Warning: Permanently added '10.128.10.8' (ED25519) to the list of known hosts. executing program [ 38.777904][ T4291] loop0: detected capacity change from 0 to 1024 [ 38.796446][ T4291] hfsplus: request for non-existent node 211 in B*Tree [ 38.798245][ T4291] hfsplus: request for non-existent node 211 in B*Tree [ 38.800084][ T4291] ================================================================== [ 38.801780][ T4291] BUG: KASAN: use-after-free in hfsplus_bnode_dump+0x3f0/0xa50 [ 38.803407][ T4291] Read of size 2 at addr ffff00000000103e by task syz-executor733/4291 [ 38.805140][ T4291] [ 38.805636][ T4291] CPU: 1 PID: 4291 Comm: syz-executor733 Not tainted 6.1.127-syzkaller #0 [ 38.807364][ T4291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 38.809371][ T4291] Call trace: [ 38.810118][ T4291] dump_backtrace+0x1c8/0x1f4 [ 38.811128][ T4291] show_stack+0x2c/0x3c [ 38.811925][ T4291] dump_stack_lvl+0x108/0x170 [ 38.812897][ T4291] print_report+0x174/0x4c0 [ 38.813843][ T4291] kasan_report+0xd4/0x130 [ 38.814718][ T4291] kasan_check_range+0x264/0x2a4 [ 38.815776][ T4291] memcpy+0x48/0x90 [ 38.816506][ T4291] hfsplus_bnode_dump+0x3f0/0xa50 [ 38.817631][ T4291] hfsplus_brec_remove+0x3d0/0x4a4 [ 38.818720][ T4291] __hfsplus_delete_attr+0x1dc/0x3e4 [ 38.819768][ T4291] hfsplus_delete_attr+0x2e4/0x41c [ 38.820842][ T4291] __hfsplus_setxattr+0x3b8/0x1d10 [ 38.821931][ T4291] hfsplus_setxattr+0xb4/0xec [ 38.823002][ T4291] hfsplus_trusted_setxattr+0x54/0x6c [ 38.824215][ T4291] __vfs_setxattr+0x388/0x3a4 [ 38.825276][ T4291] __vfs_setxattr_noperm+0x110/0x528 [ 38.826332][ T4291] __vfs_setxattr_locked+0x1ec/0x218 [ 38.827473][ T4291] vfs_setxattr+0x1a8/0x344 [ 38.828464][ T4291] setxattr+0x230/0x294 [ 38.829330][ T4291] path_setxattr+0x17c/0x258 [ 38.830305][ T4291] __arm64_sys_setxattr+0xbc/0xd8 [ 38.831320][ T4291] invoke_syscall+0x98/0x2bc [ 38.832259][ T4291] el0_svc_common+0x138/0x258 [ 38.833226][ T4291] do_el0_svc+0x58/0x13c [ 38.834074][ T4291] el0_svc+0x58/0x168 [ 38.834936][ T4291] el0t_64_sync_handler+0x84/0xf0 [ 38.836084][ T4291] el0t_64_sync+0x18c/0x190 [ 38.836998][ T4291] [ 38.837363][ T4291] The buggy address belongs to the physical page: [ 38.838391][ T4291] page:0000000037547e8a refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x40001 [ 38.840013][ T4291] flags: 0x1ffc00000000000(node=0|zone=0|lastcpupid=0x7ff) [ 38.841160][ T4291] raw: 01ffc00000000000 fffffc0000000048 fffffc0000000048 0000000000000000 [ 38.842528][ T4291] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 38.843891][ T4291] page dumped because: kasan: bad access detected [ 38.844899][ T4291] [ 38.845267][ T4291] Memory state around the buggy address: [ 38.846164][ T4291] ffff000000000f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 38.847438][ T4291] ffff000000000f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 38.848736][ T4291] >ffff000000001000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 38.850136][ T4291] ^ [ 38.851270][ T4291] ffff000000001080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 38.852910][ T4291] ffff000000001100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 38.854519][ T4291] ================================================================== [ 38.856615][ T4291] Disabling lock debugging due to kernel taint [ 38.858171][ T4291] Unable to handle kernel paging request at virtual address ffff6006b310757f [ 38.860005][ T4291] KASAN: maybe wild-memory-access in range [0xffff00359883abf8-0xffff00359883abff] [ 