program: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000400)='./file3\x00', 0xa08802, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRESDEC], 0x1, 0x693, &(0x7f0000000ec0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f0000000240), &(0x7f0000001400)=ANY=[], 0x841, 0x0) (async) setxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f0000000240), &(0x7f0000001400)=ANY=[], 0x841, 0x0) lremovexattr(&(0x7f0000000240)='./file1\x00', &(0x7f00000000c0)=@known='trusted.overlay.upper\x00') syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000005900)='./file0\x00', 0x1000000, &(0x7f0000000440)=ANY=[@ANYBLOB='errorner>\x00'/23, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYRESDEC=0x0], 0x1, 0x5a3d, &(0x7f000000b380)="$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") [ 69.192556][ T4664] Bluetooth: hci0: command tx timeout [ 69.264027][ T5319] loop0: detected capacity change from 0 to 1024 [ 69.331099][ T5319] hfsplus: request for non-existent node 211 in B*Tree [ 69.333761][ T5319] hfsplus: request for non-existent node 211 in B*Tree [ 69.339110][ T5320] ================================================================== [ 69.342393][ T5320] BUG: KASAN: wild-memory-access in hfsplus_bnode_dump+0x403/0xbb0 [ 69.345221][ T5320] Read of size 2 at addr 000508800000103e by task syz.0.0/5320 [ 69.348270][ T5320] [ 69.349374][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.0.0 Not tainted 6.13.0-rc3-syzkaller #0 [ 69.353173][ T5320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.357432][ T5320] Call Trace: [ 69.358715][ T5320] [ 69.359867][ T5320] dump_stack_lvl+0x241/0x360 [ 69.361606][ T5320] ? __pfx_dump_stack_lvl+0x10/0x10 [ 69.363763][ T5320] ? __pfx__printk+0x10/0x10 [ 69.365970][ T5320] ? _printk+0xd5/0x120 [ 69.367999][ T5320] print_report+0xe8/0x550 [ 69.369936][ T5320] ? __virt_addr_valid+0x58/0x530 [ 69.372020][ T5320] ? hfsplus_bnode_dump+0x403/0xbb0 [ 69.374051][ T5320] kasan_report+0x143/0x180 [ 69.375817][ T5320] ? hfsplus_bnode_dump+0x403/0xbb0 [ 69.377805][ T5320] ? hfsplus_bnode_dump+0x403/0xbb0 [ 69.381167][ T5320] kasan_check_range+0x282/0x290 [ 69.383534][ T5320] ? hfsplus_bnode_dump+0x403/0xbb0 [ 69.385554][ T5320] __asan_memcpy+0x29/0x70 [ 69.387186][ T5320] hfsplus_bnode_dump+0x403/0xbb0 [ 69.389155][ T5320] ? __pfx_hfsplus_bnode_dump+0x10/0x10 [ 69.391363][ T5320] ? hfsplus_bnode_write_u16+0x9b/0xf0 [ 69.393811][ T5320] ? __pfx_hfsplus_bnode_write_u16+0x10/0x10 [ 69.396664][ T5320] ? rcu_is_watching+0x15/0xb0 [ 69.398748][ T5320] ? hfsplus_bnode_move+0x2da/0x910 [ 69.400860][ T5320] ? __mark_inode_dirty+0x3db/0xe90 [ 69.402834][ T5320] hfsplus_brec_remove+0x42c/0x4f0 [ 69.404874][ T5320] __hfsplus_delete_attr+0x275/0x450 [ 69.406639][ T5320] ? __pfx___hfsplus_delete_attr+0x10/0x10 [ 69.409207][ T5320] ? hfsplus_find_init+0x85/0x1c0 [ 69.411153][ T5320] hfsplus_delete_attr+0x353/0x4b0 [ 69.413250][ T5320] ? __pfx_hfsplus_delete_attr+0x10/0x10 [ 69.415141][ T5320] ? hfsplus_find_init+0x85/0x1c0 [ 69.417057][ T5320] ? hfsplus_find_init+0x14a/0x1c0 [ 69.418982][ T5320] __hfsplus_setxattr+0x801/0x22d0 [ 69.420955][ T5320] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 69.423611][ T5320] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 