tainted 6.11.0-syzkaller-11993-g3efc57369a0c #0
[ 85.809941][ T5102] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 85.814089][ T5102] Call Trace:
[ 85.815413][ T5102]
[ 85.816582][ T5102] dump_stack_lvl+0x241/0x360
[ 85.818389][ T5102] ? __pfx_dump_stack_lvl+0x10/0x10
[ 85.820426][ T5102] ? __pfx__printk+0x10/0x10
[ 85.822156][ T5102] ? preempt_schedule+0xe1/0xf0
[ 85.824022][ T5102] ? vscnprintf+0x5d/0x90
[ 85.825717][ T5102] panic+0x349/0x880
[ 85.827259][ T5102] ? check_panic_on_warn+0x21/0xb0
[ 85.829265][ T5102] ? __pfx_panic+0x10/0x10
[ 85.830970][ T5102] ? _raw_spin_unlock_irqrestore+0x130/0x140
[ 85.833351][ T5102] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 85.835761][ T5102] ? print_report+0x502/0x550
[ 85.837648][ T5102] check_panic_on_warn+0x86/0xb0
[ 85.839591][ T5102] ? hfs_bnode_read_key+0x314/0x450
[ 85.841573][ T5102] end_report+0x77/0x160
[ 85.843210][ T5102] kasan_report+0x154/0x180
[ 85.844994][ T5102] ? hfs_bnode_read_key+0x314/0x450
[ 85.846910][ T5102] kasan_check_range+0x282/0x290
[ 85.848662][ T5102] ? hfs_bnode_read_key+0x314/0x450
[ 85.850489][ T5102] __asan_memcpy+0x40/0x70
[ 85.852096][ T5102] hfs_bnode_read_key+0x314/0x450
[ 85.853855][ T5102] hfs_brec_insert+0x7f3/0xbd0
[ 85.855540][ T5102] ? __pfx_hfs_brec_insert+0x10/0x10
[ 85.857418][ T5102] hfs_cat_create+0x41d/0xa50
[ 85.859057][ T5102] ? __pfx_hfs_cat_create+0x10/0x10
[ 85.860894][ T5102] ? _raw_spin_unlock+0x28/0x50
[ 85.862648][ T5102] ? hfs_new_inode+0x86e/0xaf0
[ 85.864499][ T5102] hfs_mkdir+0x6c/0xe0
[ 85.866001][ T5102] vfs_mkdir+0x2f9/0x4f0
[ 85.867671][ T5102] do_mkdirat+0x264/0x3a0
[ 85.869366][ T5102] ? __might_fault+0xaa/0x120
[ 85.871066][ T5102] ? __pfx_do_mkdirat+0x10/0x10
[ 85.872827][ T5102] ? strncpy_from_user+0x131/0x250
[ 85.874649][ T5102] ? getname_flags+0x1e3/0x540
[ 85.876335][ T5102] __x64_sys_mkdir+0x6c/0x80
[ 85.877943][ T5102] do_syscall_64+0xf3/0x230
[ 85.879584][ T5102] ? clear_bhb_loop+0x35/0x90
[ 85.881303][ T5102] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 85.883610][ T5102] RIP: 0033:0x7fbdd6057a99
[ 85.885293][ T5102] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 85.892507][ T5102] RSP: 002b:00007ffe2eb7e0b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[ 85.895529][ T5102] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbdd6057a99
[ 85.898566][ T5102] RDX: 00007fbdd6057a99 RSI: 0000000000000000 RDI: 0000000020000300
[ 85.901695][ T5102] RBP: 00007fbdd60cb5f0 R08: 00005555615064c0 R09: 00005555615064c0
[ 85.904891][ T5102] R10: 00000000000002b3 R11: 0000000000000246 R12: 00007ffe2eb7e0e0
[ 85.907889][ T5102] R13: 00007ffe2eb7e308 R14: 431bde82d7b634db R15: 00007fbdd60a003b
[ 85.910971][ T5102]
[ 85.912494][ T5102] Kernel Offset: disabled
[ 85.914190][ T5102] Rebooting in 86400 seconds..
VM DIAGNOSIS:
16:22:21 Registers:
info registers vcpu 0
CPU#0
RAX=0000000000000066 RBX=ffffffff9a711e40 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=0000000000000000 RSP=ffffc90002ddf150
R8 =ffffffff8549649b R9 =1ffff11003d4f046 R10=dffffc0000000000 R11=ffffffff85496450
R12=dffffc0000000000 R13=ffffffff9a40ceff R14=0000000000000066 R15=00000000000003f8
RIP=ffffffff854964ce RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555561505380 ffffffff 00c00000
GS =0000 ffff88801fc00000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007f74a3638000 CR3=000000003d250000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000ffffffff Opmask01=0000000000000006 Opmask02=0000000000000007 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0073657479625f65 6369767265735f6f
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe2eb7d6b0 00007ffe2eb7d690
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe2eb7d7f0 00007ffe2eb7d670
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbdd60bc544 00007fbdd60d0240
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe2eb7d6b0
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe2eb7d7f0
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe2eb7d7f0 00007ffe2eb7d670
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe2eb7d6b0 00007ffe2eb7d690
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000736668
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000