38.862165][ T4291] Mem abort info: [ 38.862870][ T4291] ESR = 0x0000000096000005 [ 38.863753][ T4291] EC = 0x25: DABT (current EL), IL = 32 bits [ 38.865181][ T4291] SET = 0, FnV = 0 [ 38.866026][ T4291] EA = 0, S1PTW = 0 [ 38.866900][ T4291] FSC = 0x05: level 1 translation fault [ 38.868025][ T4291] Data abort info: [ 38.868751][ T4291] ISV = 0, ISS = 0x00000005 [ 38.869692][ T4291] CM = 0, WnR = 0 [ 38.870465][ T4291] swapper pgtable: 4k pages, 48-bit VAs, pgdp=00000001ab226000 [ 38.872006][ T4291] [ffff6006b310757f] pgd=0000000233e74003, p4d=0000000233e74003, pud=0000000000000000 [ 38.874024][ T4291] Internal error: Oops: 0000000096000005 [#1] PREEMPT SMP [ 38.875404][ T4291] Modules linked in: [ 38.876220][ T4291] CPU: 1 PID: 4291 Comm: syz-executor733 Tainted: G B 6.1.127-syzkaller #0 [ 38.878259][ T4291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 38.880347][ T4291] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 38.881875][ T4291] pc : kasan_check_range+0x64/0x2a4 [ 38.883045][ T4291] lr : memcpy+0x48/0x90 [ 38.883843][ T4291] sp : ffff800021086e00 [ 38.884734][ T4291] x29: ffff800021086e00 x28: 0000000000000002 x27: fffffbffff000000 [ 38.886389][ T4291] x26: 0000000000000000 x25: ffff0000d6620e78 x24: ffff0000d6620e1a [ 38.888097][ T4291] x23: 00000000ffffeffe x22: ffff800009089f54 x21: ffff800021086ef0 [ 38.889721][ T4291] x20: ffff00359883abfe x19: 0000000000000002 x18: 1fffe000367a0176 [ 38.891482][ T4291] x17: 0000000000000000 x16: ffff80001227d300 x15: 0000000000000000 [ 38.893195][ T4291] x14: 00000000000000ff x13: ffff0000d8e3d340 x12: 0000000000000001 [ 38.894885][ T4291] x11: 1fffe006b310757f x10: 1fffe006b310757f x9 : ffffffffffffffff [ 38.896517][ T4291] x8 : ffff6006b310757f x7 : 0000000000000001 x6 : 0000000000000000 [ 38.898220][ T4291] x5 : ffff800021086ef2 x4 : ffff000000000042 x3 : ffff800009089f54 [ 38.899958][ T4291] x2 : 0000000000000000 x1 : 0000000000000002 x0 : ffff00359883abfe [ 38.901623][ T4291] Call trace: [ 38.902296][ T4291] kasan_check_range+0x64/0x2a4 [ 38.903292][ T4291] memcpy+0x48/0x90 [ 38.904111][ T4291] hfsplus_bnode_dump+0x3f0/0xa50 [ 38.905290][ T4291] hfsplus_brec_remove+0x3d0/0x4a4 [ 38.906312][ T4291] __hfsplus_delete_attr+0x1dc/0x3e4 [ 38.907377][ T4291] hfsplus_delete_attr+0x2e4/0x41c [ 38.908463][ T4291] __hfsplus_setxattr+0x3b8/0x1d10 [ 38.909491][ T4291] hfsplus_setxattr+0xb4/0xec [ 38.910398][ T4291] hfsplus_trusted_setxattr+0x54/0x6c [ 38.911520][ T4291] __vfs_setxattr+0x388/0x3a4 [ 38.912599][ T4291] __vfs_setxattr_noperm+0x110/0x528 [ 38.913640][ T4291] __vfs_setxattr_locked+0x1ec/0x218 [ 38.914686][ T4291] vfs_setxattr+0x1a8/0x344 [ 38.915580][ T4291] setxattr+0x230/0x294 [ 38.916439][ T4291] path_setxattr+0x17c/0x258 [ 38.917393][ T4291] __arm64_sys_setxattr+0xbc/0xd8 [ 38.918433][ T4291] invoke_syscall+0x98/0x2bc [ 38.919440][ T4291] el0_svc_common+0x138/0x258 [ 38.920383][ T4291] do_el0_svc+0x58/0x13c [ 38.921345][ T4291] el0_svc+0x58/0x168 [ 38.922171][ T4291] el0t_64_sync_handler+0x84/0xf0 [ 38.923176][ T4291] el0t_64_sync+0x18c/0x190 [ 38.924091][ T4291] Code: 5400014c b4000b8c aa2a03e9 8b0b0129 (3940010a) [ 38.925434][ T4291] ---[ end trace 0000000000000000 ]--- [ 39.239780][ T4291] Kernel panic - not syncing: Oops: Fatal exception [ 39.241114][ T4291] SMP: stopping secondary CPUs [ 39.242187][ T4291] Kernel Offset: disabled [ 39.243078][ T4291] CPU features: 0x080000,02070084,26017203 [ 39.244231][ T4291] Memory Limit: none [ 39.531605][ T4291] Rebooting in 86400 seconds..