Warning: Permanently added '10.128.1.6' (ED25519) to the list of known hosts. 2023/09/09 10:20:21 ignoring optional flag "sandboxArg"="0" 2023/09/09 10:20:21 parsed 1 programs 2023/09/09 10:20:23 executed programs: 0 [ 45.941390][ T1434] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 48.019905][ T1859] loop0: detected capacity change from 0 to 1024 [ 48.031044][ T1859] hfsplus: request for non-existent node 32768 in B*Tree [ 48.038708][ T1859] hfsplus: request for non-existent node 32768 in B*Tree [ 48.046427][ T1859] ================================================================== [ 48.054464][ T1859] BUG: KASAN: slab-out-of-bounds in hfsplus_bnode_read+0x159/0x160 [ 48.062417][ T1859] Read of size 8 at addr ffff8881073c9fc0 by task syz-executor.0/1859 [ 48.070551][ T1859] [ 48.072852][ T1859] CPU: 1 PID: 1859 Comm: syz-executor.0 Not tainted 5.15.131-syzkaller #0 [ 48.081405][ T1859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 48.091451][ T1859] Call Trace: [ 48.094743][ T1859] [ 48.097656][ T1859] dump_stack_lvl+0x41/0x5e [ 48.102197][ T1859] print_address_description.constprop.0.cold+0x6c/0x309 [ 48.109303][ T1859] ? hfsplus_bnode_read+0x159/0x160 [ 48.114570][ T1859] ? hfsplus_bnode_read+0x159/0x160 [ 48.119748][ T1859] kasan_report.cold+0x83/0xdf [ 48.124483][ T1859] ? hfsplus_bnode_read+0x159/0x160 [ 48.129660][ T1859] hfsplus_bnode_read+0x159/0x160 [ 48.134661][ T1859] hfsplus_bnode_dump+0x1f6/0x310 [ 48.139658][ T1859] ? hfsplus_bnode_move+0x700/0x700 [ 48.145211][ T1859] ? hfsplus_bnode_write+0x170/0x170 [ 48.150641][ T1859] ? __mark_inode_dirty+0x6a3/0x8f0 [ 48.156061][ T1859] hfsplus_brec_remove+0x322/0x430 [ 48.161443][ T1859] __hfsplus_delete_attr+0x1f1/0x340 [ 48.166938][ T1859] ? hfsplus_find_exit+0xc0/0xc0 [ 48.172165][ T1859] ? hfsplus_part_find+0xc00/0xc00 [ 48.177352][ T1859] hfsplus_delete_all_attrs+0x12d/0x330 [ 48.182963][ T1859] ? hfsplus_delete_attr+0x260/0x260 [ 48.188397][ T1859] ? rwlock_bug.part.0+0x90/0x90 [ 48.193305][ T1859] ? do_raw_spin_unlock+0x171/0x230 [ 48.198471][ T1859] ? __mark_inode_dirty+0x751/0x8f0 [ 48.203767][ T1859] hfsplus_delete_cat+0x74e/0xdd0 [ 48.208773][ T1859] ? hfsplus_create_cat+0x10a0/0x10a0 [ 48.214220][ T1859] ? mutex_trylock+0x280/0x280 [ 48.218962][ T1859] ? __lock_acquire.constprop.0+0x478/0xb30 [ 48.224834][ T1859] hfsplus_unlink+0x196/0x770 [ 48.229575][ T1859] ? hfsplus_symlink+0x260/0x260 [ 48.234486][ T1859] ? down_write+0xc8/0x130 [ 48.238873][ T1859] ? down_write_killable_nested+0x160/0x160 [ 48.244749][ T1859] vfs_unlink+0x291/0x800 [ 48.249051][ T1859] do_unlinkat+0x308/0x550 [ 48.253555][ T1859] ? __ia32_sys_rmdir+0xe0/0xe0 [ 48.258499][ T1859] ? getname_flags.part.0+0x89/0x440 [ 48.263759][ T1859] __x64_sys_unlink+0xa0/0xe0 [ 48.268418][ T1859] do_syscall_64+0x35/0x80 [ 48.272891][ T1859] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 48.279269][ T1859] RIP: 0033:0x7fcf24e71b29 [ 48.283702][ T1859] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 48.303716][ T1859] RSP: 002b:00007fcf249f40c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 48.312130][ T1859] RAX: ffffffffffffffda RBX: 00007fcf24f90f80 RCX: 00007fcf24e71b29 [ 48.320172][ T1859] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140 [ 48.328118][ T1859] RBP: 00007fcf24ebd47a R08: 0000000000000000 R09: 0000000000000000 [ 48.336084][ T1859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 48.344122][ T1859] R13: 0000000000000006 R14: 00007fcf24f90f80 R15: 00007ffe2e1785b8 [ 48.352271][ T1859] [ 48.355262][ T1859] [ 48.357558][ T1859] Allocated by task 1859: [ 48.361849][ T1859] kasan_save_stack+0x1b/0x40 [ 48.366507][ T1859] __kasan_kmalloc+0x7c/0x90 [ 48.371147][ T1859] __hfs_bnode_create+0xec/0x9b0 [ 48.376068][ T1859] hfsplus_bnode_find+0x23d/0xa00 [ 48.381059][ T1859] hfsplus_brec_find+0x252/0x450 [ 48.385963][ T1859] hfsplus_delete_all_attrs+0x255/0x330 [ 48.391484][ T1859] hfsplus_delete_cat+0x74e/0xdd0 [ 48.396474][ T1859] hfsplus_unlink+0x196/0x770 [ 48.401120][ T1859] vfs_unlink+0x291/0x800 [ 48.405525][ T1859] do_unlinkat+0x308/0x550 [ 48.409968][ T1859] __x64_sys_unlink+0xa0/0xe0 [ 48.414709][ T1859] do_syscall_64+0x35/0x80 [ 48.419103][ T1859] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 48.425174][ T1859] [ 48.427597][ T1859] Last potentially related work creation: [ 48.433552][ T1859] kasan_save_stack+0x1b/0x40 [ 48.438218][ T1859] kasan_record_aux_stack+0xc5/0xf0 [ 48.443391][ T1859] insert_work+0x45/0x380 [ 48.447696][ T1859] __queue_work+0x520/0xbd0 [ 48.452211][ T1859] queue_work_on+0x52/0x70 [ 48.456610][ T1859] call_usermodehelper_exec+0x2d4/0x430 [ 48.462251][ T1859] __request_module+0x33b/0x660 [ 48.467087][ T1859] inet_create+0x739/0xa90 [ 48.471488][ T1859] __sock_create+0x20e/0x4a0 [ 48.476050][ T1859] __sys_socket+0xd6/0x1a0 [ 48.480444][ T1859] __x64_sys_socket+0x6a/0xb0 [ 48.485142][ T1859] do_syscall_64+0x35/0x80 [ 48.489789][ T1859] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 48.495748][ T1859] [ 48.498229][ T1859] The buggy address belongs to the object at ffff8881073c9f00 [ 48.498229][ T1859] which belongs to the cache kmalloc-192 of size 192 [ 48.512258][ T1859] The buggy address is located 0 bytes to the right of [ 48.512258][ T1859] 192-byte region [ffff8881073c9f00, ffff8881073c9fc0) [ 48.526296][ T1859] The buggy address belongs to the page: [ 48.532005][ T1859] page:ffffea00041cf240 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1073c9 [ 48.542210][ T1859] flags: 0x100000000000200(slab|node=0|zone=2) [ 48.548556][ T1859] raw: 0100000000000200 ffffea00041f6c00 0000000200000002 ffff888100041a00 [ 48.557418][ T1859] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 48.565981][ T1859] page dumped because: kasan: bad access detected [ 48.572402][ T1859] page_owner tracks the page as allocated [ 48.578189][ T1859] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 1693209772, free_ts 0 [ 48.593618][ T1859] get_page_from_freelist+0x13ed/0x3430 [ 48.599395][ T1859] __alloc_pages+0x1b2/0x420 [ 48.603975][ T1859] alloc_page_interleave+0xf/0x160 [ 48.609247][ T1859] allocate_slab+0x2eb/0x430 [ 48.613907][ T1859] ___slab_alloc+0xb1c/0xf80 [ 48.618599][ T1859] kmem_cache_alloc_trace+0x2db/0x310 [ 48.624005][ T1859] call_usermodehelper_setup+0x74/0x2f0 [ 48.629620][ T1859] kobject_uevent_env+0xa72/0x10d0 [ 48.634718][ T1859] param_sysfs_init+0x25d/0x2b6 [ 48.639538][ T1859] do_one_initcall+0xb4/0x2e0 [ 48.644182][ T1859] kernel_init_freeable+0x516/0x56e [ 48.649351][ T1859] kernel_init+0x14/0x120 [ 48.653663][ T1859] ret_from_fork+0x1f/0x30 [ 48.658167][ T1859] page_owner free stack trace missing [ 48.663605][ T1859] [ 48.665906][ T1859] Memory state around the buggy address: [ 48.671504][ T1859] ffff8881073c9e80: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 48.679807][ T1859] ffff8881073c9f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 48.688733][ T1859] >ffff8881073c9f80: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 48.696779][ T1859] ^ [ 48.702994][ T1859] ffff8881073ca000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 48.711023][ T1859] ffff8881073ca080: 00 00 00 00 00 fc fc fc fc fc fc fc fc 00 00 00 [ 48.719138][ T1859] ================================================================== [ 48.727189][ T1859] Disabling lock debugging due to kernel taint [ 48.733347][ T1859] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 48.740690][ T1859] Kernel Offset: disabled [ 48.745066][ T1859] Rebooting in 86400 seconds..