Warning: Permanently added '10.128.0.21' (ED25519) to the list of known hosts.
executing program
[ 52.383122][ T3539] loop0: detected capacity change from 0 to 64
[ 52.393439][ T3539] hfs: unable to locate alternate MDB
[ 52.399397][ T3539] hfs: continuing without an alternate MDB
[ 52.412900][ T3539] ==================================================================
[ 52.421633][ T3539] BUG: KASAN: slab-out-of-bounds in hfs_bnode_read_key+0x310/0x440
[ 52.429825][ T3539] Write of size 256 at addr ffff888016ec7c00 by task syz-executor246/3539
[ 52.438414][ T3539]
[ 52.440735][ T3539] CPU: 0 PID: 3539 Comm: syz-executor246 Not tainted 6.1.42-syzkaller #0
[ 52.449401][ T3539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023
[ 52.459673][ T3539] Call Trace:
[ 52.463065][ T3539]
[ 52.465996][ T3539] dump_stack_lvl+0x1e3/0x2cb
[ 52.470727][ T3539] ? irq_work_queue+0xc6/0x150
[ 52.475666][ T3539] ? nf_tcp_handle_invalid+0x642/0x642
[ 52.481304][ T3539] ? panic+0x75d/0x75d
[ 52.490421][ T3539] ? _printk+0xd1/0x111
[ 52.494797][ T3539] ? _raw_spin_lock_irqsave+0xac/0x120
[ 52.500291][ T3539] print_report+0x15f/0x4f0
[ 52.504982][ T3539] ? __virt_addr_valid+0x22b/0x2e0
[ 52.510299][ T3539] ? __phys_addr+0xb6/0x170
[ 52.514926][ T3539] ? hfs_bnode_read_key+0x310/0x440
[ 52.520310][ T3539] kasan_report+0x136/0x160
[ 52.524907][ T3539] ? hfs_bnode_read_key+0x310/0x440
[ 52.530107][ T3539] kasan_check_range+0x27f/0x290
[ 52.535733][ T3539] ? hfs_bnode_read_key+0x310/0x440
[ 52.540932][ T3539] memcpy+0x3c/0x60
[ 52.544920][ T3539] hfs_bnode_read_key+0x310/0x440
[ 52.550283][ T3539] hfs_brec_insert+0x69d/0xbd0
[ 52.555150][ T3539] ? hfs_brec_keylen+0x350/0x350
[ 52.560269][ T3539] ? memset+0x1f/0x40
[ 52.564420][ T3539] ? hfs_cat_build_record+0x242/0x800
[ 52.570004][ T3539] hfs_cat_create+0x5db/0xa60
[ 52.574799][ T3539] ? hfs_cat_build_key+0x170/0x170
[ 52.579936][ T3539] ? _raw_spin_unlock+0x24/0x40
[ 52.585061][ T3539] ? hfs_new_inode+0x88a/0xac0
[ 52.590096][ T3539] hfs_create+0x62/0xd0
[ 52.594694][ T3539] ? hfs_lookup+0x2e0/0x2e0
[ 52.599538][ T3539] path_openat+0x12f1/0x2e60
[ 52.604133][ T3539] ? do_filp_open+0x480/0x480
[ 52.608812][ T3539] do_filp_open+0x230/0x480
[ 52.613315][ T3539] ? vfs_tmpfile+0x4a0/0x4a0
[ 52.617913][ T3539] ? _raw_spin_unlock+0x24/0x40
[ 52.622770][ T3539] ? alloc_fd+0x59c/0x640
[ 52.627103][ T3539] do_sys_openat2+0x13b/0x500
[ 52.631790][ T3539] ? do_sys_open+0x220/0x220
[ 52.636401][ T3539] ? task_work_run+0x2bc/0x300
[ 52.641176][ T3539] __x64_sys_openat+0x243/0x290
[ 52.646027][ T3539] ? __ia32_sys_open+0x270/0x270
[ 52.650998][ T3539] ? syscall_enter_from_user_mode+0x2e/0x220
[ 52.657055][ T3539] ? lockdep_hardirqs_on+0x94/0x130
[ 52.662264][ T3539] ? syscall_enter_from_user_mode+0x2e/0x220
[ 52.668347][ T3539] do_syscall_64+0x3d/0xb0
[ 52.672856][ T3539] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 52.678758][ T3539] RIP: 0033:0x7fe09674e979
[ 52.683761][ T3539] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 52.704647][ T3539] RSP: 002b:00007ffe8cf3ed48 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 52.713852][ T3539] RAX: ffffffffffffffda RBX: 00007fe09679705e RCX: 00007fe09674e979
[ 52.722692][ T3539] RDX: 0000000000141842 RSI: 0000000020000380 RDI: 00000000ffffff9c
[ 52.730707][ T3539] RBP: 00007fe096797068 R08: 0000000000000260 R09: 0000000000000000
[ 52.738693][ T3539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 52.746659][ T3539] R13: 00007ffe8cf3ef28 R14: 0000000000000001 R15: 0000000000000001
[ 52.754911][ T3539]
