Warning: Permanently added '[localhost]:2180' (ED25519) to the list of known hosts. executing program [ 82.986089][ T5303] loop0: detected capacity change from 0 to 1024 [ 83.020802][ T5303] hfsplus: request for non-existent node 211 in B*Tree [ 83.023703][ T5303] hfsplus: request for non-existent node 211 in B*Tree [ 83.027097][ T5303] ================================================================== [ 83.031201][ T5303] BUG: KASAN: wild-memory-access in hfsplus_bnode_dump+0x403/0xbb0 [ 83.038255][ T5303] Read of size 2 at addr 000508800000103e by task syz-executor400/5303 [ 83.042557][ T5303] [ 83.043433][ T5303] CPU: 0 UID: 0 PID: 5303 Comm: syz-executor400 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 83.043446][ T5303] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.043452][ T5303] Call Trace: [ 83.043460][ T5303] [ 83.043465][ T5303] dump_stack_lvl+0x241/0x360 [ 83.043480][ T5303] ? __pfx_dump_stack_lvl+0x10/0x10 [ 83.043490][ T5303] ? __pfx__printk+0x10/0x10 [ 83.043505][ T5303] ? _printk+0xd5/0x120 [ 83.043519][ T5303] print_report+0xe8/0x550 [ 83.043535][ T5303] ? __virt_addr_valid+0x58/0x530 [ 83.043550][ T5303] ? hfsplus_bnode_dump+0x403/0xbb0 [ 83.043564][ T5303] kasan_report+0x143/0x180 [ 83.043579][ T5303] ? hfsplus_bnode_dump+0x403/0xbb0 [ 83.043592][ T5303] ? hfsplus_bnode_dump+0x403/0xbb0 [ 83.043606][ T5303] kasan_check_range+0x282/0x290 [ 83.043621][ T5303] ? hfsplus_bnode_dump+0x403/0xbb0 [ 83.043634][ T5303] __asan_memcpy+0x29/0x70 [ 83.043646][ T5303] hfsplus_bnode_dump+0x403/0xbb0 [ 83.043662][ T5303] ? __pfx_hfsplus_bnode_dump+0x10/0x10 [ 83.043675][ T5303] ? hfsplus_bnode_write_u16+0x9b/0xf0 [ 83.043687][ T5303] ? __pfx_hfsplus_bnode_write_u16+0x10/0x10 [ 83.043701][ T5303] ? rcu_is_watching+0x15/0xb0 [ 83.043711][ T5303] ? hfsplus_bnode_move+0x2da/0x910 [ 83.043724][ T5303] ? __mark_inode_dirty+0x3db/0xe90 [ 83.043736][ T5303] hfsplus_brec_remove+0x42c/0x4f0 [ 83.043748][ T5303] __hfsplus_delete_attr+0x275/0x450 [ 83.043761][ T5303] ? __pfx___hfsplus_delete_attr+0x10/0x10 [ 83.043771][ T5303] ? hfsplus_find_init+0x85/0x1c0 [ 83.043782][ T5303] hfsplus_delete_attr+0x353/0x4b0 [ 83.043794][ T5303] ? __pfx_hfsplus_delete_attr+0x10/0x10 [ 83.043805][ T5303] ? hfsplus_find_init+0x85/0x1c0 [ 83.043814][ T5303] ? hfsplus_find_init+0x14a/0x1c0 [ 83.043824][ T5303] __hfsplus_setxattr+0x4ad/0x22d0 [ 83.043834][ T5303] ? kernel_text_address+0xa7/0xe0 [ 83.043849][ T5303] ? arch_stack_walk+0xfd/0x150 [ 83.043864][ T5303] ? __pfx___hfsplus_setxattr+0x10/0x10 [ 83.043875][ T5303] ? stack_trace_save+0x118/0x1d0 [ 83.043885][ T5303] ? __pfx_stack_trace_save+0x10/0x10 [ 83.043896][ T5303] ? stack_depot_save_flags+0x37/0x940 [ 83.043919][ T5303] ? __kasan_kmalloc+0x98/0xb0 [ 83.043932][ T5303] ? __kmalloc_cache_noprof+0x243/0x390 [ 83.043943][ T5303] ? hfsplus_setxattr+0x68/0xe0 [ 83.043954][ T5303] hfsplus_setxattr+0xb0/0xe0 [ 83.043965][ T5303] hfsplus_trusted_setxattr+0x40/0x60 [ 83.043976][ T5303] ? __pfx_hfsplus_trusted_setxattr+0x10/0x10 [ 83.043987][ T5303] __vfs_setxattr+0x468/0x4a0 [ 83.044005][ T5303] __vfs_setxattr_noperm+0x12e/0x660 [ 83.044020][ T5303] vfs_setxattr+0x221/0x430 [ 83.044034][ T5303] ? __pfx_vfs_setxattr+0x10/0x10 [ 83.044050][ T5303] filename_setxattr+0x2af/0x430 [ 83.044060][ T5303] ? __phys_addr_symbol+0x2f/0x70 [ 83.044074][ T5303] ? __pfx_filename_setxattr+0x10/0x10 [ 83.044084][ T5303] ? getname_flags+0x1e3/0x540 [ 83.044095][ T5303] path_setxattrat+0x440/0x510 [ 83.044108][ T5303] ? __pfx_path_setxattrat+0x10/0x10 [ 83.044119][ T5303] ? do_sys_openat2+0x17a/0x1d0 [ 83.044135][ T5303] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 83.044149][ T5303] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 83.044162][ T5303] __x64_sys_lsetxattr+0xbf/0xe0 [ 83.044172][ T5303] do_syscall_64+0xf3/0x230 [ 83.044884][ T5303] ? clear_bhb_loop+0x35/0x90 [ 83.044899][ T5303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.044912][ T5303] RIP: 0033:0x7fa5266286b9 [ 83.044922][ T5303] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 83.044931][ T5303] RSP: 002b:00007ffd80dc2848 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 83.044943][ T5303] RAX: ffffffffffffffda RBX: 0072657070752e79 RCX: 00007fa5266286b9 [ 83.044951][ T5303] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000020000040 [ 83.044957][ T5303] RBP: 0030656c69662f2e R08: 0000000000000000 R09: 0000000000000000 [ 83.044963][ T5303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.044969][ T5303] R13: 00007ffd80dc2a28 R14: 0000000000000001 R15: 0000000000000001 [ 83.044979][ T5303] [ 83.044984][ T5303] ================================================================== [ 83.207615][ T5303] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 83.210481][ T5303] CPU: 0 UID: 0 PID: 5303 Comm: syz-executor400 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 83.213972][ T5303] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.217858][ T5303] Call Trace: [ 83.219078][ T5303] [ 83.220145][ T5303] dump_stack_lvl+0x241/0x360 [ 83.221896][ T5303] ? __pfx_dump_stack_lvl+0x10/0x10 [ 83.223726][ T5303] ? __pfx__printk+0x10/0x10 [ 83.225446][ T5303] ? preempt_schedule+0xe1/0xf0 [ 83.227314][ T5303] ? vscnprintf+0x5d/0x90 [ 83.228838][ T5303] panic+0x349/0x880 [ 83.230392][ T5303] ? check_panic_on_warn+0x21/0xb0 [ 83.232355][ T5303] ? __pfx_panic+0x10/0x10 [ 83.234139][ T5303] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 83.236542][ T5303] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 83.238948][ T5303] ? print_report+0xe8/0x550 [ 83.240668][ T5303] check_panic_on_warn+0x86/0xb0 [ 83.242598][ T5303] ? hfsplus_bnode_dump+0x403/0xbb0 [ 83.244604][ T5303] end_report+0x77/0x160 [ 83.246208][ T5303] kasan_report+0x154/0x180 [ 83.247956][ T5303] ? hfsplus_bnode_dump+0x403/0xbb0 [ 83.249967][ T5303] ? hfsplus_bnode_dump+0x403/0xbb0 [ 83.251968][ T5303] kasan_check_range+0x282/0x290 [ 83.253790][ T5303] ? hfsplus_bnode_dump+0x403/0xbb0 [ 83.255812][ T5303] __asan_memcpy+0x29/0x70 [ 83.257482][ T5303] hfsplus_bnode_dump+0x403/0xbb0 [ 83.259863][ T5303] ? __pfx_hfsplus_bnode_dump+0x10/0x10 [ 83.262521][ T5303] ? hfsplus_bnode_write_u16+0x9b/0xf0 [ 83.264583][ T5303] ? __pfx_hfsplus_bnode_write_u16+0x10/0x10 [ 83.266838][ T5303] ? rcu_is_watching+0x15/0xb0 [ 83.268593][ T5303] ? hfsplus_bnode_move+0x2da/0x910 [ 83.270575][ T5303] ? __mark_inode_dirty+0x3db/0xe90 [ 83.272434][ T5303] hfsplus_brec_remove+0x42c/0x4f0 [ 83.274296][ T5303] __hfsplus_delete_attr+0x275/0x450 [ 83.276270][ T5303] ? __pfx___hfsplus_delete_attr+0x10/0x10 [ 83.278205][ T5303] ? hfsplus_find_init+0x85/0x1c0 [ 83.280015][ T5303] hfsplus_delete_attr+0x353/0x4b0 [ 83.281870][ T5303] ? __pfx_hfsplus_delete_attr+0x10/0x10 [ 83.283929][ T5303] ? hfsplus_find_init+0x85/0x1c0 [ 83.285711][ T5303] ? hfsplus_find_init+0x14a/0x1c0 [ 83.287482][ T5303] __hfsplus_setxattr+0x4ad/0x22d0 [ 83.289269][ T5303] ? kernel_text_address+0xa7/0xe0 [ 83.291060][ T5303] ? arch_stack_walk+0xfd/0x150 [ 83.292893][ T5303] ? __pfx___hfsplus_setxattr+0x10/0x10 [ 83.294810][ T5303] ? stack_trace_save+0x118/0x1d0 [ 83.296664][ T5303] ? __pfx_stack_trace_save+0x10/0x10 [ 83.298592][ T5303] ? stack_depot_save_flags+0x37/0x940 [ 83.300465][ T5303] ? __kasan_kmalloc+0x98/0xb0 [ 83.302203][ T5303] ? __kmalloc_cache_noprof+0x243/0x390 [ 83.304165][ T5303] ? hfsplus_setxattr+0x68/0xe0 [ 83.306022][ T5303] hfsplus_setxattr+0xb0/0xe0 [ 83.307738][ T5303] hfsplus_trusted_setxattr+0x40/0x60 [ 83.309755][ T5303] ? __pfx_hfsplus_trusted_setxattr+0x10/0x10 [ 83.311937][ T5303] __vfs_setxattr+0x468/0x4a0 [ 83.313594][ T5303] __vfs_setxattr_noperm+0x12e/0x660 [ 83.315421][ T5303] vfs_setxattr+0x221/0x430 [ 83.317152][ T5303] ? __pfx_vfs_setxattr+0x10/0x10 [ 83.319091][ T5303] filename_setxattr+0x2af/0x430 [ 83.321004][ T5303] ? __phys_addr_symbol+0x2f/0x70 [ 83.322902][ T5303] ? __pfx_filename_setxattr+0x10/0x10 [ 83.324875][ T5303] ? getname_flags+0x1e3/0x540 [ 83.326660][ T5303] path_setxattrat+0x440/0x510 [ 83.328776][ T5303] ? __pfx_path_setxattrat+0x10/0x10 [ 83.330779][ T5303] ? do_sys_openat2+0x17a/0x1d0 [ 83.332463][ T5303] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 83.334665][ T5303] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 83.337070][ T5303] __x64_sys_lsetxattr+0xbf/0xe0 [ 83.338927][ T5303] do_syscall_64+0xf3/0x230 [ 83.340625][ T5303] ? clear_bhb_loop+0x35/0x90 [ 83.342193][ T5303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.344045][ T5303] RIP: 0033:0x7fa5266286b9 [ 83.345745][ T5303] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 83.352467][ T5303] RSP: 002b:00007ffd80dc2848 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 83.355790][ T5303] RAX: ffffffffffffffda RBX: 0072657070752e79 RCX: 00007fa5266286b9 [ 83.358465][ T5303] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000020000040 [ 83.361195][ T5303] RBP: 0030656c69662f2e R08: 0000000000000000 R09: 0000000000000000 [ 83.363997][ T5303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.366971][ T5303] R13: 00007ffd80dc2a28 R14: 0000000000000001 R15: 0000000000000001 [ 83.370088][ T5303] [ 83.371561][ T5303] Kernel Offset: disabled [ 83.373259][ T5303] Rebooting in 86400 seconds.. VM DIAGNOSIS: 22:09:07 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000064 RBX=ffffffff9a7430c0 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=0000000000000000 RSP=ffffc9000cf86790 R8 =ffffffff857683cb R9 =1ffff110065f8046 R10=dffffc0000000000 R11=ffffffff85768380 R12=dffffc0000000000 R13=0000000000000064 R14=0000000000000064 R15=00000000000003f8 RIP=ffffffff857683fe RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555568de4380 ffffffff 00c00000 GS =0000 ffff88801fc00000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffef4e5bfd8 CR3=0000000042758000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffffff Opmask01=0000000000000006 Opmask02=000000000000007f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e79616c7265766f 2e64657473757274 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd80dc1e40 00007ffd80dc1e20 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd80dc1f80 00007ffd80dc1e00 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa52668d7e4 00007fa5266a0240 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd80dc1e40 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd80dc1f80 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd80dc1f80 00007ffd80dc1e00 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd80dc1e40 00007ffd80dc1e20 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0073756c70736668 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000