================================================================== BUG: KFENCE: memory corruption in krealloc_noprof+0x160/0x2e0 Corrupted memory at 0xffff88823bfea24b [ 0x04 0x30 0x66 0x69 0x6c 0x65 0x37 0x07 0x00 0x00 0x16 0x8b 0x00 0x00 0x00 0x00 ] (in kfence-#244): krealloc_noprof+0x160/0x2e0 xfs_idata_realloc+0x116/0x1b0 fs/xfs/libxfs/xfs_inode_fork.c:523 xfs_dir2_sf_to_block+0x391/0x1ab0 fs/xfs/libxfs/xfs_dir2_block.c:1122 xfs_dir2_sf_addname+0x7b0/0x1b60 fs/xfs/libxfs/xfs_dir2_sf.c:418 xfs_dir_createname_args+0x152/0x200 fs/xfs/libxfs/xfs_dir2.c:308 xfs_dir_createname+0x4b3/0x640 fs/xfs/libxfs/xfs_dir2.c:361 xfs_dir_create_child+0xe3/0x490 fs/xfs/libxfs/xfs_dir2.c:860 xfs_create+0x8cc/0xf60 fs/xfs/xfs_inode.c:722 xfs_generic_create+0x5d5/0xf50 fs/xfs/xfs_iops.c:213 lookup_open fs/namei.c:3595 [inline] open_last_lookups fs/namei.c:3694 [inline] path_openat+0x1c03/0x3590 fs/namei.c:3930 do_filp_open+0x235/0x490 fs/namei.c:3960 do_sys_openat2+0x13e/0x1d0 fs/open.c:1415 do_sys_open fs/open.c:1430 [inline] __do_sys_openat fs/open.c:1446 [inline] __se_sys_openat fs/open.c:1441 [inline] __x64_sys_openat+0x247/0x2a0 fs/open.c:1441 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f kfence-#244: 0xffff88823bfea000-0xffff88823bfea24a, size=587, cache=kmalloc-1k allocated by task 5849 on cpu 0 at 194.926022s (0.379539s ago): __do_krealloc mm/slub.c:4784 [inline] krealloc_noprof+0xd6/0x2e0 mm/slub.c:4838 xfs_idata_realloc+0x116/0x1b0 fs/xfs/libxfs/xfs_inode_fork.c:523 xfs_dir2_sf_addname_easy fs/xfs/libxfs/xfs_dir2_sf.c:469 [inline] xfs_dir2_sf_addname+0x899/0x1b60 fs/xfs/libxfs/xfs_dir2_sf.c:432 xfs_dir_createname_args+0x152/0x200 fs/xfs/libxfs/xfs_dir2.c:308 xfs_dir_createname+0x4b3/0x640 fs/xfs/libxfs/xfs_dir2.c:361 xfs_dir_rename_children+0x3f8/0xb20 fs/xfs/libxfs/xfs_dir2.c:1269 xfs_rename+0x172d/0x1e80 fs/xfs/xfs_inode.c:2298 xfs_vn_rename+0x388/0x4e0 fs/xfs/xfs_iops.c:498 vfs_rename+0xbdb/0xf00 fs/namei.c:5013 do_renameat2+0xd94/0x13f0 fs/namei.c:5170 __do_sys_rename fs/namei.c:5217 [inline] __se_sys_rename fs/namei.c:5215 [inline] __x64_sys_rename+0x82/0x90 fs/namei.c:5215 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f freed by task 5849 on cpu 0 at 195.168559s (0.211843s ago): krealloc_noprof+0x160/0x2e0 xfs_idata_realloc+0x116/0x1b0 fs/xfs/libxfs/xfs_inode_fork.c:523 xfs_dir2_sf_to_block+0x391/0x1ab0 fs/xfs/libxfs/xfs_dir2_block.c:1122 xfs_dir2_sf_addname+0x7b0/0x1b60 fs/xfs/libxfs/xfs_dir2_sf.c:418 xfs_dir_createname_args+0x152/0x200 fs/xfs/libxfs/xfs_dir2.c:308 xfs_dir_createname+0x4b3/0x640 fs/xfs/libxfs/xfs_dir2.c:361 xfs_dir_create_child+0xe3/0x490 fs/xfs/libxfs/xfs_dir2.c:860 xfs_create+0x8cc/0xf60 fs/xfs/xfs_inode.c:722 xfs_generic_create+0x5d5/0xf50 fs/xfs/xfs_iops.c:213 lookup_open fs/namei.c:3595 [inline] open_last_lookups fs/namei.c:3694 [inline] path_openat+0x1c03/0x3590 fs/namei.c:3930 do_filp_open+0x235/0x490 fs/namei.c:3960 do_sys_openat2+0x13e/0x1d0 fs/open.c:1415 do_sys_open fs/open.c:1430 [inline] __do_sys_openat fs/open.c:1446 [inline] __se_sys_openat fs/open.c:1441 [inline] __x64_sys_openat+0x247/0x2a0 fs/open.c:1441 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f CPU: 0 UID: 0 PID: 5849 Comm: syz.1.51 Not tainted 6.12.0-rc1-next-20241003-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 ==================================================================