Warning: Permanently added '10.128.1.9' (ED25519) to the list of known hosts. executing program [ 35.289542][ T4290] loop0: detected capacity change from 0 to 1024 [ 35.302683][ T4290] hfsplus: request for non-existent node 211 in B*Tree [ 35.304577][ T4290] hfsplus: request for non-existent node 211 in B*Tree [ 35.306954][ T4290] ================================================================== [ 35.308883][ T4290] BUG: KASAN: slab-out-of-bounds in hfsplus_bnode_read+0x9c/0x270 [ 35.310973][ T4290] Read of size 8 at addr ffff0000c08644e0 by task syz-executor136/4290 [ 35.313260][ T4290] [ 35.313914][ T4290] CPU: 1 PID: 4290 Comm: syz-executor136 Not tainted 6.1.129-syzkaller #0 [ 35.316205][ T4290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 35.318829][ T4290] Call trace: [ 35.319664][ T4290] dump_backtrace+0x1c8/0x1f4 [ 35.320876][ T4290] show_stack+0x2c/0x3c [ 35.321994][ T4290] dump_stack_lvl+0x108/0x170 [ 35.323250][ T4290] print_report+0x174/0x4c0 [ 35.324448][ T4290] kasan_report+0xd4/0x130 [ 35.325670][ T4290] __asan_report_load8_noabort+0x2c/0x38 [ 35.327175][ T4290] hfsplus_bnode_read+0x9c/0x270 [ 35.328515][ T4290] hfsplus_bnode_dump+0x2ec/0x534 [ 35.329889][ T4290] hfsplus_brec_remove+0x3d0/0x4a4 [ 35.331209][ T4290] __hfsplus_delete_attr+0x1dc/0x3e4 [ 35.332605][ T4290] hfsplus_delete_attr+0x234/0x2c8 [ 35.333975][ T4290] __hfsplus_setxattr+0x3b8/0x1d3c [ 35.335355][ T4290] hfsplus_setxattr+0xdc/0x12c [ 35.336648][ T4290] hfsplus_trusted_setxattr+0x54/0x6c [ 35.338079][ T4290] __vfs_setxattr+0x388/0x3a4 [ 35.339362][ T4290] __vfs_setxattr_noperm+0x110/0x528 [ 35.340739][ T4290] __vfs_setxattr_locked+0x1ec/0x218 [ 35.342129][ T4290] vfs_setxattr+0x1a8/0x344 [ 35.343324][ T4290] setxattr+0x230/0x294 [ 35.344527][ T4290] path_setxattr+0x17c/0x258 [ 35.345697][ T4290] __arm64_sys_setxattr+0xbc/0xd8 [ 35.347062][ T4290] invoke_syscall+0x98/0x2bc [ 35.348275][ T4290] el0_svc_common+0x138/0x258 [ 35.349486][ T4290] do_el0_svc+0x58/0x13c [ 35.350652][ T4290] el0_svc+0x58/0x168 [ 35.351794][ T4290] el0t_64_sync_handler+0x84/0xf0 [ 35.353096][ T4290] el0t_64_sync+0x18c/0x190 [ 35.354198][ T4290] [ 35.354779][ T4290] Allocated by task 4290: [ 35.355918][ T4290] kasan_set_track+0x4c/0x80 [ 35.357193][ T4290] kasan_save_alloc_info+0x24/0x30 [ 35.358514][ T4290] __kasan_kmalloc+0xac/0xc4 [ 35.359747][ T4290] __kmalloc+0xd8/0x1c4 [ 35.360804][ T4290] __hfs_bnode_create+0xe4/0x6d4 [ 35.362072][ T4290] hfsplus_bnode_find+0x1f8/0xc60 [ 35.363342][ T4290] hfsplus_brec_find+0x134/0x4a0 [ 35.364596][ T4290] hfsplus_find_attr+0x13c/0x1e0 [ 35.365987][ T4290] hfsplus_attr_exists+0x154/0x1c8 [ 35.367366][ T4290] __hfsplus_setxattr+0x384/0x1d3c [ 35.368754][ T4290] hfsplus_setxattr+0xdc/0x12c [ 35.370039][ T4290] hfsplus_trusted_setxattr+0x54/0x6c [ 35.371475][ T4290] __vfs_setxattr+0x388/0x3a4 [ 35.372778][ T4290] __vfs_setxattr_noperm+0x110/0x528 [ 35.374185][ T4290] __vfs_setxattr_locked+0x1ec/0x218 [ 35.375551][ T4290] vfs_setxattr+0x1a8/0x344 [ 35.376831][ T4290] setxattr+0x230/0x294 [ 35.377903][ T4290] path_setxattr+0x17c/0x258 [ 35.379196][ T4290] __arm64_sys_setxattr+0xbc/0xd8 [ 35.380581][ T4290] invoke_syscall+0x98/0x2bc [ 35.381881][ T4290] el0_svc_common+0x138/0x258 [ 35.383086][ T4290] do_el0_svc+0x58/0x13c [ 35.384228][ T4290] el0_svc+0x58/0x168 [ 35.385380][ T4290] el0t_64_sync_handler+0x84/0xf0 [ 35.386827][ T4290] el0t_64_sync+0x18c/0x190 [ 35.388034][ T4290] [ 35.388649][ T4290] The buggy address belongs to the object at ffff0000c0864400 [ 35.388649][ T4290] which belongs to the cache kmalloc-256 of size 256 [ 35.392277][ T4290] The buggy address is located 224 bytes inside of [ 35.392277][ T4290] 256-byte region [ffff0000c0864400, ffff0000c0864500) [ 35.395801][ T4290] [ 35.396397][ T4290] The buggy address belongs to the physical page: [ 35.398172][ T4290] page:000000001e034d97 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x100864 [ 35.400927][ T4290] head:000000001e034d97 order:1 compound_mapcount:0 compound_pincount:0 [ 35.403149][ T4290] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 35.405220][ T4290] raw: 05ffc00000010200 fffffc0003021980 dead000000000003 ffff0000c0002480 [ 35.407498][ T4290] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 35.409785][ T4290] page dumped because: kasan: bad access detected [ 35.411499][ T4290] [ 35.412103][ T4290] Memory state around the buggy address: [ 35.413626][ T4290] ffff0000c0864380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 35.415818][ T4290] ffff0000c0864400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 35.417918][ T4290] >ffff0000c0864480: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 35.420002][ T4290] ^ [ 35.421931][ T4290] ffff0000c0864500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 35.424017][ T4290] ffff0000c0864580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 35.426141][ T4290] ================================================================== [ 35.429886][ T4290] Disabling lock debugging due to kernel taint [ 35.431545][ T4290] Unable to handle kernel paging request at virtual address ffff75080000880f [ 35.433720][ T4290] KASAN: maybe wild-memory-access in range [0xffffa84000044078-0xffffa8400004407f] [ 35.436045][ T4290] Mem abort info: [ 35.436933][ T4290] ESR = 0x0000000096000004 [ 35.438128][ T4290] EC = 0x25: DABT (current EL), IL = 32 bits [ 35.439609][ T4290] SET = 0, FnV = 0 [ 35.440596][ T4290] EA = 0, S1PTW = 0 [ 35.441656][ T4290] FSC = 0x04: level 0 translation fault [ 35.443065][ T4290] Data abort info: [ 35.444011][ T4290] ISV = 0, ISS = 0x00000004 [ 35.445135][ T4290] CM = 0, WnR = 0 [ 35.446097][ T4290] swapper pgtable: 4k pages, 48-bit VAs, pgdp=00000001ab074000 [ 35.448099][ T4290] [ffff75080000880f] pgd=0000000000000000, p4d=0000000000000000 [ 35.450016][ T4290] Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP [ 35.451857][ T4290] Modules linked in: [ 35.452903][ T4290] CPU: 1 PID: 4290 Comm: syz-executor136 Tainted: G B 6.1.129-syzkaller #0 [ 35.455535][ T4290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 35.458199][ T4290] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 35.460272][ T4290] pc : kasan_check_range+0x64/0x2a4 [ 35.461550][ T4290] lr : memcpy+0x48/0x90 [ 35.462635][ T4290] sp : ffff800021096df0 [ 35.463749][ T4290] x29: ffff800021096df0 x28: 0000000000000001 x27: 0000000040000000 [ 35.465866][ T4290] x26: 1ffff00002a9d86b x25: 0000000000000fff x24: 0000000000001000 [ 35.467974][ T4290] x23: 0000000000000001 x22: ffff800009084cf0 x21: ffff800021096f00 [ 35.469969][ T4290] x20: ffffa8400004407f x19: 0000000000000001 x18: 1fffe0003679cb76 [ 35.472075][ T4290] x17: 0000000000000000 x16: ffff80001226f180 x15: 0000000000000000 [ 35.474147][ T4290] x14: 00000000000000ff x13: ffff0000dea7b780 x12: 0000000000000001 [ 35.476257][ T4290] x11: 1ffff5080000880f x10: 1ffff5080000880f x9 : ffffffffffffffff [ 35.478394][ T4290] x8 : ffff75080000880f x7 : 0000000000000001 x6 : 00000000000000ff [ 35.480434][ T4290] x5 : ffff800021096f22 x4 : ffff0000e354c00c x3 : ffff800009084cf0 [ 35.482537][ T4290] x2 : 0000000000000000 x1 : 0000000000000001 x0 : ffffa8400004407f [ 35.484597][ T4290] Call trace: [ 35.485463][ T4290] kasan_check_range+0x64/0x2a4 [ 35.486720][ T4290] memcpy+0x48/0x90 [ 35.487731][ T4290] hfsplus_bnode_read+0x134/0x270 [ 35.489091][ T4290] hfsplus_bnode_dump+0x2ec/0x534 [ 35.490341][ T4290] hfsplus_brec_remove+0x3d0/0x4a4 [ 35.491611][ T4290] __hfsplus_delete_attr+0x1dc/0x3e4 [ 35.492913][ T4290] hfsplus_delete_attr+0x234/0x2c8 [ 35.494261][ T4290] __hfsplus_setxattr+0x3b8/0x1d3c [ 35.495570][ T4290] hfsplus_setxattr+0xdc/0x12c [ 35.496812][ T4290] hfsplus_trusted_setxattr+0x54/0x6c [ 35.498198][ T4290] __vfs_setxattr+0x388/0x3a4 [ 35.499372][ T4290] __vfs_setxattr_noperm+0x110/0x528 [ 35.500714][ T4290] __vfs_setxattr_locked+0x1ec/0x218 [ 35.502027][ T4290] vfs_setxattr+0x1a8/0x344 [ 35.503126][ T4290] setxattr+0x230/0x294 [ 35.504192][ T4290] path_setxattr+0x17c/0x258 [ 35.505423][ T4290] __arm64_sys_setxattr+0xbc/0xd8 [ 35.506716][ T4290] invoke_syscall+0x98/0x2bc [ 35.507874][ T4290] el0_svc_common+0x138/0x258 [ 35.509115][ T4290] do_el0_svc+0x58/0x13c [ 35.510255][ T4290] el0_svc+0x58/0x168 [ 35.511295][ T4290] el0t_64_sync_handler+0x84/0xf0 [ 35.512732][ T4290] el0t_64_sync+0x18c/0x190 [ 35.514033][ T4290] Code: 5400014c b4000b8c aa2a03e9 8b0b0129 (3940010a) [ 35.515927][ T4290] ---[ end trace 0000000000000000 ]--- [ 35.803966][ T4290] Kernel panic - not syncing: Oops: Fatal exception [ 35.805676][ T4290] SMP: stopping secondary CPUs [ 35.806975][ T4290] Kernel Offset: disabled [ 35.808041][ T4290] CPU features: 0x080000,02070084,26017203 [ 35.809565][ T4290] Memory Limit: none [ 36.081763][ T4290] Rebooting in 86400 seconds..