Warning: Permanently added '10.128.10.56' (ECDSA) to the list of known hosts. executing program [ 52.414640][ T3505] loop0: detected capacity change from 0 to 1024 [ 52.423210][ T3505] ======================================================= [ 52.423210][ T3505] WARNING: The mand mount option has been deprecated and [ 52.423210][ T3505] and is ignored by this kernel. Remove the mand [ 52.423210][ T3505] option from the mount to silence this warning. [ 52.423210][ T3505] ======================================================= [ 52.470686][ T3505] hfsplus: request for non-existent node 256 in B*Tree [ 52.477687][ T3505] hfsplus: request for non-existent node 256 in B*Tree [ 52.487498][ T3505] ================================================================== [ 52.495692][ T3505] BUG: KASAN: slab-out-of-bounds in hfsplus_bnode_read+0x85/0x1c0 [ 52.503812][ T3505] Read of size 8 at addr ffff88802418d6c0 by task syz-executor197/3505 [ 52.512048][ T3505] [ 52.514367][ T3505] CPU: 0 PID: 3505 Comm: syz-executor197 Not tainted 5.15.118-syzkaller #0 [ 52.522941][ T3505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 52.532994][ T3505] Call Trace: [ 52.536274][ T3505] <TASK> [ 52.539315][ T3505] dump_stack_lvl+0x1e3/0x2cb [ 52.543992][ T3505] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 52.549623][ T3505] ? _printk+0xd1/0x111 [ 52.553865][ T3505] ? __wake_up_klogd+0xcc/0x100 [ 52.558726][ T3505] ? panic+0x84d/0x84d [ 52.562797][ T3505] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 52.568259][ T3505] print_address_description+0x63/0x3b0 [ 52.573810][ T3505] ? hfsplus_bnode_read+0x85/0x1c0 [ 52.578937][ T3505] kasan_report+0x16b/0x1c0 [ 52.583439][ T3505] ? hfsplus_bnode_read+0x85/0x1c0 [ 52.588548][ T3505] hfsplus_bnode_read+0x85/0x1c0 [ 52.593572][ T3505] hfsplus_bnode_dump+0x3f7/0x7c0 [ 52.598594][ T3505] ? hfsplus_bnode_move+0xa80/0xa80 [ 52.603795][ T3505] ? hfsplus_bnode_write_u16+0x97/0xf0 [ 52.609253][ T3505] ? rcu_is_watching+0x11/0xa0 [ 52.614010][ T3505] ? hfsplus_bnode_move+0x355/0xa80 [ 52.619213][ T3505] ? __mark_inode_dirty+0x3dd/0xd60 [ 52.624408][ T3505] hfsplus_brec_remove+0x428/0x4e0 [ 52.629522][ T3505] __hfsplus_delete_attr+0x271/0x450 [ 52.634806][ T3505] ? hfsplus_delete_attr+0x4a0/0x4a0 [ 52.640098][ T3505] ? mutex_lock_nested+0x17/0x20 [ 52.645052][ T3505] hfsplus_delete_all_attrs+0x267/0x3c0 [ 52.650593][ T3505] ? ktime_get_coarse_real_ts64+0x107/0x120 [ 52.656483][ T3505] ? __hfsplus_delete_attr+0x450/0x450 [ 52.661937][ T3505] ? current_time+0x1d1/0x2f0 [ 52.666610][ T3505] ? rcu_is_watching+0x11/0xa0 [ 52.671363][ T3505] ? __mark_inode_dirty+0x3dd/0xd60 [ 52.676556][ T3505] hfsplus_delete_cat+0xb83/0xfb0 [ 52.681579][ T3505] ? hfsplus_mark_inode_dirty+0x30/0x30 [ 52.687477][ T3505] ? mutex_lock_io_nested+0x60/0x60 [ 52.692767][ T3505] ? read_lock_is_recursive+0x10/0x10 [ 52.698351][ T3505] hfsplus_unlink+0x35f/0x7f0 [ 52.703210][ T3505] ? end_current_label_crit_section+0x147/0x170 [ 52.709473][ T3505] ? hfsplus_link+0x840/0x840 [ 52.714243][ T3505] ? down_write+0x10e/0x170 [ 52.718753][ T3505] ? bpf_lsm_inode_unlink+0x5/0x10 [ 52.723859][ T3505] ? security_inode_unlink+0xca/0x110 [ 52.729232][ T3505] vfs_unlink+0x359/0x5f0 [ 52.733573][ T3505] do_unlinkat+0x49d/0x940 [ 52.737994][ T3505] ? fsnotify_link_count+0xf0/0xf0 [ 52.743118][ T3505] ? strncpy_from_user+0x209/0x370 [ 52.748231][ T3505] __x64_sys_unlink+0x45/0x50 [ 52.752903][ T3505] do_syscall_64+0x3d/0xb0 [ 52.757314][ T3505] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 52.763198][ T3505] RIP: 0033:0x7fe7aa380799 [ 52.767615][ T3505] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 52.787270][ T3505] RSP: 002b:00007ffe5fe759b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 52.795678][ T3505] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe7aa380799 [ 52.803646][ T3505] RDX: 00007fe7aa33ee13 RSI: 0000000000000000 RDI: 0000000020000000 [ 52.811607][ T3505] RBP: 00007fe7aa340030 R08: 000000000000066d R09: 0000000000000000 [ 52.819567][ T3505] R10: 00007ffe5fe75880 R11: 0000000000000246 R12: 00007fe7aa3400c0 [ 52.827526][ T3505] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 52.835498][ T3505] </TASK> [ 52.838510][ T3505] [ 52.840825][ T3505] Allocated by task 3505: [ 52.845141][ T3505] ____kasan_kmalloc+0xba/0xf0 [ 52.849919][ T3505] __kmalloc+0x168/0x300 [ 52.854163][ T3505] __hfs_bnode_create+0xf9/0xbb0 [ 52.859178][ T3505] hfsplus_bnode_find+0x22e/0xe80 [ 52.864194][ T3505] hfsplus_brec_find+0x17f/0x570 [ 52.869120][ T3505] hfsplus_delete_all_attrs+0x23e/0x3c0 [ 52.874831][ T3505] hfsplus_delete_cat+0xb83/0xfb0 [ 52.879851][ T3505] hfsplus_unlink+0x35f/0x7f0 [ 52.884519][ T3505] vfs_unlink+0x359/0x5f0 [ 52.888837][ T3505] do_unlinkat+0x49d/0x940 [ 52.893243][ T3505] __x64_sys_unlink+0x45/0x50 [ 52.897931][ T3505] do_syscall_64+0x3d/0xb0 [ 52.902341][ T3505] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 52.908223][ T3505] [ 52.910535][ T3505] Last potentially related work creation: [ 52.916249][ T3505] kasan_save_stack+0x36/0x60 [ 52.920946][ T3505] kasan_record_aux_stack+0xba/0x100 [ 52.926241][ T3505] insert_work+0x54/0x3e0 [ 52.930659][ T3505] __queue_work+0x963/0xd00 [ 52.935170][ T3505] queue_work_on+0x14b/0x250 [ 52.939753][ T3505] call_usermodehelper_exec+0x269/0x450 [ 52.945295][ T3505] kobject_uevent_env+0x69e/0x8d0 [ 52.950312][ T3505] netdev_queue_update_kobjects+0x1c1/0x3f0 [ 52.956220][ T3505] netdev_register_kobject+0x263/0x310 [ 52.961678][ T3505] register_netdevice+0x1067/0x1700 [ 52.966872][ T3505] register_netdev+0x37/0x50 [ 52.971468][ T3505] nr_proto_init+0x16f/0x822 [ 52.976050][ T3505] do_one_initcall+0x22b/0x7a0 [ 52.980810][ T3505] do_initcall_level+0x157/0x207 [ 52.985738][ T3505] do_initcalls+0x49/0x86 [ 52.990060][ T3505] kernel_init_freeable+0x43c/0x5c5 [ 52.995247][ T3505] kernel_init+0x19/0x290 [ 52.999564][ T3505] ret_from_fork+0x1f/0x30 [ 53.003971][ T3505] [ 53.006278][ T3505] The buggy address belongs to the object at ffff88802418d600 [ 53.006278][ T3505] which belongs to the cache kmalloc-192 of size 192 [ 53.020323][ T3505] The buggy address is located 0 bytes to the right of [ 53.020323][ T3505] 192-byte region [ffff88802418d600, ffff88802418d6c0) [ 53.033937][ T3505] The buggy address