Warning: Permanently added '10.128.0.128' (ED25519) to the list of known hosts. 1970/01/01 00:00:43 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:00:44 parsed 1 programs [ 47.093495][ T4039] cgroup: Unknown subsys name 'net' [ 47.368491][ T4039] cgroup: Unknown subsys name 'rlimit' [ 47.738301][ T4039] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 57.063657][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.065857][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.068732][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.094880][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.097138][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.099869][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.728153][ T4098] chnl_net:caif_netlink_parms(): no params data found [ 57.771304][ T4098] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.773403][ T4098] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.776124][ T4098] device bridge_slave_0 entered promiscuous mode [ 57.780517][ T4098] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.783346][ T4098] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.786154][ T4098] device bridge_slave_1 entered promiscuous mode [ 57.804430][ T4098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.809131][ T4098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.825671][ T4098] team0: Port device team_slave_0 added [ 57.829395][ T4098] team0: Port device team_slave_1 added [ 57.845415][ T4098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.847597][ T4098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.855137][ T4098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.859730][ T4098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.861896][ T4098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.869319][ T4098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.933427][ T4098] device hsr_slave_0 entered promiscuous mode [ 57.971483][ T4098] device hsr_slave_1 entered promiscuous mode [ 58.114852][ T4098] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.173877][ T4098] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.214582][ T4098] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.232841][ T4098] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.287035][ T4098] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.289190][ T4098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.291742][ T4098] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.293701][ T4098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.335407][ T4098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.343548][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.347296][ T557] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.350295][ T557] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.357592][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 58.368697][ T4098] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.375053][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.377806][ T557] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.379733][ T557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.385633][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.388278][ T557] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.390215][ T557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.405319][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.408069][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.417723][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.424773][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.430297][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.436170][ T4098] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.518468][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.520692][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.529731][ T4098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.544574][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.558528][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.562104][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.564741][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.569643][ T4098] device veth0_vlan entered promiscuous mode [ 58.577277][ T4098] device veth1_vlan entered promiscuous mode [ 58.592721][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.595446][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.598258][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.603595][ T4098] device veth0_macvtap entered promiscuous mode [ 58.608256][ T4098] device veth1_macvtap entered promiscuous mode [ 58.621917][ T4098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.624247][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.627606][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.636192][ T4098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.638611][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.644798][ T4098] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.647283][ T4098] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.649668][ T4098] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.652712][ T4098] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:00:59 executed programs: 0 [ 59.270445][ T4145] chnl_net:caif_netlink_parms(): no params data found [ 59.306988][ T4145] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.308950][ T4145] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.312154][ T4145] device bridge_slave_0 entered promiscuous mode [ 59.317200][ T4145] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.319293][ T4145] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.322462][ T4145] device bridge_slave_1 entered promiscuous mode [ 59.338385][ T4145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.344254][ T4145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.360203][ T4145] team0: Port device team_slave_0 added [ 59.363907][ T4145] team0: Port device team_slave_1 added [ 59.378640][ T4145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.380723][ T4145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.388864][ T4145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.395423][ T4145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.397268][ T4145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.404655][ T4145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.493174][ T4145] device hsr_slave_0 entered promiscuous mode [ 59.541449][ T4145] device hsr_slave_1 entered promiscuous mode [ 59.581195][ T4145] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.583449][ T4145] Cannot create hsr debugfs directory [ 59.651038][ T4145] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.151542][ T4111] Bluetooth: hci0: command 0x0409 tx timeout [ 62.138907][ T4145] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.231022][ T4108] Bluetooth: hci0: command 0x041b tx timeout [ 64.040166][ T4145] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.114685][ T4145] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.298716][ T4145] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.383293][ T4145] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.423195][ T4145] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.493820][ T4145] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.582277][ T4145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.590435][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.593273][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.598176][ T4145] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.608222][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.611303][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.613903][ T557] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.615922][ T557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.627899][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.630868][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.634172][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.636776][ T557] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.638783][ T557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.645490][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.658141][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.664466][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.667721][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.670478][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.673620][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.676486][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.688823][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.691632][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.694488][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.697588][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.702397][ T4145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.804433][ T4145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.807424][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.809508][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.825855][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.828653][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.848663][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.851520][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.855918][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.858513][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.862698][ T4145] device veth0_vlan entered promiscuous mode [ 64.871639][ T4145] device veth1_vlan entered promiscuous mode [ 64.886448][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.889110][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.892393][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.895445][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.906620][ T4145] device veth0_macvtap entered promiscuous mode [ 64.911383][ T4145] device veth1_macvtap entered promiscuous mode [ 64.920719][ T4145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.925445][ T4145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.929599][ T4145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.932895][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.935824][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.938388][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.942455][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.946940][ T4145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.949842][ T4145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.956348][ T4145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.958500][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.963224][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.973513][ T4145] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.975926][ T4145] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.978288][ T4145] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.980818][ T4145] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.047662][ T557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.050018][ T557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.054018][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.073182][ T332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.075372][ T332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.078242][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.137779][ T4163] loop0: detected capacity change from 0 to 1024 [ 65.259305][ T4163] hfsplus: request for non-existent node 128 in B*Tree [ 65.262791][ T4163] hfsplus: request for non-existent node 128 in B*Tree [ 65.267344][ T4163] ================================================================== [ 65.269647][ T4163] BUG: KASAN: slab-out-of-bounds in hfsplus_bnode_read+0x84/0x21c [ 65.271782][ T4163] Read of size 8 at addr ffff0000cd14b2c0 by task syz.0.16/4163 [ 65.273857][ T4163] [ 65.274488][ T4163] CPU: 1 PID: 4163 Comm: syz.0.16 Not tainted 5.15.187-syzkaller #0 [ 65.276643][ T4163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 65.279371][ T4163] Call trace: [ 65.280258][ T4163] dump_backtrace+0x0/0x43c [ 65.281528][ T4163] show_stack+0x2c/0x3c [ 65.282677][ T4163] __dump_stack+0x30/0x40 [ 65.283850][ T4163] dump_stack_lvl+0xf8/0x160 [ 65.285118][ T4163] print_address_description+0x78/0x30c [ 65.286662][ T4163] kasan_report+0xec/0x15c [ 65.287872][ T4163] __asan_report_load8_noabort+0x44/0x50 [ 65.289396][ T4163] hfsplus_bnode_read+0x84/0x21c [ 65.290709][ T4163] hfsplus_bnode_dump+0x26c/0x37c [ 65.292050][ T4163] hfsplus_brec_remove+0x3cc/0x4a0 [ 65.293410][ T4163] __hfsplus_delete_attr+0x198/0x350 [ 65.294880][ T4163] hfsplus_delete_all_attrs+0x204/0x33c [ 65.296428][ T4163] hfsplus_delete_cat+0x844/0xbb0 [ 65.297816][ T4163] hfsplus_unlink+0x2a0/0x664 [ 65.299216][ T4163] vfs_unlink+0x2e0/0x4f4 [ 65.300477][ T4163] do_unlinkat+0x31c/0x600 [ 65.301710][ T4163] __arm64_sys_unlinkat+0xe0/0xfc [ 65.303149][ T4163] invoke_syscall+0x98/0x2b8 [ 65.304488][ T4163] el0_svc_common+0x138/0x258 [ 65.305776][ T4163] do_el0_svc+0x58/0x14c [ 65.306950][ T4163] el0_svc+0x78/0x1e0 [ 65.308081][ T4163] el0t_64_sync_handler+0xcc/0xe4 [ 65.309556][ T4163] el0t_64_sync+0x1a0/0x1a4 [ 65.310793][ T4163] [ 65.311443][ T4163] Allocated by task 4163: [ 65.312610][ T4163] __kasan_kmalloc+0xb0/0xf0 [ 65.313998][ T4163] __kmalloc+0x298/0x44c [ 65.315197][ T4163] __hfs_bnode_create+0xe4/0x84c [ 65.316595][ T4163] hfsplus_bnode_find+0x1f8/0xbcc [ 65.317895][ T4163] hfsplus_brec_find+0x128/0x448 [ 65.319324][ T4163] hfsplus_delete_all_attrs+0x1e0/0x33c [ 65.320906][ T4163] hfsplus_delete_cat+0x844/0xbb0 [ 65.322315][ T4163] hfsplus_unlink+0x2a0/0x664 [ 65.323605][ T4163] vfs_unlink+0x2e0/0x4f4 [ 65.324745][ T4163] do_unlinkat+0x31c/0x600 [ 65.325946][ T4163] __arm64_sys_unlinkat+0xe0/0xfc [ 65.327382][ T4163] invoke_syscall+0x98/0x2b8 [ 65.328634][ T4163] el0_svc_common+0x138/0x258 [ 65.329888][ T4163] do_el0_svc+0x58/0x14c [ 65.331195][ T4163] el0_svc+0x78/0x1e0 [ 65.332351][ T4163] el0t_64_sync_handler+0xcc/0xe4 [ 65.333817][ T4163] el0t_64_sync+0x1a0/0x1a4 [ 65.335106][ T4163] [ 65.335787][ T4163] The buggy address belongs to the object at ffff0000cd14b200 [ 65.335787][ T4163] which belongs to the cache kmalloc-256 of size 256 [ 65.339921][ T4163] The buggy address is