Warning: Permanently added '10.128.0.9' (ED25519) to the list of known hosts. executing program [ 32.253972][ T4221] loop0: detected capacity change from 0 to 1024 [ 32.266681][ T4221] hfsplus: request for non-existent node 65030 in B*Tree [ 32.268636][ T4221] hfsplus: request for non-existent node 65030 in B*Tree [ 32.271096][ T4221] ================================================================== [ 32.273136][ T4221] BUG: KASAN: use-after-free in hfsplus_bnode_dump+0x3f0/0xa50 [ 32.275016][ T4221] Read of size 2 at addr ffff00000000103e by task syz-executor417/4221 [ 32.277129][ T4221] [ 32.277731][ T4221] CPU: 0 PID: 4221 Comm: syz-executor417 Not tainted 6.1.92-syzkaller #0 [ 32.279993][ T4221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 32.282618][ T4221] Call trace: [ 32.283444][ T4221] dump_backtrace+0x1c8/0x1f4 [ 32.284856][ T4221] show_stack+0x2c/0x3c [ 32.285912][ T4221] dump_stack_lvl+0x108/0x170 [ 32.287115][ T4221] print_report+0x174/0x4c0 [ 32.288219][ T4221] kasan_report+0xd4/0x130 [ 32.289367][ T4221] kasan_check_range+0x264/0x2a4 [ 32.290589][ T4221] memcpy+0x48/0x90 [ 32.291567][ T4221] hfsplus_bnode_dump+0x3f0/0xa50 [ 32.292836][ T4221] hfsplus_brec_remove+0x3d0/0x4a4 [ 32.294143][ T4221] __hfsplus_delete_attr+0x1dc/0x3e4 [ 32.295444][ T4221] hfsplus_delete_all_attrs+0x214/0x348 [ 32.296889][ T4221] hfsplus_delete_cat+0x9a4/0xd6c [ 32.298205][ T4221] hfsplus_unlink+0x2c0/0x6a0 [ 32.299409][ T4221] hfsplus_rename+0xd0/0x1b0 [ 32.300590][ T4221] vfs_rename+0xac8/0xe04 [ 32.301685][ T4221] do_renameat2+0x9ec/0xe64 [ 32.302884][ T4221] __arm64_sys_renameat2+0xe0/0xfc [ 32.304231][ T4221] invoke_syscall+0x98/0x2c0 [ 32.305454][ T4221] el0_svc_common+0x138/0x258 [ 32.306662][ T4221] do_el0_svc+0x64/0x218 [ 32.307804][ T4221] el0_svc+0x58/0x168 [ 32.308839][ T4221] el0t_64_sync_handler+0x84/0xf0 [ 32.310139][ T4221] el0t_64_sync+0x18c/0x190 [ 32.311304][ T4221] [ 32.311900][ T4221] The buggy address belongs to the physical page: [ 32.313543][ T4221] page:000000002fe99ffc refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x40001 [ 32.316066][ T4221] flags: 0x1ffc00000000000(node=0|zone=0|lastcpupid=0x7ff) [ 32.317868][ T4221] raw: 01ffc00000000000 fffffc0000000048 fffffc0000000048 0000000000000000 [ 32.320107][ T4221] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 32.322283][ T4221] page dumped because: kasan: bad access detected [ 32.323934][ T4221] [ 32.324551][ T4221] Memory state around the buggy address: [ 32.325994][ T4221] ffff000000000f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 32.328047][ T4221] ffff000000000f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 32.330126][ T4221] >ffff000000001000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 32.332183][ T4221] ^ [ 32.333716][ T4221] ffff000000001080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 32.335795][ T4221] ffff000000001100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 32.337853][ T4221] ================================================================== [ 32.340885][ T4221] Disabling lock debugging due to kernel taint [ 32.342556][ T4221] Unable to handle kernel paging request at virtual address ffff60060443857f [ 32.344725][ T4221] KASAN: maybe wild-memory-access in range [0xffff0030221c2bf8-0xffff0030221c2bff] [ 