Warning: Permanently added '10.128.1.48' (ED25519) to the list of known hosts. executing program [ 36.988942][ T4220] loop0: detected capacity change from 0 to 1024 [ 37.002368][ T4220] hfsplus: request for non-existent node -1191182336 in B*Tree [ 37.004384][ T4220] hfsplus: request for non-existent node -1191182336 in B*Tree [ 37.006625][ T4220] ================================================================== [ 37.008740][ T4220] BUG: KASAN: use-after-free in hfsplus_bnode_dump+0x3f0/0xa50 [ 37.010662][ T4220] Read of size 2 at addr ffff00000000103e by task syz-executor335/4220 [ 37.012818][ T4220] [ 37.013392][ T4220] CPU: 1 PID: 4220 Comm: syz-executor335 Not tainted 6.1.81-syzkaller #0 [ 37.015684][ T4220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 37.018524][ T4220] Call trace: [ 37.019463][ T4220] dump_backtrace+0x1c8/0x1f4 [ 37.020861][ T4220] show_stack+0x2c/0x3c [ 37.021971][ T4220] dump_stack_lvl+0x108/0x170 [ 37.023250][ T4220] print_report+0x174/0x4c0 [ 37.024524][ T4220] kasan_report+0xd4/0x130 [ 37.025707][ T4220] kasan_check_range+0x264/0x2a4 [ 37.027035][ T4220] memcpy+0x48/0x90 [ 37.028045][ T4220] hfsplus_bnode_dump+0x3f0/0xa50 [ 37.029446][ T4220] hfsplus_brec_remove+0x3d0/0x4a4 [ 37.030857][ T4220] __hfsplus_delete_attr+0x1dc/0x3e4 [ 37.032346][ T4220] hfsplus_delete_all_attrs+0x214/0x348 [ 37.033869][ T4220] hfsplus_delete_cat+0x9a4/0xd6c [ 37.035220][ T4220] hfsplus_unlink+0x2c0/0x6a0 [ 37.036501][ T4220] vfs_unlink+0x2f0/0x508 [ 37.037619][ T4220] do_unlinkat+0x4cc/0x70c [ 37.038776][ T4220] __arm64_sys_unlinkat+0xcc/0xfc [ 37.040155][ T4220] invoke_syscall+0x98/0x2c0 [ 37.041408][ T4220] el0_svc_common+0x138/0x258 [ 37.042683][ T4220] do_el0_svc+0x64/0x218 [ 37.043806][ T4220] el0_svc+0x58/0x168 [ 37.044849][ T4220] el0t_64_sync_handler+0x84/0xf0 [ 37.046244][ T4220] el0t_64_sync+0x18c/0x190 [ 37.047466][ T4220] [ 37.048096][ T4220] The buggy address belongs to the physical page: [ 37.049832][ T4220] page:000000005ac08010 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x40001 [ 37.052635][ T4220] flags: 0x1ffc00000000000(node=0|zone=0|lastcpupid=0x7ff) [ 37.054613][ T4220] raw: 01ffc00000000000 fffffc0000000048 fffffc0000000048 0000000000000000 [ 37.056969][ T4220] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 37.059306][ T4220] page dumped because: kasan: bad access detected [ 37.060990][ T4220] [ 37.061587][ T4220] Memory state around the buggy address: [ 37.063089][ T4220] ffff000000000f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 37.065338][ T4220] ffff000000000f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 37.067526][ T4220] >ffff000000001000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 37.069704][ T4220] ^ [ 37.071246][ T4220] ffff000000001080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 37.073273][ T4220] ffff000000001100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 37.075391][ T4220] ================================================================== [ 37.078371][ T4220] Disabling lock debugging due to kernel taint [ 37.080087][ T4220] Unable to handle kernel paging request at virtual address ffff60060443e57f [ 37.082461][ T4220] KASAN: maybe wild-memory-access in range [0xffff0030221f2bf8-0xffff0030221f2bff] [ 