loop0: detected capacity change from 0 to 64 ===================================================== BUG: KMSAN: use-after-free in __hfs_ext_read_extent fs/hfs/extent.c:160 [inline] BUG: KMSAN: use-after-free in hfs_free_fork+0x929/0xa70 fs/hfs/extent.c:320 __hfs_ext_read_extent fs/hfs/extent.c:160 [inline] hfs_free_fork+0x929/0xa70 fs/hfs/extent.c:320 hfs_cat_delete+0x47c/0xb90 fs/hfs/catalog.c:247 hfs_remove+0x167/0x310 fs/hfs/dir.c:262 vfs_unlink+0x613/0xab0 fs/namei.c:4579 do_unlinkat+0x6e6/0xe50 fs/namei.c:4643 __do_sys_unlink fs/namei.c:4689 [inline] __se_sys_unlink fs/namei.c:4687 [inline] __x64_sys_unlink+0x71/0xb0 fs/namei.c:4687 x64_sys_call+0x29de/0x3db0 arch/x86/include/generated/asm/syscalls_64.h:88 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xd9/0x1b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f Uninit was created at: slab_free_hook mm/slub.c:2324 [inline] slab_free mm/slub.c:4656 [inline] kfree+0x236/0xea0 mm/slub.c:4855 tomoyo_check_open_permission+0xa2f/0xc60 security/tomoyo/file.c:786 tomoyo_file_open+0x29d/0x320 security/tomoyo/tomoyo.c:334 security_file_open+0x11e/0x500 security/security.c:3114 do_dentry_open+0x5f3/0x2750 fs/open.c:933 vfs_open+0x52/0x5f0 fs/open.c:1086 do_open fs/namei.c:3880 [inline] path_openat+0x598d/0x6760 fs/namei.c:4039 do_filp_open+0x280/0x660 fs/namei.c:4066 do_sys_openat2+0x1bb/0x2f0 fs/open.c:1429 do_sys_open fs/open.c:1444 [inline] __do_sys_openat fs/open.c:1460 [inline] __se_sys_openat fs/open.c:1455 [inline] __x64_sys_openat+0x240/0x300 fs/open.c:1455 x64_sys_call+0x213/0x3db0 arch/x86/include/generated/asm/syscalls_64.h:258 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xd9/0x1b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f CPU: 0 UID: 0 PID: 6623 Comm: syz.0.15 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(undef) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 =====================================================