Warning: Permanently added '10.128.10.20' (ED25519) to the list of known hosts. executing program [ 38.624692][ T4016] loop0: detected capacity change from 0 to 1024 [ 38.750837][ T4015] ================================================================== [ 38.752629][ T4015] BUG: KASAN: slab-out-of-bounds in hfsplus_uni2asc+0x624/0x1018 [ 38.754221][ T4015] Read of size 2 at addr ffff0000c943a40c by task syz-executor365/4015 [ 38.755915][ T4015] [ 38.756433][ T4015] CPU: 0 PID: 4015 Comm: syz-executor365 Not tainted 5.15.167-syzkaller #0 [ 38.758215][ T4015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 38.760227][ T4015] Call trace: [ 38.760911][ T4015] dump_backtrace+0x0/0x530 [ 38.761870][ T4015] show_stack+0x2c/0x3c [ 38.762786][ T4015] dump_stack_lvl+0x108/0x170 [ 38.763771][ T4015] print_address_description+0x7c/0x3f0 [ 38.764903][ T4015] kasan_report+0x174/0x1e4 [ 38.765811][ T4015] __asan_report_load2_noabort+0x44/0x50 [ 38.766982][ T4015] hfsplus_uni2asc+0x624/0x1018 [ 38.767975][ T4015] hfsplus_readdir+0x79c/0xf68 [ 38.768941][ T4015] iterate_dir+0x1f4/0x4ec [ 38.769866][ T4015] __arm64_sys_getdents64+0x1c4/0x4c4 [ 38.770974][ T4015] invoke_syscall+0x98/0x2b8 [ 38.771922][ T4015] el0_svc_common+0x138/0x258 [ 38.772791][ T4015] do_el0_svc+0x58/0x14c [ 38.773647][ T4015] el0_svc+0x7c/0x1f0 [ 38.774456][ T4015] el0t_64_sync_handler+0x84/0xe4 [ 38.775478][ T4015] el0t_64_sync+0x1a0/0x1a4 [ 38.776386][ T4015] [ 38.776901][ T4015] Allocated by task 4015: [ 38.777767][ T4015] ____kasan_kmalloc+0xbc/0xfc [ 38.778761][ T4015] __kasan_kmalloc+0x10/0x1c [ 38.779705][ T4015] __kmalloc+0x29c/0x4c8 [ 38.780603][ T4015] hfsplus_find_init+0x84/0x1bc [ 38.781546][ T4015] hfsplus_readdir+0x1c8/0xf68 [ 38.782465][ T4015] iterate_dir+0x1f4/0x4ec [ 38.783353][ T4015] __arm64_sys_getdents64+0x1c4/0x4c4 [ 38.784458][ T4015] invoke_syscall+0x98/0x2b8 [ 38.785416][ T4015] el0_svc_common+0x138/0x258 [ 38.786363][ T4015] do_el0_svc+0x58/0x14c [ 38.787224][ T4015] el0_svc+0x7c/0x1f0 [ 38.788024][ T4015] el0t_64_sync_handler+0x84/0xe4 [ 38.789085][ T4015] el0t_64_sync+0x1a0/0x1a4 [ 38.790031][ T4015] [ 38.790525][ T4015] The buggy address belongs to the object at ffff0000c943a000 [ 38.790525][ T4015] which belongs to the cache kmalloc-2k of size 2048 [ 38.793422][ T4015] The buggy address is located 1036 bytes inside of [ 38.793422][ T4015] 2048-byte region [ffff0000c943a000, ffff0000c943a800) [ 38.796173][ T4015] The buggy address belongs to the page: [ 38.797266][ T4015] page:000000007073578c refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x109438 [ 38.799434][ T4015] head:000000007073578c order:3 compound_mapcount:0 compound_pincount:0 [ 38.801130][ T4015] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 38.802797][ T4015] raw: 05ffc00000010200 0000000000000000 dead000000000122 ffff0000c0002900 [ 38.804559][ T4015] raw: 0000000000000000 0000000080080008 00000001ffffffff 0000000000000000 [ 38.806283][ T4015] page dumped because: kasan: bad access detected [ 38.807541][ T4015] [ 38.808007][ T4015] Memory state around the buggy address: [ 38.809177][ T4015] ffff0000c943a300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 38.810813][ T4015] ffff0000c943a380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 38.812434][ T4015] >ffff0000c943a400: 00 04 fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 38.814070][ T4015] ^ [ 38.815001][ T4015] ffff0000c943a480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 38.816863][ T4015] ffff0000c943a500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 38.818501][ T4015] ================================================================== [ 38.820121][ T4015] Disabling lock debugging due to kernel taint executing program [ 38.875299][ T4018] loop0: detected capacity change from 0 to 1024 executing program [ 39.032813][ T4020] loop0: detected capacity change from 0 to 1024 executing program [ 39.084487][ T4021] loop0: detected capacity change from 0 to 1024 executing program [ 39.243265][ T4022] loop0: detected capacity change from 0 to 1024 executing program [ 39.303751][ T4023] loop0: detected capacity change from 0 to 1024 executing program [ 