loop0: detected capacity change from 0 to 1024 ===================================================== BUG: KMSAN: use-after-free in case_fold fs/hfsplus/unicode.c:23 [inline] BUG: KMSAN: use-after-free in hfsplus_strcasecmp+0x1cd/0x780 fs/hfsplus/unicode.c:47 case_fold fs/hfsplus/unicode.c:23 [inline] hfsplus_strcasecmp+0x1cd/0x780 fs/hfsplus/unicode.c:47 hfsplus_cat_case_cmp_key+0xde/0x190 fs/hfsplus/catalog.c:26 hfs_find_rec_by_key+0xb1/0x240 fs/hfsplus/bfind.c:89 __hfsplus_brec_find+0x26f/0x7b0 fs/hfsplus/bfind.c:124 hfsplus_brec_find+0x445/0x970 fs/hfsplus/bfind.c:184 hfsplus_brec_read+0x46/0x1a0 fs/hfsplus/bfind.c:211 hfsplus_fill_super+0x17fd/0x26e0 fs/hfsplus/super.c:526 get_tree_bdev_flags+0x6ec/0x910 fs/super.c:1636 get_tree_bdev+0x37/0x50 fs/super.c:1659 hfsplus_get_tree+0x34/0x40 fs/hfsplus/super.c:640 vfs_get_tree+0xb1/0x5a0 fs/super.c:1759 do_new_mount+0x71f/0x15e0 fs/namespace.c:3881 path_mount+0x742/0x1f10 fs/namespace.c:4208 do_mount fs/namespace.c:4221 [inline] __do_sys_mount fs/namespace.c:4432 [inline] __se_sys_mount+0x71f/0x800 fs/namespace.c:4409 __x64_sys_mount+0xe4/0x150 fs/namespace.c:4409 x64_sys_call+0xed5/0x3c80 arch/x86/include/generated/asm/syscalls_64.h:166 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0x1e0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f Uninit was created at: slab_free_hook mm/slub.c:2315 [inline] slab_free mm/slub.c:4646 [inline] kfree+0x24c/0xdd0 mm/slub.c:4845 skb_kfree_head net/core/skbuff.c:1058 [inline] skb_free_head net/core/skbuff.c:1070 [inline] skb_release_data+0xf9d/0x1140 net/core/skbuff.c:1097 skb_release_all net/core/skbuff.c:1162 [inline] __kfree_skb+0x6b/0x250 net/core/skbuff.c:1176 sk_skb_reason_drop+0x128/0x480 net/core/skbuff.c:1214 kfree_skb_reason include/linux/skbuff.h:1279 [inline] kfree_skb include/linux/skbuff.h:1288 [inline] ip6_mc_input+0x9c6/0xc30 net/ipv6/ip6_input.c:591 dst_input include/net/dst.h:469 [inline] ip6_sublist_rcv_finish net/ipv6/ip6_input.c:88 [inline] ip6_list_rcv_finish net/ipv6/ip6_input.c:145 [inline] ip6_sublist_rcv+0x21ae/0x2350 net/ipv6/ip6_input.c:319 ipv6_list_rcv+0x9ea/0xa30 net/ipv6/ip6_input.c:353 __netif_receive_skb_list_ptype net/core/dev.c:5928 [inline] __netif_receive_skb_list_core+0x10da/0x1670 net/core/dev.c:5975 __netif_receive_skb_list net/core/dev.c:6027 [inline] netif_receive_skb_list_internal+0x1085/0x1700 net/core/dev.c:6118 netif_receive_skb_list+0x5a/0x460 net/core/dev.c:6170 ieee80211_rx_napi+0x3be/0x3f0 net/mac80211/rx.c:5443 ieee80211_rx include/net/mac80211.h:5179 [inline] ieee80211_handle_queued_frames+0x1a8/0x340 net/mac80211/main.c:441 ieee80211_tasklet_handler+0x25/0x30 net/mac80211/main.c:460 tasklet_action_common+0x39c/0xd60 kernel/softirq.c:829 tasklet_action+0x2d/0x40 kernel/softirq.c:855 handle_softirqs+0x1a0/0x7c0 kernel/softirq.c:579 __do_softirq+0x14/0x1a kernel/softirq.c:613 CPU: 0 UID: 0 PID: 6215 Comm: syz-executor.0 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(undef) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 =====================================================