located 192 bytes inside of [ 65.339921][ T4163] 256-byte region [ffff0000cd14b200, ffff0000cd14b300) [ 65.343773][ T4163] The buggy address belongs to the page: [ 65.345336][ T4163] page:000000000b77b4a2 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10d14a [ 65.348126][ T4163] head:000000000b77b4a2 order:1 compound_mapcount:0 [ 65.349931][ T4163] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 65.352236][ T4163] raw: 05ffc00000010200 0000000000000000 dead000000000122 ffff0000c0002480 [ 65.354590][ T4163] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 65.356909][ T4163] page dumped because: kasan: bad access detected [ 65.358609][ T4163] [ 65.359233][ T4163] Memory state around the buggy address: [ 65.360804][ T4163] ffff0000cd14b180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 65.362969][ T4163] ffff0000cd14b200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 65.365198][ T4163] >ffff0000cd14b280: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 65.367378][ T4163] ^ [ 65.369090][ T4163] ffff0000cd14b300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 65.371336][ T4163] ffff0000cd14b380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 65.373575][ T4163] ================================================================== [ 65.375737][ T4163] Disabling lock debugging due to kernel taint [ 65.378587][ T1959] Bluetooth: hci0: command 0x040f tx timeout [ 65.380853][ T4163] Unable to handle kernel paging request at virtual address ffff7880000083ff [ 65.383254][ T4163] Mem abort info: [ 65.384216][ T4163] ESR = 0x0000000096000004 [ 65.385438][ T4163] EC = 0x25: DABT (current EL), IL = 32 bits [ 65.387063][ T4163] SET = 0, FnV = 0 [ 65.388160][ T4163] EA = 0, S1PTW = 0 [ 65.389213][ T4163] FSC = 0x04: level 0 translation fault [ 65.390757][ T4163] Data abort info: [ 65.392159][ T4163] ISV = 0, ISS = 0x00000004 [ 65.393479][ T4163] CM = 0, WnR = 0 [ 65.394486][ T4163] swapper pgtable: 4k pages, 48-bit VAs, pgdp=00000002113cd000 [ 65.396579][ T4163] [ffff7880000083ff] pgd=0000000000000000, p4d=0000000000000000 [ 65.398585][ T4163] Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP [ 65.400577][ T4163] Modules linked in: [ 65.401591][ T4163] CPU: 1 PID: 4163 Comm: syz.0.16 Tainted: G B 5.15.187-syzkaller #0 [ 65.404178][ T4163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 65.406909][ T4163] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 65.409090][ T4163] pc : kasan_check_range+0x74/0x2b0 [ 65.410482][ T4163] lr : memcpy+0x90/0xe8 [ 65.411646][ T4163] sp : ffff80001f667470 [ 65.412931][ T4163] x29: ffff80001f667470 x28: 1fffe00019a29643 x27: ffff80001f667540 [ 65.415138][ T4163] x26: 0000000040000000 x25: 1ffff0000276e080 x24: dfff800000000000 [ 65.417319][ T4163] x23: ffff8000167b9000 x22: ffff800008ebe0b8 x21: ffff80001f667560 [ 65.419555][ T4163] x20: ffffc40000041fff x19: 0000000000000001 x18: 0000000000000000 [ 65.421735][ T4163] x17: 0000000000000000 x16: ffff800008ebfeb0 x15: 00000000000000ff [ 65.423931][ T4163] x14: 0000000000ff0100 x13: ffffffffffffffff x12: 0000000000000001 [ 65.426234][ T4163] x11: 1ffff880000083ff x10: 1ffff880000083ff x9 : ffffffffffffffff [ 65.428478][ T4163] x8 : ffff7880000083ff x7 : 0000000000000000 x6 : 00000000000000ff [ 65.430696][ T4163] x5 : ffff80001f667582 x4 : ffff0000e928400c x3 : ffff800008ebe0b8 [ 65.432802][ T4163] x2 : 0000000000000000 x1 : 0000000000000001 x0 : ffffc40000041fff [ 65.434931][ T4163] Call trace: [ 65.435833][ T4163] kasan_check_range+0x74/0x2b0 [ 65.437186][ T4163] memcpy+0x90/0xe8 [ 65.438250][ T4163] hfsplus_bnode_read+0x10c/0x21c [ 65.439571][ T4163] hfsplus_bnode_dump+0x26c/0x37c [ 65.440894][ T4163] hfsplus_brec_remove+0x3cc/0x4a0 [ 65.442324][ T4163] __hfsplus_delete_attr+0x198/0x350 [ 65.443726][ T4163] hfsplus_delete_all_attrs+0x204/0x33c [ 65.445211][ T4163] hfsplus_delete_cat+0x844/0xbb0 [ 65.446549][ T4163] hfsplus_unlink+0x2a0/0x664 [ 65.447800][ T4163] vfs_unlink+0x2e0/0x4f4 [ 65.449038][ T4163] do_unlinkat+0x31c/0x600 [ 65.450192][ T4163] __arm64_sys_unlinkat+0xe0/0xfc [ 65.451601][ T4163] invoke_syscall+0x98/0x2b8 [ 65.452851][ T4163] el0_svc_common+0x138/0x258 [ 65.454122][ T4163] do_el0_svc+0x58/0x14c [ 65.455270][ T4163] el0_svc+0x78/0x1e0 [ 65.456341][ T4163] el0t_64_sync_handler+0xcc/0xe4 [ 65.457634][ T4163] el0t_64_sync+0x1a0/0x1a4 [ 65.458869][ T4163] Code: 5400014c b4000b8c aa2a03e9 8b0b0129 (3940010a) [ 65.460761][ T4163] ---[ end trace f6f02862675bb0c9 ]--- [ 65.790700][ T4163] Kernel panic - not syncing: Oops: Fatal exception [ 65.792556][ T4163] SMP: stopping secondary CPUs [ 65.793840][ T4163] Kernel Offset: disabled [ 65.794988][ T4163] CPU features: 0x8,000081c1,21302e40 [ 65.796435][ T4163] Memory Limit: none [ 66.092879][ T4163] Rebooting in 86400 seconds..