69.426355][ T5320] ? lockdep_hardirqs_on+0x99/0x150 [ 69.428415][ T5320] ? __pfx___hfsplus_setxattr+0x10/0x10 [ 69.430452][ T5320] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 69.432684][ T5320] ? stack_depot_save_flags+0x7b4/0x940 [ 69.434901][ T5320] ? __kasan_kmalloc+0x98/0xb0 [ 69.436715][ T5320] ? __kmalloc_cache_noprof+0x243/0x390 [ 69.438995][ T5320] ? hfsplus_setxattr+0x68/0xe0 [ 69.441136][ T5320] hfsplus_setxattr+0xb0/0xe0 [ 69.443001][ T5320] hfsplus_trusted_setxattr+0x40/0x60 [ 69.445047][ T5320] ? __pfx_hfsplus_trusted_setxattr+0x10/0x10 [ 69.447288][ T5320] __vfs_removexattr+0x42a/0x460 [ 69.449340][ T5320] __vfs_removexattr_locked+0x206/0x450 [ 69.451535][ T5320] vfs_removexattr+0x103/0x2b0 [ 69.453420][ T5320] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 69.455868][ T5320] ? __pfx_vfs_removexattr+0x10/0x10 [ 69.458040][ T5320] path_removexattrat+0x32e/0x670 [ 69.460075][ T5320] ? __pfx_path_removexattrat+0x10/0x10 [ 69.462354][ T5320] ? do_futex+0x33b/0x560 [ 69.464113][ T5320] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 69.466798][ T5320] ? do_syscall_64+0x100/0x230 [ 69.468872][ T5320] __x64_sys_lremovexattr+0x65/0x80 [ 69.471022][ T5320] do_syscall_64+0xf3/0x230 [ 69.472923][ T5320] ? clear_bhb_loop+0x35/0x90 [ 69.474712][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.477074][ T5320] RIP: 0033:0x7f1807985d19 [ 69.479043][ T5320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.487091][ T5320] RSP: 002b:00007f1808758038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c6 [ 69.490239][ T5320] RAX: ffffffffffffffda RBX: 00007f1807b76080 RCX: 00007f1807985d19 [ 69.493122][ T5320] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000240 [ 69.496283][ T5320] RBP: 00007f1807a01a20 R08: 0000000000000000 R09: 0000000000000000 [ 69.499642][ T5320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.502953][ T5320] R13: 0000000000000000 R14: 00007f1807b76080 R15: 00007ffedb92ace8 [ 69.505893][ T5320] [ 69.507050][ T5320] ================================================================== [ 69.596875][ T5320] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 69.599796][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.0.0 Not tainted 6.13.0-rc3-syzkaller #0 [ 69.603433][ T5320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.607747][ T5320] Call Trace: [ 69.608991][ T5320] [ 69.610177][ T5320] dump_stack_lvl+0x241/0x360 [ 69.612029][ T5320] ? __pfx_dump_stack_lvl+0x10/0x10 [ 69.613961][ T5320] ? __pfx__printk+0x10/0x10 [ 69.615744][ T5320] ? preempt_schedule+0xe1/0xf0 [ 69.617774][ T5320] ? vscnprintf+0x5d/0x90 [ 69.619565][ T5320] panic+0x349/0x880 [ 69.621210][ T5320] ? check_panic_on_warn+0x21/0xb0 [ 69.623203][ T5320] ? __pfx_panic+0x10/0x10 [ 69.624930][ T5320] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 69.627185][ T5320] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 69.629645][ T5320] ? print_report+0xe8/0x550 [ 69.631337][ T5320] check_panic_on_warn+0x86/0xb0 [ 69.633526][ T5320] ? hfsplus_bnode_dump+0x403/0xbb0 [ 69.635982][ T5320] end_report+0x77/0x160 [ 69.637707][ T5320] kasan_report+0x154/0x180 [ 69.639520][ T5320] ? hfsplus_bnode_dump+0x403/0xbb0 [ 69.641523][ T5320] ? hfsplus_bnode_dump+0x403/0xbb0 [ 69.643468][ T5320] kasan_check_range+0x282/0x290 [ 69.645474][ T5320] ? hfsplus_bnode_dump+0x403/0xbb0 [ 69.647412][ T5320] __asan_memcpy+0x29/0x70 [ 69.649270][ T5320] hfsplus_bnode_dump+0x403/0xbb0 [ 69.651354][ T5320] ? __pfx_hfsplus_bnode_dump+0x10/0x10 [ 69.653851][ T5320] ? hfsplus_bnode_write_u16+0x9b/0xf0 [ 69.656477][ T5320] ? __pfx_hfsplus_bnode_write_u16+0x10/0x10 [ 69.659062][ T5320] ? rcu_is_watching+0x15/0xb0 [ 69.660818][ T5320] ? hfsplus_bnode_move+0x2da/0x910 [ 69.662789][ T5320] ? __mark_inode_dirty+0x3db/0xe90 [ 69.664965][ T5320] hfsplus_brec_remove+0x42c/0x4f0 [ 69.666995][ T5320] __hfsplus_delete_attr+0x275/0x450 [ 69.669349][ T5320] ? __pfx___hfsplus_delete_attr+0x10/0x10 [ 69.671733][ T5320] ? hfsplus_find_init+0x85/0x1c0 [ 69.673769][ T5320] hfsplus_delete_attr+0x353/0x4b0 [ 69.675831][ T5320] ? __pfx_hfsplus_delete_attr+0x10/0x10 [ 69.678059][ T5320] ? hfsplus_find_init+0x85/0x1c0 [ 69.680089][ T5320] ? hfsplus_find_init+0x14a/0x1c0 [ 69.682382][ T5320] __hfsplus_setxattr+0x801/0x22d0 [ 69.684567][ T5320] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 69.686942][ T5320] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 69.689270][ T5320] ? lockdep_hardirqs_on+0x99/0x150 [ 69.691414][ T5320] ? __pfx___hfsplus_setxattr+0x10/0x10 [ 69.693680][ T5320] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 69.696144][ T5320] ? stack_depot_save_flags+0x7b4/0x940 [ 69.698286][ T5320] ? __kasan_kmalloc+0x98/0xb0 [ 69.700131][ T5320] ? __kmalloc_cache_noprof+0x243/0x390 [ 69.702295][ T5320] ? hfsplus_setxattr+0x68/0xe0 [ 69.704481][ T5320] hfsplus_setxattr+0xb0/0xe0 [ 69.706921][ T5320] hfsplus_trusted_setxattr+0x40/0x60 [ 69.709668][ T5320] ? __pfx_hfsplus_trusted_setxattr+0x10/0x10 [ 69.711933][ T5320] __vfs_removexattr+0x42a/0x460 [ 69.713754][ T5320] __vfs_removexattr_locked+0x206/0x450 [ 69.715899][ T5320] vfs_removexattr+0x103/0x2b0 [ 69.717581][ T5320] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 69.719846][ T5320] ? __pfx_vfs_removexattr+0x10/0x10 [ 69.722231][ T5320] path_removexattrat+0x32e/0x670 [ 69.724324][ T5320] ? __pfx_path_removexattrat+0x10/0x10 [ 69.726363][ T5320] ? do_futex+0x33b/0x560 [ 69.727985][ T5320] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 69.730304][ T5320] ? do_syscall_64+0x100/0x230 [ 69.732163][ T5320] __x64_sys_lremovexattr+0x65/0x80 [ 69.734151][ T5320] do_syscall_64+0xf3/0x230 [ 69.736058][ T5320] ? clear_bhb_loop+0x35/0x90 [ 69.737960][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.740408][ T5320] RIP: 0033:0x7f1807985d19 [ 69.742187][ T5320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.749655][ T5320] RSP: 002b:00007f1808758038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c6 [ 69.753615][ T5320] RAX: ffffffffffffffda RBX: 00007f1807b76080 RCX: 00007f1807985d19 [ 69.756502][ T5320] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000240 [ 69.759436][ T5320] RBP: 00007f1807a01a20 R08: 0000000000000000 R09: 0000000000000000 [ 69.762354][ T5320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.765347][ T5320] R13: 0000000000000000 R14: 00007f1807b76080 R15: 00007ffedb92ace8 [ 69.768473][ T5320] [ 69.770080][ T5320] Kernel Offset: disabled [ 69.771910][ T5320] Rebooting in 86400 seconds..