Warning: Permanently added '10.128.1.183' (ED25519) to the list of known hosts. 2023/12/17 01:38:43 ignoring optional flag "sandboxArg"="0" 2023/12/17 01:38:43 parsed 1 programs 2023/12/17 01:38:45 executed programs: 0 [ 48.664830][ T1434] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 51.055691][ T1860] loop0: detected capacity change from 0 to 1024 [ 51.068923][ T1860] hfsplus: request for non-existent node 32768 in B*Tree [ 51.076620][ T1860] hfsplus: request for non-existent node 32768 in B*Tree [ 51.084104][ T1860] ================================================================== [ 51.092220][ T1860] BUG: KASAN: slab-out-of-bounds in hfsplus_bnode_read+0x159/0x160 [ 51.100096][ T1860] Read of size 8 at addr ffff8881075ba3c0 by task syz-executor.0/1860 [ 51.108223][ T1860] [ 51.110526][ T1860] CPU: 1 PID: 1860 Comm: syz-executor.0 Not tainted 5.15.143-syzkaller #0 [ 51.118988][ T1860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 51.129015][ T1860] Call Trace: [ 51.132271][ T1860] [ 51.135179][ T1860] dump_stack_lvl+0x41/0x5e [ 51.139659][ T1860] print_address_description.constprop.0.cold+0x6c/0x309 [ 51.146662][ T1860] ? hfsplus_bnode_read+0x159/0x160 [ 51.151835][ T1860] ? hfsplus_bnode_read+0x159/0x160 [ 51.157003][ T1860] kasan_report.cold+0x83/0xdf [ 51.161851][ T1860] ? hfsplus_bnode_read+0x159/0x160 [ 51.167061][ T1860] hfsplus_bnode_read+0x159/0x160 [ 51.172076][ T1860] hfsplus_bnode_dump+0x1f6/0x310 [ 51.177183][ T1860] ? hfsplus_bnode_move+0x700/0x700 [ 51.182405][ T1860] ? hfsplus_bnode_write+0x170/0x170 [ 51.187683][ T1860] ? __mark_inode_dirty+0x6a3/0x8f0 [ 51.192963][ T1860] hfsplus_brec_remove+0x322/0x430 [ 51.198127][ T1860] __hfsplus_delete_attr+0x1f1/0x340 [ 51.203613][ T1860] ? hfsplus_find_exit+0xc0/0xc0 [ 51.208537][ T1860] ? hfsplus_part_find+0xc00/0xc00 [ 51.213622][ T1860] hfsplus_delete_all_attrs+0x12d/0x330 [ 51.219172][ T1860] ? hfsplus_delete_attr+0x260/0x260 [ 51.224451][ T1860] ? rwlock_bug.part.0+0x90/0x90 [ 51.229381][ T1860] ? do_raw_spin_unlock+0x171/0x230 [ 51.234560][ T1860] ? __mark_inode_dirty+0x751/0x8f0 [ 51.239737][ T1860] hfsplus_delete_cat+0x74e/0xdd0 [ 51.244838][ T1860] ? hfsplus_create_cat+0x10a0/0x10a0 [ 51.250198][ T1860] ? mutex_trylock+0x280/0x280 [ 51.255059][ T1860] ? __lock_acquire.constprop.0+0x478/0xb30 [ 51.261310][ T1860] hfsplus_unlink+0x196/0x770 [ 51.266071][ T1860] ? hfsplus_symlink+0x260/0x260 [ 51.271208][ T1860] ? down_write+0xc8/0x130 [ 51.275617][ T1860] ? down_write_killable_nested+0x160/0x160 [ 51.281974][ T1860] vfs_unlink+0x291/0x800 [ 51.286396][ T1860] do_unlinkat+0x308/0x550 [ 51.290792][ T1860] ? __ia32_sys_rmdir+0xe0/0xe0 [ 51.295736][ T1860] ? getname_flags.part.0+0x89/0x440 [ 51.300998][ T1860] __x64_sys_unlink+0xa0/0xe0 [ 51.306730][ T1860] do_syscall_64+0x35/0x80 [ 51.311310][ T1860] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 51.317187][ T1860] RIP: 0033:0x7fb84c29cb29 [ 51.321758][ T1860] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 51.341445][ T1860] RSP: 002b:00007fb84be1f0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 51.350103][ T1860] RAX: ffffffffffffffda RBX: 00007fb84c3bbf80 RCX: 00007fb84c29cb29 [ 51.358079][ T1860] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140 [ 51.366041][ T1860] RBP: 00007fb84c2e847a R08: 0000000000000000 R09: 0000000000000000 [ 51.374002][ T1860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.381960][ T1860] R13: 0000000000000006 R14: 00007fb84c3bbf80 R15: 00007ffe39e6e2f8 [ 51.390142][ T1860] [ 51.393252][ T1860] [ 51.395560][ T1860] Allocated by task 1860: [ 51.399870][ T1860] kasan_save_stack+0x1b/0x40 [ 51.404535][ T1860] __kasan_kmalloc+0x7c/0x90 [ 51.409290][ T1860] __hfs_bnode_create+0xec/0x9b0 [ 51.414248][ T1860] hfsplus_bnode_find+0x23d/0xa00 [ 51.419256][ T1860] hfsplus_brec_find+0x252/0x450 [ 51.424221][ T1860] hfsplus_delete_all_attrs+0x255/0x330 [ 51.430442][ T1860] hfsplus_delete_cat+0x74e/0xdd0 [ 51.435545][ T1860] hfsplus_unlink+0x196/0x770 [ 51.440424][ T1860] vfs_unlink+0x291/0x800 [ 51.444743][ T1860] do_unlinkat+0x308/0x550 [ 51.449297][ T1860] __x64_sys_unlink+0xa0/0xe0 [ 51.453977][ T1860] do_syscall_64+0x35/0x80 [ 51.458422][ T1860] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 51.464308][ T1860] [ 51.466724][ T1860] Last potentially related work creation: [ 51.472558][ T1860] kasan_save_stack+0x1b/0x40 [ 51.477255][ T1860] kasan_record_aux_stack+0xc5/0xf0 [ 51.482452][ T1860] insert_work+0x45/0x380 [ 51.486768][ T1860] __queue_work+0x520/0xbd0 [ 51.491263][ T1860] queue_work_on+0x52/0x70 [ 51.495684][ T1860] call_usermodehelper_exec+0x2d4/0x430 [ 51.501531][ T1860] __request_module+0x33b/0x660 [ 51.506374][ T1860] __sock_create+0x2ea/0x4a0 [ 51.510940][ T1860] __sys_socket+0xd6/0x1a0 [ 51.515329][ T1860] __x64_sys_socket+0x6a/0xb0 [ 51.519986][ T1860] do_syscall_64+0x35/0x80 [ 51.524378][ T1860] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 51.530257][ T1860] [ 51.532566][ T1860] The buggy address belongs to the object at ffff8881075ba300 [ 51.532566][ T1860] which belongs to the cache kmalloc-192 of size 192 [ 51.546796][ T1860] The buggy address is located 0 bytes to the right of [ 51.546796][ T1860] 192-byte region [ffff8881075ba300, ffff8881075ba3c0) [ 51.560396][ T1860] The buggy address belongs to the page: [ 51.566139][ T1860] page:ffffea00041d6e80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1075ba [ 51.576989][ T1860] flags: 0x100000000000200(slab|node=0|zone=2) [ 51.583136][ T1860] raw: 0100000000000200 ffffea00041d70c0 0000000600000006 ffff888100041a00 [ 51.591857][ T1860] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 51.600533][ T1860] page dumped because: kasan: bad access detected [ 51.607110][ T1860] page_owner tracks the page as allocated [ 51.612903][ T1860] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 2038448497, free_ts 0 [ 51.628217][ T1860] get_page_from_freelist+0x13ed/0x3430 [ 51.633764][ T1860] __alloc_pages+0x1b2/0x420 [ 51.638350][ T1860] alloc_page_interleave+0xf/0x160 [ 51.643537][ T1860] allocate_slab+0x2eb/0x430 [ 51.648318][ T1860] ___slab_alloc+0xb1c/0xf80 [ 51.652923][ T1860] __kmalloc_track_caller+0x2dc/0x2f0 [ 51.658286][ T1860] krealloc+0x7e/0xd0 [ 51.662249][ T1860] add_sysfs_param+0xaf/0x8d0 [ 51.666902][ T1860] param_sysfs_init+0x220/0x2b6 [ 51.671736][ T1860] do_one_initcall+0xb4/0x2e0 [ 51.676402][ T1860] kernel_init_freeable+0x519/0x571 [ 51.681736][ T1860] kernel_init+0x14/0x120 [ 51.686687][ T1860] ret_from_fork+0x1f/0x30 [ 51.691084][ T1860] page_owner free stack trace missing [ 51.696646][ T1860] [ 51.698978][ T1860] Memory state around the buggy address: [ 51.704868][ T1860] ffff8881075ba280: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 51.713001][ T1860] ffff8881075ba300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 51.721038][ T1860] >ffff8881075ba380: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 51.729269][ T1860] ^ [ 51.735395][ T1860] ffff8881075ba400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 51.743696][ T1860] ffff8881075ba480: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 51.751926][ T1860] ================================================================== [ 51.760359][ T1860] Disabling lock debugging due to kernel taint [ 51.766915][ T1860] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 51.774526][ T1860] Kernel Offset: disabled [ 51.779241][ T1860] Rebooting in 86400 seconds..