Warning: Permanently added '10.128.1.30' (ED25519) to the list of known hosts. 2023/12/31 15:42:59 ignoring optional flag "sandboxArg"="0" 2023/12/31 15:42:59 parsed 1 programs 2023/12/31 15:43:01 executed programs: 0 [ 53.684292][ T1436] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 58.349448][ T1862] loop0: detected capacity change from 0 to 64 [ 58.356644][ T1862] hfs: unable to locate alternate MDB [ 58.362073][ T1862] hfs: continuing without an alternate MDB [ 58.369844][ T1862] ================================================================== [ 58.378019][ T1862] BUG: KASAN: slab-out-of-bounds in hfs_bnode_read_key+0x1c8/0x3d0 [ 58.386098][ T1862] Write of size 256 at addr ffff8881016f2280 by task syz-executor.0/1862 [ 58.394749][ T1862] [ 58.397110][ T1862] CPU: 0 PID: 1862 Comm: syz-executor.0 Not tainted 6.1.69-syzkaller #0 [ 58.405507][ T1862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 58.415716][ T1862] Call Trace: [ 58.418976][ T1862] [ 58.421895][ T1862] dump_stack_lvl+0xf4/0x251 [ 58.426468][ T1862] ? nf_tcp_handle_invalid+0x2f3/0x2f3 [ 58.431904][ T1862] ? panic+0x3f7/0x3f7 [ 58.435946][ T1862] ? _printk+0xca/0x10a [ 58.440077][ T1862] print_report+0x15f/0x4f0 [ 58.444558][ T1862] ? hfs_bnode_read_key+0x1c8/0x3d0 [ 58.449738][ T1862] kasan_report+0x136/0x160 [ 58.454214][ T1862] ? hfs_bnode_read_key+0x1c8/0x3d0 [ 58.459381][ T1862] kasan_check_range+0x27f/0x290 [ 58.464289][ T1862] ? hfs_bnode_read_key+0x1c8/0x3d0 [ 58.469457][ T1862] memcpy+0x3c/0x60 [ 58.473326][ T1862] hfs_bnode_read_key+0x1c8/0x3d0 [ 58.478501][ T1862] hfs_brec_insert+0x65a/0xc90 [ 58.483233][ T1862] ? do_raw_spin_unlock+0x137/0x8a0 [ 58.488401][ T1862] ? hfs_brec_keylen+0x2b0/0x2b0 [ 58.493315][ T1862] ? memset+0x1f/0x40 [ 58.497267][ T1862] ? hfs_cat_build_record+0x5b/0x7c0 [ 58.502641][ T1862] hfs_cat_create+0x52a/0x8b0 [ 58.507374][ T1862] ? hfs_cat_build_key+0x160/0x160 [ 58.512460][ T1862] ? _raw_spin_unlock+0x24/0x40 [ 58.517291][ T1862] ? hfs_new_inode+0x7b8/0x9d0 [ 58.522031][ T1862] hfs_create+0x5b/0xb0 [ 58.526187][ T1862] ? hfs_lookup+0x2a0/0x2a0 [ 58.530662][ T1862] path_openat+0xf0c/0x27d0 [ 58.535140][ T1862] ? do_filp_open+0x430/0x430 [ 58.539788][ T1862] do_filp_open+0x226/0x430 [ 58.544265][ T1862] ? vfs_tmpfile+0x410/0x410 [ 58.548914][ T1862] ? _raw_spin_unlock+0x24/0x40 [ 58.553825][ T1862] ? alloc_fd+0x3dc/0x470 [ 58.558128][ T1862] do_sys_openat2+0x10b/0x420 [ 58.562867][ T1862] ? rcu_is_watching+0x1b/0x90 [ 58.567605][ T1862] ? do_sys_open+0x1c0/0x1c0 [ 58.572600][ T1862] ? __rseq_handle_notify_resume+0x827/0xdf0 [ 58.578767][ T1862] ? xfd_validate_state+0x12/0x50 [ 58.583875][ T1862] __x64_sys_openat+0x209/0x250 [ 58.588976][ T1862] ? __ia32_sys_open+0x230/0x230 [ 58.593987][ T1862] ? switch_fpu_return+0xc9/0x130 [ 58.598992][ T1862] do_syscall_64+0x3d/0x80 [ 58.603480][ T1862] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 58.609694][ T1862] RIP: 0033:0x7fd79967cb29 [ 58.614169][ T1862] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 58.634155][ T1862] RSP: 002b:00007fd79a3980c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 58.642560][ T1862] RAX: ffffffffffffffda RBX: 00007fd79979bf80 RCX: 00007fd79967cb29 [ 58.650518][ T1862] RDX: 0000000000141842 RSI: 0000000020000380 RDI: ffffffffffffff9c [ 58.658465][ T1862] RBP: 00007fd7996c847a R08: 0000000000000000 R09: 0000000000000000 [ 58.666411][ T1862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.674380][ T1862] R13: 0000000000000006 R14: 00007fd79979bf80 R15: 00007ffd1a8482d8 [ 58.682421][ T1862] [ 58.685473][ T1862] [ 58.688033][ T1862] Allocated by task 1862: [ 58.692332][ T1862] kasan_set_track+0x4b/0x70 [ 58.696993][ T1862] __kasan_kmalloc+0x97/0xb0 [ 58.701751][ T1862] __kmalloc+0xa6/0x1c0 [ 58.705981][ T1862] hfs_find_init+0x86/0x1b0 [ 58.710579][ T1862] hfs_cat_create+0x165/0x8b0 [ 58.715250][ T1862] hfs_create+0x5b/0xb0 [ 58.719476][ T1862] path_openat+0xf0c/0x27d0 [ 58.724137][ T1862] do_filp_open+0x226/0x430 [ 58.728974][ T1862] do_sys_openat2+0x10b/0x420 [ 58.733628][ T1862] __x64_sys_openat+0x209/0x250 [ 58.738546][ T1862] do_syscall_64+0x3d/0x80 [ 58.742933][ T1862] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 58.749059][ T1862] [ 58.751724][ T1862] The buggy address belongs to the object at ffff8881016f2280 [ 58.751724][ T1862] which belongs to the cache kmalloc-96 of size 96 [ 58.765850][ T1862] The buggy address is located 0 bytes inside of [ 58.765850][ T1862] 96-byte region [ffff8881016f2280, ffff8881016f22e0) [ 58.779198][ T1862] [ 58.781506][ T1862] The buggy address belongs to the physical page: [ 58.787891][ T1862] page:ffffea000405bc80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1016f2 [ 58.798360][ T1862] flags: 0x100000000000200(slab|node=0|zone=2) [ 58.804489][ T1862] raw: 0100000000000200 dead000000000100 dead000000000122 ffff888100041780 [ 58.813055][ T1862] raw: 0000000000000000 0000000080200020 00000001ffffffff 0000000000000000 [ 58.821781][ T1862] page dumped because: kasan: bad access detected [ 58.828252][ T1862] page_owner tracks the page as allocated [ 58.839000][ T1862] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, tgid 1 (swapper/0), ts 2912984928, free_ts 0 [ 58.855812][ T1862] post_alloc_hook+0x286/0x2b0 [ 58.860647][ T1862] get_page_from_freelist+0x398c/0x3b60 [ 58.866163][ T1862] __alloc_pages+0x251/0x640 [ 58.870820][ T1862] alloc_page_interleave+0xf/0x120 [ 58.876280][ T1862] alloc_slab_page+0x6a/0x150 [ 58.880926][ T1862] new_slab+0x70/0x250 [ 58.885013][ T1862] ___slab_alloc+0x9df/0xe70 [ 58.889753][ T1862] __kmem_cache_alloc_node+0x195/0x250 [ 58.895277][ T1862] kmalloc_trace+0x26/0xc0 [ 58.900009][ T1862] acpi_ut_evaluate_object+0xf3/0x3e0 [ 58.905444][ T1862] acpi_rs_get_method_data+0xa4/0x130 [ 58.910878][ T1862] acpi_walk_resources+0x13f/0x540 [ 58.915990][ T1862] pnpacpi_parse_allocated_resource+0x8d/0x100 [ 58.922634][ T1862] pnpacpi_add_device+0x355/0x700 [ 58.927629][ T1862] pnpacpi_add_device_handler+0x25/0x31 [ 58.933144][ T1862] acpi_ns_get_device_callback+0x43e/0x4a0 [ 58.939095][ T1862] page_owner free stack trace missing [ 58.944433][ T1862] [ 58.946729][ T1862] Memory state around the buggy address: [ 58.952330][ T1862] ffff8881016f2180: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 58.960537][ T1862] ffff8881016f2200: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 58.968851][ T1862] >ffff8881016f2280: 00 00 00 00 00 00 00 00 00 06 fc fc fc fc fc fc [ 58.977082][ T1862] ^ [ 58.983554][ T1862] ffff8881016f2300: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 58.991862][ T1862] ffff8881016f2380: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 58.999989][ T1862] ================================================================== [ 59.008405][ T1862] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 59.016390][ T1862] Kernel Offset: disabled [ 59.020803][ T1862] Rebooting in 86400 seconds..