37.084966][ T4220] Mem abort info: [ 37.085924][ T4220] ESR = 0x0000000096000005 [ 37.087113][ T4220] EC = 0x25: DABT (current EL), IL = 32 bits [ 37.088784][ T4220] SET = 0, FnV = 0 [ 37.089768][ T4220] EA = 0, S1PTW = 0 [ 37.090845][ T4220] FSC = 0x05: level 1 translation fault [ 37.092450][ T4220] Data abort info: [ 37.093439][ T4220] ISV = 0, ISS = 0x00000005 [ 37.094705][ T4220] CM = 0, WnR = 0 [ 37.095732][ T4220] swapper pgtable: 4k pages, 48-bit VAs, pgdp=00000001b19c5000 [ 37.097732][ T4220] [ffff60060443e57f] pgd=000000023c4f3003, p4d=000000023c4f3003, pud=0000000000000000 [ 37.100279][ T4220] Internal error: Oops: 0000000096000005 [#1] PREEMPT SMP [ 37.102088][ T4220] Modules linked in: [ 37.103098][ T4220] CPU: 1 PID: 4220 Comm: syz-executor335 Tainted: G B 6.1.81-syzkaller #0 [ 37.105689][ T4220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 37.108384][ T4220] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 37.110595][ T4220] pc : kasan_check_range+0x64/0x2a4 [ 37.111987][ T4220] lr : memcpy+0x48/0x90 [ 37.113171][ T4220] sp : ffff80001dc973c0 [ 37.114323][ T4220] x29: ffff80001dc973c0 x28: 0000000000000002 x27: fffffbffff000000 [ 37.116468][ T4220] x26: 0000000000000000 x25: ffff0000c0887c78 x24: ffff0000c0887c1a [ 37.118571][ T4220] x23: 00000000ffffeffe x22: ffff80000908574c x21: ffff80001dc974b0 [ 37.120746][ T4220] x20: ffff0030221f2bfe x19: 0000000000000002 x18: ffff80001dc96740 [ 37.122908][ T4220] x17: 0000000000000000 x16: ffff800012097dc0 x15: 0000000000000000 [ 37.125066][ T4220] x14: 00000000000000ff x13: ffff0000d9799bc0 x12: 0000000000000001 [ 37.127280][ T4220] x11: 1fffe0060443e57f x10: 1fffe0060443e57f x9 : ffffffffffffffff [ 37.129403][ T4220] x8 : ffff60060443e57f x7 : 0000000000000001 x6 : 0000000000000000 [ 37.131532][ T4220] x5 : ffff80001dc974b2 x4 : ffff000000000042 x3 : ffff80000908574c [ 37.133809][ T4220] x2 : 0000000000000000 x1 : 0000000000000002 x0 : ffff0030221f2bfe [ 37.136032][ T4220] Call trace: [ 37.136929][ T4220] kasan_check_range+0x64/0x2a4 [ 37.138272][ T4220] memcpy+0x48/0x90 [ 37.139331][ T4220] hfsplus_bnode_dump+0x3f0/0xa50 [ 37.140743][ T4220] hfsplus_brec_remove+0x3d0/0x4a4 [ 37.142124][ T4220] __hfsplus_delete_attr+0x1dc/0x3e4 [ 37.143568][ T4220] hfsplus_delete_all_attrs+0x214/0x348 [ 37.145054][ T4220] hfsplus_delete_cat+0x9a4/0xd6c [ 37.146460][ T4220] hfsplus_unlink+0x2c0/0x6a0 [ 37.147729][ T4220] vfs_unlink+0x2f0/0x508 [ 37.148885][ T4220] do_unlinkat+0x4cc/0x70c [ 37.150082][ T4220] __arm64_sys_unlinkat+0xcc/0xfc [ 37.151453][ T4220] invoke_syscall+0x98/0x2c0 [ 37.152699][ T4220] el0_svc_common+0x138/0x258 [ 37.153913][ T4220] do_el0_svc+0x64/0x218 [ 37.155040][ T4220] el0_svc+0x58/0x168 [ 37.156110][ T4220] el0t_64_sync_handler+0x84/0xf0 [ 37.157510][ T4220] el0t_64_sync+0x18c/0x190 [ 37.158727][ T4220] Code: 5400014c b4000b8c aa2a03e9 8b0b0129 (3940010a) [ 37.160583][ T4220] ---[ end trace 0000000000000000 ]--- [ 37.518816][ T4220] Kernel panic - not syncing: Oops: Fatal exception [ 37.520655][ T4220] SMP: stopping secondary CPUs [ 37.521954][ T4220] Kernel Offset: disabled [ 37.523103][ T4220] CPU features: 0x00000,02070084,26017203 [ 37.524611][ T4220] Memory Limit: none [ 37.857854][ T4220] Rebooting in 86400 seconds..