39.471187][ T4024] loop0: detected capacity change from 0 to 1024 executing program [ 39.523748][ T4025] loop0: detected capacity change from 0 to 1024 executing program [ 39.693047][ T4026] loop0: detected capacity change from 0 to 1024 executing program [ 39.744114][ T4027] loop0: detected capacity change from 0 to 1024 executing program [ 39.885614][ T4028] loop0: detected capacity change from 0 to 1024 executing program [ 39.985008][ T4029] loop0: detected capacity change from 0 to 1024 executing program [ 40.044309][ T4030] loop0: detected capacity change from 0 to 1024 executing program [ 40.104761][ T4031] loop0: detected capacity change from 0 to 1024 executing program [ 40.145302][ T4032] loop0: detected capacity change from 0 to 1024 executing program [ 40.195134][ T4033] loop0: detected capacity change from 0 to 1024 executing program [ 40.252293][ T4034] loop0: detected capacity change from 0 to 1024 executing program [ 40.304787][ T4035] loop0: detected capacity change from 0 to 1024 executing program [ 40.473728][ T4036] loop0: detected capacity change from 0 to 1024 executing program [ 40.643821][ T4037] loop0: detected capacity change from 0 to 1024 executing program [ 40.703361][ T4038] loop0: detected capacity change from 0 to 1024 executing program [ 40.772712][ T4039] loop0: detected capacity change from 0 to 1024 executing program [ 40.824073][ T4040] loop0: detected capacity change from 0 to 1024 executing program [ 40.995134][ T4041] loop0: detected capacity change from 0 to 1024 executing program [ 41.164379][ T4042] loop0: detected capacity change from 0 to 1024 executing program [ 41.304889][ T4043] loop0: detected capacity change from 0 to 1024 executing program [ 41.365390][ T4044] loop0: detected capacity change from 0 to 1024 executing program [ 41.414938][ T4045] loop0: detected capacity change from 0 to 1024 [ 41.461061][ T4046] loop0: detected capacity change from 0 to 1024 executing program executing program [ 41.534617][ T4047] loop0: detected capacity change from 0 to 1024 executing program [ 41.602966][ T4048] loop0: detected capacity change from 0 to 1024 executing program [ 41.784739][ T4049] loop0: detected capacity change from 0 to 1024 executing program [ 41.852989][ T4050] loop0: detected capacity change from 0 to 1024 executing program [ 41.914184][ T4051] loop0: detected capacity change from 0 to 1024 executing program [ 41.972632][ T4052] loop0: detected capacity change from 0 to 1024 executing program [ 42.042839][ T4053] loop0: detected capacity change from 0 to 1024 executing program [ 42.103734][ T4054] loop0: detected capacity change from 0 to 1024 executing program executing program [ 42.266361][ T4056] loop0: detected capacity change from 0 to 1024 executing program [ 42.384333][ T4057] loop0: detected capacity change from 0 to 1024 executing program [ 42.445306][ T4058] loop0: detected capacity change from 0 to 1024 executing program [ 42.485263][ T4059] loop0: detected capacity change from 0 to 1024 executing program [ 42.645241][ T4060] loop0: detected capacity change from 0 to 1024 executing program [ 42.714165][ T4061] loop0: detected capacity change from 0 to 1024 executing program [ 42.875565][ T4062] loop0: detected capacity change from 0 to 1024 executing program [ 42.931607][ T4063] loop0: detected capacity change from 0 to 1024 executing program [ 42.993736][ T4064] loop0: detected capacity change from 0 to 1024 executing program [ 43.173040][ T4065] loop0: detected capacity change from 0 to 1024 executing program [ 43.253602][ T4066] loop0: detected capacity change from 0 to 1024 executing program [ 43.414957][ T4067] loop0: detected capacity change from 0 to 1024 executing program [ 43.485085][ T4068] loop0: detected capacity change from 0 to 1024 executing program [ 43.554166][ T4069] loop0: detected capacity change from 0 to 1024 executing program [ 43.611070][ T4070] loop0: detected capacity change from 0 to 1024 executing program [ 43.692294][ T4071] loop0: detected capacity change from 0 to 1024 executing program [ 43.753453][ T4072] loop0: detected capacity change from 0 to 1024 executing program [ 43.912950][ T4073] loop0: detected