program: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x0, @private2, @local, {[], "223407d5c9a46b9f"}}}}}, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000400)='./file1\x00', 0xa08802, &(0x7f0000000140)=ANY=[], 0x1, 0x693, &(0x7f0000000ec0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180), &(0x7f00000002c0)=ANY=[], 0xb2, 0x0) (async) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180), &(0x7f00000002c0)=ANY=[], 0xb2, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) [ 323.248951][ T5329] Bluetooth: hci0: command tx timeout [ 323.252317][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.254880][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.313971][ T30] kworker/u4:2 (30) used greatest stack depth: 18192 bytes left [ 323.326251][ T5342] loop0: detected capacity change from 0 to 1024 [ 323.355011][ T5342] hfsplus: request for non-existent node 211 in B*Tree [ 323.363901][ T5342] hfsplus: request for non-existent node 211 in B*Tree [ 323.366880][ T5343] ================================================================== [ 323.369454][ T5343] BUG: KASAN: wild-memory-access in hfsplus_bnode_dump+0x403/0xbb0 [ 323.372326][ T5343] Read of size 2 at addr 000508800000103e by task syz.0.0/5343 [ 323.375057][ T5343] [ 323.375812][ T5343] CPU: 0 UID: 0 PID: 5343 Comm: syz.0.0 Not tainted 6.13.0-rc1-syzkaller-00001-ge70140ba0d2b #0 [ 323.379234][ T5343] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 323.382811][ T5343] Call Trace: [ 323.384028][ T5343] [ 323.385160][ T5343] dump_stack_lvl+0x241/0x360 [ 323.386946][ T5343] ? __pfx_dump_stack_lvl+0x10/0x10 [ 323.388840][ T5343] ? __pfx__printk+0x10/0x10 [ 323.390495][ T5343] ? _printk+0xd5/0x120 [ 323.392082][ T5343] print_report+0xe8/0x550 [ 323.393781][ T5343] ? __virt_addr_valid+0x58/0x530 [ 323.395488][ T5343] ? hfsplus_bnode_dump+0x403/0xbb0 [ 323.397349][ T5343] kasan_report+0x143/0x180 [ 323.399029][ T5343] ? hfsplus_bnode_dump+0x403/0xbb0 [ 323.400967][ T5343] ? hfsplus_bnode_dump+0x403/0xbb0 [ 323.402715][ T5343] kasan_check_range+0x282/0x290 [ 323.404579][ T5343] ? hfsplus_bnode_dump+0x403/0xbb0 [ 323.406440][ T5343] __asan_memcpy+0x29/0x70 [ 323.408115][ T5343] hfsplus_bnode_dump+0x403/0xbb0 [ 323.409882][ T5343] ? __pfx_hfsplus_bnode_dump+0x10/0x10 [ 323.411938][ T5343] ? hfsplus_bnode_write_u16+0x9b/0xf0 [ 323.413906][ T5343] ? __pfx_hfsplus_bnode_write_u16+0x10/0x10 [ 323.416033][ T5343] ? rcu_is_watching+0x15/0xb0 [ 323.417713][ T5343] ? hfsplus_bnode_move+0x2da/0x910 [ 323.419609][ T5343] ? __mark_inode_dirty+0x3db/0xe90 [ 323.421528][ T5343] hfsplus_brec_remove+0x42c/0x4f0 [ 323.423567][ T5343] __hfsplus_delete_attr+0x275/0x450 [ 323.425526][ T5343] ? __pfx___hfsplus_delete_attr+0x10/0x10 [ 323.427613][ T5343] ? hfsplus_find_init+0x85/0x1c0 [ 323.429441][ T5343] hfsplus_delete_attr+0x353/0x4b0 [ 323.431435][ T5343] ? __pfx_hfsplus_delete_attr+0x10/0x10 [ 323.433612][ T5343] ? hfsplus_find_init+0x85/0x1c0 [ 323.435188][ T5343] ? hfsplus_find_init+0x14a/0x1c0 [ 323.436734][ T5343] __hfsplus_setxattr+0x4ad/0x22d0 [ 323.438405][ T5343] ? kernel_text_address+0xa7/0xe0 [ 323.440143][ T5343] ? arch_stack_walk+0xfd/0x150 [ 323.441863][ T5343] ? __pfx___hfsplus_setxattr+0x10/0x10 [ 323.443850][ T5343] ? stack_trace_save+0x118/0x1d0 [ 323.445719][ T5343] ? __pfx_stack_trace_save+0x10/0x10 [ 323.447634][ T5343] ? stack_depot_save_flags+0x29/0x830 [ 323.449675][ T5343] ? __kasan_kmalloc+0x98/0xb0 [ 323.451446][ T5343] ? __kmalloc_cache_noprof+0x243/0x390 [ 323.453481][ T5343] ? hfsplus_setxattr+0x68/0xe0 [ 323.455267][ T5343] hfsplus_setxattr+0xb0/0xe0 [ 323.456971][ T5343] hfsplus_trusted_setxattr+0x40/0x60 [ 323.458977][ T5343] ? __pfx_hfsplus_trusted_setxattr+0x10/0x10 [ 323.461229][ T5343] __vfs_setxattr+0x468/0x4a0 [ 323.463016][ T5343] __vfs_setxattr_noperm+0x12e/0x660 [ 323.464983][ T5343] vfs_setxattr+0x221/0x430 [ 323.466405][ T5343] ? __pfx_vfs_setxattr+0x10/0x10 [ 323.468147][ T5343] filename_setxattr+0x2af/0x430 [ 323.469977][ T5343] ? __pfx_filename_setxattr+0x10/0x10 [ 323.472051][ T5343] ? getname_flags+0x1e3/0x540 [ 323.473901][ T5343] path_setxattrat+0x440/0x510 [ 323.475587][ T5343] ? __pfx_path_setxattrat+0x10/0x10 [ 323.477465][ T5343] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 323.479436][ T5343] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 323.481665][ T5343] __x64_sys_lsetxattr+0xbf/0xe0 [ 323.485035][ T5343] do_syscall_64+0xf3/0x230 [ 323.486700][ T5343] ? clear_bhb_loop+0x35/0x90 [ 323.488461][ T5343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.490591][ T5343] RIP: 0033:0x7fadef97ff19 [ 323.492266][ T5343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.499372][ T5343] RSP: 002b:00007fadf077b058 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 323.502510][ T5343] RAX: ffffffffffffffda RBX: 00007fadefb46080 RCX: 00007fadef97ff19 [ 323.505544][ T5343] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000020000040 [ 323.508453][ T5343] RBP: 00007fadef9f3986 R08: 0000000000000000 R09: 0000000000000000 [ 323.511317][ T5343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.514294][ T5343] R13: 0000000000000000 R14: 00007fadefb46080 R15: 00007ffd0fb5d658 [ 323.517049][ T5343] [ 323.518200][ T5343] ================================================================== [ 323.533666][ T5343] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 323.536266][ T5343] CPU: 0 UID: 0 PID: 5343 Comm: syz.0.0 Not tainted 6.13.0-rc1-syzkaller-00001-ge70140ba0d2b #0 [ 323.539990][ T5343] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 323.543785][ T5343] Call Trace: [ 323.545065][ T5343] [ 323.546146][ T5343] dump_stack_lvl+0x241/0x360 [ 323.547864][ T5343] ? __pfx_dump_stack_lvl+0x10/0x10 [ 323.549895][ T5343] ? __pfx__printk+0x10/0x10 [ 323.551536][ T5343] ? preempt_schedule+0xe1/0xf0 [ 323.553464][ T5343] ? vscnprintf+0x5d/0x90 [ 323.555015][ T5343] panic+0x349/0x880 [ 323.556469][ T5343] ? check_panic_on_warn+0x21/0xb0 [ 323.558162][ T5343] ? __pfx_panic+0x10/0x10 [ 323.559521][ T5343] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 323.561642][ T5343] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 323.564001][ T5343] ? print_report+0xe8/0x550 [ 323.565790][ T5343] check_panic_on_warn+0x86/0xb0 [ 323.567577][ T5343] ? hfsplus_bnode_dump+0x403/0xbb0 [ 323.569389][ T5343] end_report+0x77/0x160 [ 323.570956][ T5343] kasan_report+0x154/0x180 [ 323.572684][ T5343] ? hfsplus_bnode_dump+0x403/0xbb0 [ 323.574564][ T5343] ? hfsplus_bnode_dump+0x403/0xbb0 [ 323.576277][ T5343] kasan_check_range+0x282/0x290 [ 323.578004][ T5343] ? hfsplus_bnode_dump+0x403/0xbb0 [ 323.579872][ T5343] __asan_memcpy+0x29/0x70 [ 323.581560][ T5343] hfsplus_bnode_dump+0x403/0xbb0 [ 323.583256][ T5343] ? __pfx_hfsplus_bnode_dump+0x10/0x10 [ 323.585017][ T5343] ? hfsplus_bnode_write_u16+0x9b/0xf0 [ 323.587021][ T5343] ? __pfx_hfsplus_bnode_write_u16+0x10/0x10 [ 323.589216][ T5343] ? rcu_is_watching+0x15/0xb0 [ 323.590981][ T5343] ? hfsplus_bnode_move+0x2da/0x910 [ 323.592962][ T5343] ? __mark_inode_dirty+0x3db/0xe90 [ 323.594907][ T5343] hfsplus_brec_remove+0x42c/0x4f0 [ 323.596828][ T5343] __hfsplus_delete_attr+0x275/0x450 [ 323.598837][ T5343] ? __pfx___hfsplus_delete_attr+0x10/0x10 [ 323.600862][ T5343] ? hfsplus_find_init+0x85/0x1c0 [ 323.602694][ T5343] hfsplus_delete_attr+0x353/0x4b0 [ 323.604701][ T5343] ? __pfx_hfsplus_delete_attr+0x10/0x10 [ 323.606615][ T5343] ? hfsplus_find_init+0x85/0x1c0 [ 323.608430][ T5343] ? hfsplus_find_init+0x14a/0x1c0 [ 323.610366][ T5343] __hfsplus_setxattr+0x4ad/0x22d0 [ 323.612021][ T5343] ? kernel_text_address+0xa7/0xe0 [ 323.613810][ T5343] ? arch_stack_walk+0xfd/0x150 [ 323.615616][ T5343] ? __pfx___hfsplus_setxattr+0x10/0x10 [ 323.617616][ T5343] ? stack_trace_save+0x118/0x1d0 [ 323.619567][ T5343] ? __pfx_stack_trace_save+0x10/0x10 [ 323.621656][ T5343] ? stack_depot_save_flags+0x29/0x830 [ 323.623808][ T5343] ? __kasan_kmalloc+0x98/0xb0 [ 323.625557][ T5343] ? __kmalloc_cache_noprof+0x243/0x390 [ 323.627613][ T5343] ? hfsplus_setxattr+0x68/0xe0 [ 323.629920][ T5343] hfsplus_setxattr+0xb0/0xe0 [ 323.632099][ T5343] hfsplus_trusted_setxattr+0x40/0x60 [ 323.634673][ T5343] ? __pfx_hfsplus_trusted_setxattr+0x10/0x10 [ 323.637534][ T5343] __vfs_setxattr+0x468/0x4a0 [ 323.639811][ T5343] __vfs_setxattr_noperm+0x12e/0x660 [ 323.642268][ T5343] vfs_setxattr+0x221/0x430 [ 323.644473][ T5343] ? __pfx_vfs_setxattr+0x10/0x10 [ 323.646868][ T5343] filename_setxattr+0x2af/0x430 [ 323.648976][ T5343] ? __pfx_filename_setxattr+0x10/0x10 [ 323.650993][ T5343] ? getname_flags+0x1e3/0x540 [ 323.652757][ T5343] path_setxattrat+0x440/0x510 [ 323.654594][ T5343] ? __pfx_path_setxattrat+0x10/0x10 [ 323.656588][ T5343] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 323.658680][ T5343] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 323.661093][ T5343] __x64_sys_lsetxattr+0xbf/0xe0 [ 323.662959][ T5343] do_syscall_64+0xf3/0x230 [ 323.664680][ T5343] ? clear_bhb_loop+0x35/0x90 [ 323.666430][ T5343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.668568][ T5343] RIP: 0033:0x7fadef97ff19 [ 323.670248][ T5343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.677539][ T5343] RSP: 002b:00007fadf077b058 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 323.680587][ T5343] RAX: ffffffffffffffda RBX: 00007fadefb46080 RCX: 00007fadef97ff19 [ 323.683657][ T5343] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000020000040 [ 323.686570][ T5343] RBP: 00007fadef9f3986 R08: 0000000000000000 R09: 0000000000000000 [ 323.689515][ T5343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.692351][ T5343] R13: 0000000000000000 R14: 00007fadefb46080 R15: 00007ffd0fb5d658 [ 323.695286][ T5343] [ 323.696793][ T5343] Kernel Offset: disabled [ 323.698483][ T5343] Rebooting in 86400 seconds..