Warning: Permanently added '10.128.1.5' (ED25519) to the list of known hosts. executing program [ 36.920739][ T4291] loop0: detected capacity change from 0 to 1024 [ 36.937710][ T4291] hfsplus: request for non-existent node 211 in B*Tree [ 36.939623][ T4291] hfsplus: request for non-existent node 211 in B*Tree [ 36.942521][ T4291] ================================================================== [ 36.944710][ T4291] BUG: KASAN: slab-out-of-bounds in hfsplus_bnode_read+0x9c/0x270 [ 36.946823][ T4291] Read of size 8 at addr ffff0000c08846e0 by task syz-executor288/4291 [ 36.948947][ T4291] [ 36.949544][ T4291] CPU: 1 PID: 4291 Comm: syz-executor288 Not tainted 6.1.129-syzkaller #0 [ 36.951837][ T4291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 36.954591][ T4291] Call trace: [ 36.955430][ T4291] dump_backtrace+0x1c8/0x1f4 [ 36.956716][ T4291] show_stack+0x2c/0x3c [ 36.957791][ T4291] dump_stack_lvl+0x108/0x170 [ 36.959101][ T4291] print_report+0x174/0x4c0 [ 36.960302][ T4291] kasan_report+0xd4/0x130 [ 36.961437][ T4291] __asan_report_load8_noabort+0x2c/0x38 [ 36.962898][ T4291] hfsplus_bnode_read+0x9c/0x270 [ 36.964324][ T4291] hfsplus_bnode_dump+0x2ec/0x534 [ 36.965633][ T4291] hfsplus_brec_remove+0x3d0/0x4a4 [ 36.966928][ T4291] __hfsplus_delete_attr+0x1dc/0x3e4 [ 36.968311][ T4291] hfsplus_delete_attr+0x234/0x2c8 [ 36.969625][ T4291] __hfsplus_setxattr+0x3b8/0x1d3c [ 36.971009][ T4291] hfsplus_setxattr+0xdc/0x12c [ 36.972213][ T4291] hfsplus_trusted_setxattr+0x54/0x6c [ 36.973649][ T4291] __vfs_setxattr+0x388/0x3a4 [ 36.974930][ T4291] __vfs_setxattr_noperm+0x110/0x528 [ 36.976344][ T4291] __vfs_setxattr_locked+0x1ec/0x218 [ 36.977727][ T4291] vfs_setxattr+0x1a8/0x344 [ 36.978870][ T4291] setxattr+0x230/0x294 [ 36.979944][ T4291] path_setxattr+0x17c/0x258 [ 36.981165][ T4291] __arm64_sys_setxattr+0xbc/0xd8 [ 36.982417][ T4291] invoke_syscall+0x98/0x2bc [ 36.983651][ T4291] el0_svc_common+0x138/0x258 [ 36.984859][ T4291] do_el0_svc+0x58/0x13c [ 36.985978][ T4291] el0_svc+0x58/0x168 [ 36.986999][ T4291] el0t_64_sync_handler+0x84/0xf0 [ 36.988317][ T4291] el0t_64_sync+0x18c/0x190 [ 36.989540][ T4291] [ 36.990122][ T4291] Allocated by task 4291: [ 36.991341][ T4291] kasan_set_track+0x4c/0x80 [ 36.992524][ T4291] kasan_save_alloc_info+0x24/0x30 [ 36.993803][ T4291] __kasan_kmalloc+0xac/0xc4 [ 36.994979][ T4291] __kmalloc+0xd8/0x1c4 [ 36.996063][ T4291] __hfs_bnode_create+0xe4/0x6d4 [ 36.997329][ T4291] hfsplus_bnode_find+0x1f8/0xc60 [ 36.998655][ T4291] hfsplus_brec_find+0x134/0x4a0 [ 36.999897][ T4291] hfsplus_find_attr+0x13c/0x1e0 [ 37.001179][ T4291] hfsplus_attr_exists+0x154/0x1c8 [ 37.002492][ T4291] __hfsplus_setxattr+0x384/0x1d3c [ 37.003787][ T4291] hfsplus_setxattr+0xdc/0x12c [ 37.005037][ T4291] hfsplus_trusted_setxattr+0x54/0x6c [ 37.006405][ T4291] __vfs_setxattr+0x388/0x3a4 [ 37.007651][ T4291] __vfs_setxattr_noperm+0x110/0x528 [ 37.009081][ T4291] __vfs_setxattr_locked+0x1ec/0x218 [ 37.010435][ T4291] vfs_setxattr+0x1a8/0x344 [ 37.011564][ T4291] setxattr+0x230/0x294 [ 37.012621][ T4291] path_setxattr+0x17c/0x258 [ 37.013867][ T4291] __arm64_sys_setxattr+0xbc/0xd8 [ 37.015251][ T4291] invoke_syscall+0x98/0x2bc [ 37.016457][ T4291] el0_svc_common+0x138/0x258 [ 37.017695][ T4291] do_el0_svc+0x58/0x13c [ 37.018780][ T4291] el0_svc+0x58/0x168 [ 37.019860][ T4291] el0t_64_sync_handler+0x84/0xf0 [ 37.021137][ T4291] el0t_64_sync+0x18c/0x190 [ 37.022378][ T4291] [ 37.022959][ T4291] The buggy address belongs to the object at ffff0000c0884600 [ 37.022959][ T4291] which belongs to the cache kmalloc-256 of size 256 [ 37.026673][ T4291] The buggy address is located 224 bytes inside of [ 37.026673][ T4291] 256-byte region [ffff0000c0884600, ffff0000c0884700) [ 37.030178][ T4291] [ 37.030779][ T4291] The buggy address belongs to the physical page: [ 37.032461][ T4291] page:0000000014b960ba refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x100884 [ 37.035089][ T4291] head:0000000014b960ba order:1 compound_mapcount:0 compound_pincount:0 [ 37.037272][ T4291] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 37.039433][ T4291] raw: 05ffc00000010200 dead000000000100 dead000000000122 ffff0000c0002480 [ 37.041691][ T4291] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 37.043943][ T4291] page dumped because: kasan: bad access detected [ 37.045596][ T4291] [ 37.046207][ T4291] Memory state around the buggy address: [ 37.047694][ T4291] ffff0000c0884580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 37.049870][ T4291] ffff0000c0884600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 37.052012][ T4291] >ffff0000c0884680: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 37.054082][ T4291] ^ [ 37.055979][ T4291] ffff0000c0884700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 37.058168][ T4291] ffff0000c0884780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 37.060243][ T4291] ================================================================== [ 37.062626][ T4291] Disabling lock debugging due to kernel taint [ 37.064376][ T4291] Unable to handle kernel paging request at virtual address ffff74f800008817 [ 37.066711][ T4291] KASAN: maybe wild-memory-access in range [0xffffa7c0000440b8-0xffffa7c0000440bf] [ 37.069103][ T4291] Mem abort info: [ 37.070194][ T4291] ESR = 0x0000000096000004 [ 37.071340][ T4291] EC = 0x25: DABT (current EL), IL = 32 bits [ 37.073058][ T4291] SET = 0, FnV = 0 [ 37.074036][ T4291] EA = 0, S1PTW = 0 [ 37.075041][ T4291] FSC = 0x04: level 0 translation fault [ 37.076577][ T4291] Data abort info: [ 37.077483][ T4291] ISV = 0, ISS = 0x00000004 [ 37.078693][ T4291] CM = 0, WnR = 0 [ 37.079631][ T4291] swapper pgtable: 4k pages, 48-bit VAs, pgdp=00000001ab074000 [ 37.082157][ T4291] [ffff74f800008817] pgd=0000000000000000, p4d=0000000000000000 [ 37.084140][ T4291] Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP [ 37.085980][ T4291] Modules linked in: [ 37.086895][ T4291] CPU: 0 PID: 4291 Comm: syz-executor288 Tainted: G B 6.1.129-syzkaller #0 [ 37.089501][ T4291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 37.092202][ T4291] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 37.094283][ T4291] pc : kasan_check_range+0x64/0x2a4 [ 37.095709][ T4291] lr : memcpy+0x48/0x90 [ 37.096835][ T4291] sp : ffff800021286df0 [ 37.097894][ T4291] x29: ffff800021286df0 x28: 0000000000000001 x27: 0000000040000000 [ 37.100075][ T4291] x26: 1ffff00002a9d86b x25: 0000000000000fff x24: 0000000000001000 [ 37.102288][ T4291] x23: 0000000000000001 x22: ffff800009084cf0 x21: ffff800021286f00 [ 37.104435][ T4291] x20: ffffa7c0000440bf x19: 0000000000000001 x18: 1fffe00036798976 [ 37.106527][ T4291] x17: ffff800015aed000 x16: ffff80001226f180 x15: 0000000000000000 [ 37.108704][ T4291] x14: 00000000000000ff x13: ffff0000dea40000 x12: 0000000000000001 [ 37.110775][ T4291] x11: 1ffff4f800008817 x10: 1ffff4f800008817 x9 : ffffffffffffffff [ 37.112968][ T4291] x8 : ffff74f800008817 x7 : 1fffe00036798977 x6 : 00000000000000ff [ 37.115119][ T4291] x5 : ffff800021286f22 x4 : ffff000187e6100c x3 : ffff800009084cf0 [ 37.117202][ T4291] x2 : 0000000000000000 x1 : 0000000000000001 x0 : ffffa7c0000440bf [ 37.119288][ T4291] Call trace: [ 37.120104][ T4291] kasan_check_range+0x64/0x2a4 [ 37.121462][ T4291] memcpy+0x48/0x90 [ 37.122483][ T4291] hfsplus_bnode_read+0x134/0x270 [ 37.123814][ T4291] hfsplus_bnode_dump+0x2ec/0x534 [ 37.125176][ T4291] hfsplus_brec_remove+0x3d0/0x4a4 [ 37.126512][ T4291] __hfsplus_delete_attr+0x1dc/0x3e4 [ 37.127965][ T4291] hfsplus_delete_attr+0x234/0x2c8 [ 37.129326][ T4291] __hfsplus_setxattr+0x3b8/0x1d3c [ 37.130633][ T4291] hfsplus_setxattr+0xdc/0x12c [ 37.131897][ T4291] hfsplus_trusted_setxattr+0x54/0x6c [ 37.133262][ T4291] __vfs_setxattr+0x388/0x3a4 [ 37.134558][ T4291] __vfs_setxattr_noperm+0x110/0x528 [ 37.135945][ T4291] __vfs_setxattr_locked+0x1ec/0x218 [ 37.137363][ T4291] vfs_setxattr+0x1a8/0x344 [ 37.138550][ T4291] setxattr+0x230/0x294 [ 37.139686][ T4291] path_setxattr+0x17c/0x258 [ 37.140892][ T4291] __arm64_sys_setxattr+0xbc/0xd8 [ 37.142229][ T4291] invoke_syscall+0x98/0x2bc [ 37.143458][ T4291] el0_svc_common+0x138/0x258 [ 37.144750][ T4291] do_el0_svc+0x58/0x13c [ 37.145909][ T4291] el0_svc+0x58/0x168 [ 37.146928][ T4291] el0t_64_sync_handler+0x84/0xf0 [ 37.148278][ T4291] el0t_64_sync+0x18c/0x190 [ 37.149496][ T4291] Code: 5400014c b4000b8c aa2a03e9 8b0b0129 (3940010a) [ 37.151468][ T4291] ---[ end trace 0000000000000000 ]--- [ 37.447603][ T4291] Kernel panic - not syncing: Oops: Fatal exception [ 37.449426][ T4291] SMP: stopping secondary CPUs [ 37.450712][ T4291] Kernel Offset: disabled [ 37.451808][ T4291] CPU features: 0x080000,02070084,26017203 [ 37.453380][ T4291] Memory Limit: none [ 37.745112][ T4291] Rebooting in 86400 seconds..