capacity change from 0 to 1024 executing program [ 44.013366][ T4074] loop0: detected capacity change from 0 to 1024 executing program [ 44.112993][ T4075] loop0: detected capacity change from 0 to 1024 executing program [ 44.163251][ T4076] loop0: detected capacity change from 0 to 1024 executing program [ 44.305119][ T4077] loop0: detected capacity change from 0 to 1024 executing program [ 44.394463][ T4078] loop0: detected capacity change from 0 to 1024 executing program [ 44.452060][ T4079] loop0: detected capacity change from 0 to 1024 executing program [ 44.504136][ T4080] loop0: detected capacity change from 0 to 1024 executing program [ 44.615136][ T4081] loop0: detected capacity change from 0 to 1024 executing program [ 44.665503][ T4082] loop0: detected capacity change from 0 to 1024 executing program [ 44.731550][ T4083] loop0: detected capacity change from 0 to 1024 executing program [ 44.803755][ T4084] loop0: detected capacity change from 0 to 1024 executing program [ 44.863238][ T4085] loop0: detected capacity change from 0 to 1024 executing program [ 45.013251][ T4086] loop0: detected capacity change from 0 to 1024 executing program executing program [ 45.191550][ T4088] loop0: detected capacity change from 0 to 1024 executing program [ 45.272818][ T4089] loop0: detected capacity change from 0 to 1024 executing program [ 45.347997][ T4090] loop0: detected capacity change from 0 to 1024 executing program [ 45.522145][ T4091] loop0: detected capacity change from 0 to 1024 executing program [ 45.604357][ T4092] loop0: detected capacity change from 0 to 1024 executing program [ 45.709375][ T4093] loop0: detected capacity change from 0 to 1024 executing program [ 45.873198][ T4094] loop0: detected capacity change from 0 to 1024 executing program [ 45.932698][ T4095] loop0: detected capacity change from 0 to 1024 executing program [ 45.984709][ T4096] loop0: detected capacity change from 0 to 1024 executing program [ 46.134294][ T4097] loop0: detected capacity change from 0 to 1024 executing program [ 46.302967][ T4098] loop0: detected capacity change from 0 to 1024 executing program [ 46.403296][ T4099] loop0: detected capacity change from 0 to 1024 executing program [ 46.464046][ T4100] loop0: detected capacity change from 0 to 1024 executing program [ 46.604880][ T4101] loop0: detected capacity change from 0 to 1024 executing program [ 46.692865][ T4102] loop0: detected capacity change from 0 to 1024 executing program [ 46.814537][ T4103] loop0: detected capacity change from 0 to 1024 executing program [ 46.945659][ T4104] loop0: detected capacity change from 0 to 1024 executing program [ 47.025001][ T4105] loop0: detected capacity change from 0 to 1024 [ 47.090918][ T4106] loop0: detected capacity change from 0 to 1024 executing program executing program [ 47.164158][ T4107] loop0: detected capacity change from 0 to 1024 executing program [ 47.333481][ T4108] loop0: detected capacity change from 0 to 1024 executing program [ 47.384007][ T4109] loop0: detected capacity change from 0 to 1024 executing program [ 47.523647][ T4110] loop0: detected capacity change from 0 to 1024 executing program [ 47.674013][ T4111] loop0: detected capacity change from 0 to 1024 executing program [ 47.731570][ T4112] loop0: detected capacity change from 0 to 1024 executing program [ 47.783765][ T4114] loop0: detected capacity change from 0 to 1024 executing program [ 47.844528][ T4115] loop0: detected capacity change from 0 to 1024 executing program [ 47.970772][ T4116] loop0: detected capacity change from 0 to 1024 executing program [ 48.053597][ T4117] loop0: detected capacity change from 0 to 1024 executing program [ 48.211182][ T4118] loop0: detected capacity change from 0 to 1024 executing program [ 48.302980][ T4119] loop0: detected capacity change from 0 to 1024 executing program [ 48.358514][ T4120] loop0: detected capacity change from 0 to 1024 executing program [ 48.505709][ T4121] loop0: detected capacity change from 0 to 1024 executing program [ 48.615107][ T4122] loop0: detected capacity change from 0 to 1024 executing program [ 48.711113][ T4123] loop0: detected capacity change from 0 to 1024