belongs to the page: [ 53.039554][ T3505] page:ffffea0000906340 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2418d [ 53.049705][ T3505] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 53.057245][ T3505] raw: 00fff00000000200 0000000000000000 0000000100000001 ffff888011c41a00 [ 53.065820][ T3505] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 53.074458][ T3505] page dumped because: kasan: bad access detected [ 53.080881][ T3505] page_owner tracks the page as allocated [ 53.086679][ T3505] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 13001165575, free_ts 12941547466 [ 53.102478][ T3505] get_page_from_freelist+0x322a/0x33c0 [ 53.108127][ T3505] __alloc_pages+0x272/0x700 [ 53.112715][ T3505] alloc_page_interleave+0x22/0x1c0 [ 53.117905][ T3505] new_slab+0xbb/0x4b0 [ 53.121988][ T3505] ___slab_alloc+0x6f6/0xe10 [ 53.126565][ T3505] kmem_cache_alloc_trace+0x1a0/0x290 [ 53.131927][ T3505] call_usermodehelper_setup+0x8a/0x260 [ 53.137472][ T3505] kobject_uevent_env+0x681/0x8d0 [ 53.142487][ T3505] net_rx_queue_update_kobjects+0x215/0x470 [ 53.148371][ T3505] netdev_register_kobject+0x222/0x310 [ 53.153818][ T3505] register_netdevice+0x1067/0x1700 [ 53.159028][ T3505] register_netdev+0x37/0x50 [ 53.163606][ T3505] nr_proto_init+0x16f/0x822 [ 53.168224][ T3505] do_one_initcall+0x22b/0x7a0 [ 53.173154][ T3505] do_initcall_level+0x157/0x207 [ 53.178094][ T3505] do_initcalls+0x49/0x86 [ 53.182411][ T3505] page last free stack trace: [ 53.187065][ T3505] free_unref_page_prepare+0xc34/0xcf0 [ 53.192509][ T3505] free_unref_page+0x95/0x2d0 [ 53.197178][ T3505] __vunmap+0x8d4/0xa20 [ 53.201323][ T3505] free_work+0x57/0x80 [ 53.205380][ T3505] process_one_work+0x8a1/0x10c0 [ 53.210308][ T3505] worker_thread+0xaca/0x1280 [ 53.214973][ T3505] kthread+0x3f6/0x4f0 [ 53.219210][ T3505] ret_from_fork+0x1f/0x30 [ 53.223704][ T3505] [ 53.226014][ T3505] Memory state around the buggy address: [ 53.231669][ T3505] ffff88802418d580: 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 53.239721][ T3505] ffff88802418d600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 53.247768][ T3505] >ffff88802418d680: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 53.255813][ T3505] ^ [ 53.261955][ T3505] ffff88802418d700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 53.270007][ T3505] ffff88802418d780: 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 53.278061][ T3505] ================================================================== [ 53.286121][ T3505] Disabling lock debugging due to kernel taint [ 53.292503][ T3505] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 53.299794][ T3505] CPU: 0 PID: 3505 Comm: syz-executor197 Tainted: G B 5.15.118-syzkaller #0 [ 53.309783][ T3505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 53.319828][ T3505] Call Trace: [ 53.323096][ T3505] <TASK> [ 53.326014][ T3505] dump_stack_lvl+0x1e3/0x2cb [ 53.330861][ T3505] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 53.336485][ T3505] ? panic+0x84d/0x84d [ 53.340538][ T3505] ? rcu_is_watching+0x11/0xa0 [ 53.345294][ T3505] ? preempt_schedule_common+0xa6/0xd0 [ 53.350747][ T3505] panic+0x318/0x84d [ 53.354811][ T3505] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 53.360954][ T3505] ? check_panic_on_warn+0x1d/0xa0 [ 53.366075][ T3505] ? fb_is_primary_device+0xcc/0xcc [ 53.371260][ T3505] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 53.377230][ T3505] ? _raw_spin_unlock+0x40/0x40 [ 53.382070][ T3505] check_panic_on_warn+0x7e/0xa0 [ 53.387006][ T3505] ? hfsplus_bnode_read+0x85/0x1c0 [ 53.392119][ T3505] end_report+0x6d/0xf0 [ 53.396267][ T3505] kasan_report+0x18e/0x1c0 [ 53.400760][ T3505] ? hfsplus_bnode_read+0x85/0x1c0 [ 53.405864][ T3505] hfsplus_bnode_read+0x85/0x1c0 [ 53.410791][ T3505] hfsplus_bnode_dump+0x3f7/0x7c0 [ 53.415809][ T3505] ? hfsplus_bnode_move+0xa80/0xa80 [ 53.420996][ T3505] ? hfsplus_bnode_write_u16+0x97/0xf0 [ 53.426445][ T3505] ? rcu_is_watching+0x11/0xa0 [ 53.431195][ T3505] ? hfsplus_bnode_move+0x355/0xa80 [ 53.436394][ T3505] ? __mark_inode_dirty+0x3dd/0xd60 [ 53.441579][ T3505] hfsplus_brec_remove+0x428/0x4e0 [ 53.446686][ T3505] __hfsplus_delete_attr+0x271/0x450 [ 53.451966][ T3505] ? hfsplus_delete_attr+0x4a0/0x4a0 [ 53.457242][ T3505] ? mutex_lock_nested+0x17/0x20 [ 53.462174][ T3505] hfsplus_delete_all_attrs+0x267/0x3c0 [ 53.467711][ T3505] ? ktime_get_coarse_real_ts64+0x107/0x120 [ 53.473597][ T3505] ? __hfsplus_delete_attr+0x450/0x450 [ 53.479050][ T3505] ? current_time+0x1d1/0x2f0 [ 53.483718][ T3505] ? rcu_is_watching+0x11/0xa0 [ 53.488468][ T3505] ? __mark_inode_dirty+0x3dd/0xd60 [ 53.493654][ T3505] hfsplus_delete_cat+0xb83/0xfb0 [ 53.498670][ T3505] ? hfsplus_mark_inode_dirty+0x30/0x30 [ 53.504207][ T3505] ? mutex_lock_io_nested+0x60/0x60 [ 53.509396][ T3505] ? read_lock_is_recursive+0x10/0x10 [ 53.514767][ T3505] hfsplus_unlink+0x35f/0x7f0 [ 53.519441][ T3505] ? end_current_label_crit_section+0x147/0x170 [ 53.525678][ T3505] ? hfsplus_link+0x840/0x840 [ 53.530344][ T3505] ? down_write+0x10e/0x170 [ 53.534847][ T3505] ? bpf_lsm_inode_unlink+0x5/0x10 [ 53.539948][ T3505] ? security_inode_unlink+0xca/0x110 [ 53.545310][ T3505] vfs_unlink+0x359/0x5f0 [ 53.549634][ T3505] do_unlinkat+0x49d/0x940 [ 53.554044][ T3505] ? fsnotify_link_count+0xf0/0xf0 [ 53.559144][ T3505] ? strncpy_from_user+0x209/0x370 [ 53.564259][ T3505] __x64_sys_unlink+0x45/0x50 [ 53.568928][ T3505] do_syscall_64+0x3d/0xb0 [ 53.573335][ T3505] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 53.579389][ T3505] RIP: 0033:0x7fe7aa380799 [ 53.583800][ T3505] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 53.603398][ T3505] RSP: 002b:00007ffe5fe759b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 53.611801][ T3505] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe7aa380799 [ 53.619857][ T3505] RDX: 00007fe7aa33ee13 RSI: 0000000000000000 RDI: 0000000020000000 [ 53.627834][ T3505] RBP: 00007fe7aa340030 R08: 000000000000066d R09: 0000000000000000 [ 53.635794][ T3505] R10: 00007ffe5fe75880 R11: 0000000000000246 R12: 00007fe7aa3400c0 [ 53.643753][ T3505] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 53.651804][ T3505] </TASK> [ 53.654988][ T3505] Kernel Offset: disabled [ 53.659313][ T3505] Rebooting in 86400 seconds..