[ 52.757939][ T3539]
[ 52.760335][ T3539] Allocated by task 3539:
[ 52.764673][ T3539] kasan_set_track+0x4b/0x70
[ 52.769455][ T3539] __kasan_kmalloc+0x97/0xb0
[ 52.774129][ T3539] __kmalloc+0xb2/0x230
[ 52.778368][ T3539] hfs_find_init+0x8c/0x1e0
[ 52.782953][ T3539] hfs_cat_create+0x17e/0xa60
[ 52.787731][ T3539] hfs_create+0x62/0xd0
[ 52.791981][ T3539] path_openat+0x12f1/0x2e60
[ 52.796679][ T3539] do_filp_open+0x230/0x480
[ 52.801263][ T3539] do_sys_openat2+0x13b/0x500
[ 52.805940][ T3539] __x64_sys_openat+0x243/0x290
[ 52.810911][ T3539] do_syscall_64+0x3d/0xb0
[ 52.815671][ T3539] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 52.821732][ T3539]
[ 52.824052][ T3539] The buggy address belongs to the object at ffff888016ec7c00
[ 52.824052][ T3539] which belongs to the cache kmalloc-96 of size 96
[ 52.839158][ T3539] The buggy address is located 0 bytes inside of
[ 52.839158][ T3539] 96-byte region [ffff888016ec7c00, ffff888016ec7c60)
[ 52.858609][ T3539]
[ 52.860998][ T3539] The buggy address belongs to the physical page:
[ 52.867706][ T3539] page:ffffea00005bb1c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x16ec7
[ 52.877853][ T3539] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 52.885438][ T3539] raw: 00fff00000000200 ffffea00009d78c0 dead000000000002 ffff888012441780
[ 52.895331][ T3539] raw: 0000000000000000 0000000080200020 00000001ffffffff 0000000000000000
[ 52.903943][ T3539] page dumped because: kasan: bad access detected
[ 52.910371][ T3539] page_owner tracks the page as allocated
[ 52.916719][ T3539] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY), pid 3004, tgid 3004 (udevd), ts 17510288020, free_ts 17503128609
[ 52.935415][ T3539] post_alloc_hook+0x18d/0x1b0
[ 52.940191][ T3539] get_page_from_freelist+0x32ed/0x3480
[ 52.945840][ T3539] __alloc_pages+0x28d/0x770
[ 52.950533][ T3539] alloc_slab_page+0x6a/0x150
[ 52.955301][ T3539] new_slab+0x84/0x2d0
[ 52.959471][ T3539] ___slab_alloc+0xa71/0x1080
[ 52.964242][ T3539] __kmem_cache_alloc_node+0x19f/0x260
[ 52.969715][ T3539] __kmalloc+0xa1/0x230
[ 52.973861][ T3539] tomoyo_encode+0x26b/0x530
[ 52.978543][ T3539] tomoyo_realpath_from_path+0x594/0x5d0
[ 52.984279][ T3539] tomoyo_check_open_permission+0x22c/0x490
[ 52.990258][ T3539] security_file_open+0x5f/0xa0
[ 52.995104][ T3539] do_dentry_open+0x308/0x10f0
[ 52.999866][ T3539] path_openat+0x2644/0x2e60
[ 53.004466][ T3539] do_filp_open+0x230/0x480
[ 53.008984][ T3539] do_sys_openat2+0x13b/0x500
[ 53.013660][ T3539] page last free stack trace:
[ 53.018327][ T3539] free_unref_page_prepare+0xf63/0x1120
[ 53.023942][ T3539] free_unref_page+0x98/0x570
[ 53.028620][ T3539] qlist_free_all+0x22/0x60
[ 53.033202][ T3539] kasan_quarantine_reduce+0x162/0x180
[ 53.038648][ T3539] __kasan_slab_alloc+0x1f/0x70
[ 53.043487][ T3539] slab_post_alloc_hook+0x50/0x370
[ 53.048588][ T3539] kmem_cache_alloc+0x10c/0x2d0
[ 53.053432][ T3539] getname_flags+0xb8/0x4e0
[ 53.057925][ T3539] __x64_sys_newfstatat+0x130/0x1e0
[ 53.063120][ T3539] do_syscall_64+0x3d/0xb0
[ 53.067541][ T3539] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 53.073430][ T3539]
[ 53.075740][ T3539] Memory state around the buggy address:
[ 53.081444][ T3539] ffff888016ec7b00: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc
[ 53.089494][ T3539] ffff888016ec7b80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[ 53.097546][ T3539] >ffff888016ec7c00: 00 00 00 00 00 00 00 00 00 06 fc fc fc fc fc fc
[ 53.105592][ T3539] ^
[ 53.112082][ T3539] ffff888016ec7c80: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc
[ 53.120401][ T3539] ffff888016ec7d00: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc
[ 53.129755][ T3539] ==================================================================
[ 53.149523][ T3539] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 53.157714][ T3539] CPU: 0 PID: 3539 Comm: syz-executor246 Not tainted 6.1.42-syzkaller #0
[ 53.166120][ T3539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023
[ 53.176694][ T3539] Call Trace:
[ 53.180406][ T3539]
[ 53.183425][ T3539] dump_stack_lvl+0x1e3/0x2cb
[ 53.188200][ T3539] ? nf_tcp_handle_invalid+0x642/0x642
[ 53.193922][ T3539] ? panic+0x75d/0x75d
[ 53.198083][ T3539] ? preempt_schedule_common+0xa6/0xd0
[ 53.207111][ T3539] ? vscnprintf+0x59/0x80
[ 53.216389][ T3539] panic+0x318/0x75d
[ 53.220282][ T3539] ? check_panic_on_warn+0x1d/0xa0
[ 53.225510][ T3539] ? memcpy_page_flushcache+0xfc/0xfc
[ 53.230885][ T3539] ? _raw_spin_unlock_irqrestore+0x128/0x130
[ 53.236859][ T3539] ? _raw_spin_unlock+0x40/0x40
[ 53.241705][ T3539] ? print_report+0x4a3/0x4f0
[ 53.246375][ T3539] check_panic_on_warn+0x7e/0xa0
[ 53.251405][ T3539] ? hfs_bnode_read_key+0x310/0x440
[ 53.256704][ T3539] end_report+0x66/0x110
[ 53.260936][ T3539] kasan_report+0x143/0x160
[ 53.265451][ T3539] ? hfs_bnode_read_key+0x310/0x440
[ 53.270648][ T3539] kasan_check_range+0x27f/0x290
[ 53.275573][ T3539] ? hfs_bnode_read_key+0x310/0x440
[ 53.280862][ T3539] memcpy+0x3c/0x60
[ 53.284664][ T3539] hfs_bnode_read_key+0x310/0x440
[ 53.289688][ T3539] hfs_brec_insert+0x69d/0xbd0
[ 53.294452][ T3539] ? hfs_brec_keylen+0x350/0x350
[ 53.299393][ T3539] ? memset+0x1f/0x40
[ 53.303472][ T3539] ? hfs_cat_build_record+0x242/0x800
[ 53.308849][ T3539] hfs_cat_create+0x5db/0xa60
[ 53.313618][ T3539] ? hfs_cat_build_key+0x170/0x170
[ 53.318741][ T3539] ? _raw_spin_unlock+0x24/0x40
[ 53.323594][ T3539] ? hfs_new_inode+0x88a/0xac0
[ 53.328376][ T3539] hfs_create+0x62/0xd0
[ 53.332538][ T3539] ? hfs_lookup+0x2e0/0x2e0
[ 53.337044][ T3539] path_openat+0x12f1/0x2e60
[ 53.341641][ T3539] ? do_filp_open+0x480/0x480
[ 53.346318][ T3539] do_filp_open+0x230/0x480
[ 53.350820][ T3539] ? vfs_tmpfile+0x4a0/0x4a0
[ 53.355458][ T3539] ? _raw_spin_unlock+0x24/0x40
[ 53.360389][ T3539] ? alloc_fd+0x59c/0x640
[ 53.364714][ T3539] do_sys_openat2+0x13b/0x500
[ 53.369390][ T3539] ? do_sys_open+0x220/0x220
[ 53.373995][ T3539] ? task_work_run+0x2bc/0x300
[ 53.378771][ T3539] __x64_sys_openat+0x243/0x290
[ 53.383646][ T3539] ? __ia32_sys_open+0x270/0x270
[ 53.388607][ T3539] ? syscall_enter_from_user_mode+0x2e/0x220
[ 53.394708][ T3539] ? lockdep_hardirqs_on+0x94/0x130
[ 53.400376][ T3539] ? syscall_enter_from_user_mode+0x2e/0x220
[ 53.406393][ T3539] do_syscall_64+0x3d/0xb0
[ 53.411602][ T3539] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 53.418628][ T3539] RIP: 0033:0x7fe09674e979
[ 53.425078][ T3539] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 53.446003][ T3539] RSP: 002b:00007ffe8cf3ed48 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 53.454596][ T3539] RAX: ffffffffffffffda RBX: 00007fe09679705e RCX: 00007fe09674e979
[ 53.462733][ T3539] RDX: 0000000000141842 RSI: 0000000020000380 RDI: 00000000ffffff9c
[ 53.470692][ T3539] RBP: 00007fe096797068 R08: 0000000000000260 R09: 0000000000000000
[ 53.478660][ T3539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 53.486708][ T3539] R13: 00007ffe8cf3ef28 R14: 0000000000000001 R15: 0000000000000001
[ 53.494760][ T3539]
[ 53.498066][ T3539] Kernel Offset: disabled
[ 53.502393][ T3539] Rebooting in 86400 seconds..