32.347024][ T4221] Mem abort info: [ 32.347976][ T4221] ESR = 0x0000000096000005 [ 32.349168][ T4221] EC = 0x25: DABT (current EL), IL = 32 bits [ 32.351570][ T4221] SET = 0, FnV = 0 [ 32.352561][ T4221] EA = 0, S1PTW = 0 [ 32.353515][ T4221] FSC = 0x05: level 1 translation fault [ 32.354920][ T4221] Data abort info: [ 32.355842][ T4221] ISV = 0, ISS = 0x00000005 [ 32.357004][ T4221] CM = 0, WnR = 0 [ 32.357988][ T4221] swapper pgtable: 4k pages, 48-bit VAs, pgdp=00000001b19eb000 [ 32.359905][ T4221] [ffff60060443857f] pgd=000000023c4ed003, p4d=000000023c4ed003, pud=0000000000000000 [ 32.362364][ T4221] Internal error: Oops: 0000000096000005 [#1] PREEMPT SMP [ 32.364205][ T4221] Modules linked in: [ 32.365204][ T4221] CPU: 0 PID: 4221 Comm: syz-executor417 Tainted: G B 6.1.92-syzkaller #0 [ 32.367697][ T4221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 32.370300][ T4221] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 32.372273][ T4221] pc : kasan_check_range+0x64/0x2a4 [ 32.373626][ T4221] lr : memcpy+0x48/0x90 [ 32.374666][ T4221] sp : ffff80001de470e0 [ 32.375708][ T4221] x29: ffff80001de470e0 x28: 0000000000000002 x27: fffffbffff000000 [ 32.377716][ T4221] x26: 0000000000000000 x25: ffff0000c0887078 x24: ffff0000c088701a [ 32.379804][ T4221] x23: 00000000ffffeffe x22: ffff8000090841b8 x21: ffff80001de471d0 [ 32.381827][ T4221] x20: ffff0030221c2bfe x19: 0000000000000002 x18: 1fffe0003686af76 [ 32.383878][ T4221] x17: 0000000000000000 x16: ffff8000120acf00 x15: 0000000000000000 [ 32.385863][ T4221] x14: 00000000000000ff x13: ffff0000d7db8000 x12: 0000000000000001 [ 32.387942][ T4221] x11: 1fffe0060443857f x10: 1fffe0060443857f x9 : ffffffffffffffff [ 32.390061][ T4221] x8 : ffff60060443857f x7 : 0000000000000001 x6 : 0000000000000000 [ 32.392063][ T4221] x5 : ffff80001de471d2 x4 : ffff000000000042 x3 : ffff8000090841b8 [ 32.394081][ T4221] x2 : 0000000000000000 x1 : 0000000000000002 x0 : ffff0030221c2bfe [ 32.396128][ T4221] Call trace: [ 32.396966][ T4221] kasan_check_range+0x64/0x2a4 [ 32.398231][ T4221] memcpy+0x48/0x90 [ 32.399232][ T4221] hfsplus_bnode_dump+0x3f0/0xa50 [ 32.400527][ T4221] hfsplus_brec_remove+0x3d0/0x4a4 [ 32.401916][ T4221] __hfsplus_delete_attr+0x1dc/0x3e4 [ 32.403272][ T4221] hfsplus_delete_all_attrs+0x214/0x348 [ 32.404717][ T4221] hfsplus_delete_cat+0x9a4/0xd6c [ 32.406022][ T4221] hfsplus_unlink+0x2c0/0x6a0 [ 32.407204][ T4221] hfsplus_rename+0xd0/0x1b0 [ 32.408373][ T4221] vfs_rename+0xac8/0xe04 [ 32.409478][ T4221] do_renameat2+0x9ec/0xe64 [ 32.410618][ T4221] __arm64_sys_renameat2+0xe0/0xfc [ 32.411965][ T4221] invoke_syscall+0x98/0x2c0 [ 32.413129][ T4221] el0_svc_common+0x138/0x258 [ 32.414286][ T4221] do_el0_svc+0x64/0x218 [ 32.415360][ T4221] el0_svc+0x58/0x168 [ 32.416482][ T4221] el0t_64_sync_handler+0x84/0xf0 [ 32.417782][ T4221] el0t_64_sync+0x18c/0x190 [ 32.418889][ T4221] Code: 5400014c b4000b8c aa2a03e9 8b0b0129 (3940010a) [ 32.420566][ T4221] ---[ end trace 0000000000000000 ]--- [ 32.744703][ T4221] Kernel panic - not syncing: Oops: Fatal exception [ 32.746447][ T4221] SMP: stopping secondary CPUs [ 32.747718][ T4221] Kernel Offset: disabled [ 32.748766][ T4221] CPU features: 0x00000,02070084,26017203 [ 32.750214][ T4221] Memory Limit: none [ 33.021881][ T4221] Rebooting in 86400 seconds..