program:
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000400)='./file3\x00', 0xa08802, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRESDEC], 0x1, 0x693, &(0x7f0000000ec0)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f0000000240), &(0x7f0000001400)=ANY=[], 0x841, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x1, 0x42, 0x40}, 0x48)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020)
lremovexattr(&(0x7f0000000240)='./file1\x00', &(0x7f00000000c0)=@known='trusted.overlay.upper\x00')
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000400)='./file3\x00', 0xa08802, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRESDEC], 0x1, 0x693, &(0x7f0000000ec0)="$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") (async)
setxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f0000000240), &(0x7f0000001400)=ANY=[], 0x841, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x1, 0x42, 0x40}, 0x48) (async)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') (async)
read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) (async)
lremovexattr(&(0x7f0000000240)='./file1\x00', &(0x7f00000000c0)=@known='trusted.overlay.upper\x00') (async)
[ 75.272679][ T5320] Bluetooth: hci0: command tx timeout
[ 75.356826][ T5340] loop0: detected capacity change from 0 to 1024
[ 75.409156][ T5340] hfsplus: request for non-existent node 211 in B*Tree
[ 75.416243][ T5340] hfsplus: request for non-existent node 211 in B*Tree
[ 75.427299][ T5341] ==================================================================
[ 75.430900][ T5341] BUG: KASAN: slab-out-of-bounds in hfsplus_bnode_read+0xc0/0x2a0
[ 75.434240][ T5341] Read of size 8 at addr ffff8880366a99c8 by task syz.0.0/5341
[ 75.437467][ T5341]
[ 75.438529][ T5341] CPU: 0 UID: 0 PID: 5341 Comm: syz.0.0 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full)
[ 75.438544][ T5341] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 75.438552][ T5341] Call Trace:
[ 75.438561][ T5341]
[ 75.438568][ T5341] dump_stack_lvl+0x189/0x250
[ 75.438586][ T5341] ? __kasan_check_byte+0x12/0x40
[ 75.438601][ T5341] ? __pfx_dump_stack_lvl+0x10/0x10
[ 75.438614][ T5341] ? lock_release+0x4b/0x3e0
[ 75.438628][ T5341] ? __virt_addr_valid+0x4a5/0x5c0
[ 75.438644][ T5341] print_report+0xd2/0x2b0
[ 75.438656][ T5341] ? hfsplus_bnode_read+0xc0/0x2a0
[ 75.438667][ T5341] kasan_report+0x118/0x150
[ 75.438682][ T5341] ? hfsplus_bnode_read+0xc0/0x2a0
[ 75.438702][ T5341] hfsplus_bnode_read+0xc0/0x2a0
[ 75.438716][ T5341] hfsplus_bnode_dump+0x300/0x450
[ 75.438729][ T5341] ? __pfx_hfsplus_bnode_dump+0x10/0x10
[ 75.438741][ T5341] ? hfsplus_bnode_write_u16+0x8b/0xd0
[ 75.438753][ T5341] ? hfsplus_bnode_move+0x393/0xb90
[ 75.438766][ T5341] ? __pfx___hfsplus_brec_find+0x10/0x10
[ 75.438780][ T5341] hfsplus_brec_remove+0x480/0x550
[ 75.438796][ T5341] __hfsplus_delete_attr+0x1d4/0x360
[ 75.438811][ T5341] ? __pfx___hfsplus_delete_attr+0x10/0x10
[ 75.438826][ T5341] ? hfsplus_attr_build_key+0xee/0x260
[ 75.438841][ T5341] hfsplus_delete_attr+0x231/0x2d0
[ 75.438856][ T5341] ? __pfx_hfsplus_delete_attr+0x10/0x10
[ 75.438871][ T5341] ? hfsplus_find_init+0x8c/0x1d0
[ 75.438885][ T5341] ? hfsplus_find_init+0x15a/0x1d0
[ 75.438898][ T5341] __hfsplus_setxattr+0x37a/0x1f40
[ 75.438913][ T5341] ? is_bpf_text_address+0x26/0x2b0
[ 75.438927][ T5341] ? kernel_text_address+0xa5/0xe0
[ 75.438938][ T5341] ? unwind_get_return_address+0x4d/0x90
[ 75.438950][ T5341] ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 75.438966][ T5341] ? arch_stack_walk+0xfc/0x150
[ 75.438980][ T5341] ? __pfx___hfsplus_setxattr+0x10/0x10
[ 75.438996][ T5341] ? stack_trace_save+0x9c/0xe0
[ 75.439025][ T5341] ? hfsplus_setxattr+0x68/0x180
[ 75.439040][ T5341] ? __kasan_kmalloc+0x93/0xb0
[ 75.439053][ T5341] ? hfsplus_setxattr+0x102/0x180
[ 75.439068][ T5341] hfsplus_setxattr+0x11e/0x180
[ 75.439084][ T5341] hfsplus_trusted_setxattr+0x40/0x60
[ 75.439100][ T5341] ? __pfx_hfsplus_trusted_setxattr+0x10/0x10
[ 75.439115][ T5341] __vfs_setxattr+0x43c/0x480
[ 75.439134][ T5341] __vfs_setxattr_noperm+0x12d/0x660
[ 75.439150][ T5341] vfs_setxattr+0x16b/0x2f0
[ 75.439165][ T5341] ? __pfx_vfs_setxattr+0x10/0x10
[ 75.439179][ T5341] ? mnt_get_write_access+0x223/0x2a0
[ 75.439193][ T5341] filename_setxattr+0x274/0x600
[ 75.439210][ T5341] ? __pfx_filename_setxattr+0x10/0x10
[ 75.439225][ T5341] ? getname_flags+0x1e5/0x540
[ 75.439241][ T5341] path_setxattrat+0x364/0x3a0
[ 75.439253][ T5341] ? __pfx_path_setxattrat+0x10/0x10
[ 75.439270][ T5341] ? exc_page_fault+0x76/0xf0
[ 75.439338][ T5341] ? do_user_addr_fault+0xc8a/0x1390
[ 75.439351][ T5341] __x64_sys_setxattr+0xbc/0xe0
[ 75.439367][ T5341] do_syscall_64+0xfa/0x3b0
[ 75.439379][ T5341] ? lockdep_hardirqs_on+0x9c/0x150
[ 75.439395][ T5341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 75.439407][ T5341] ? clear_bhb_loop+0x60/0xb0
[ 75.439420][ T5341] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 75.439431][ T5341] RIP: 0033:0x7f97e8d8e929
[ 75.439443][ T5341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 75.439453][ T5341] RSP: 002b:00007f97e9bbb038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[ 75.439467][ T5341] RAX: ffffffffffffffda RBX: 00007f97e8fb6080 RCX: 00007f97e8d8e929
[ 75.439491][ T5341] RDX: 0000200000001400 RSI: 0000200000000240 RDI: 0000200000000280
[ 75.439499][ T5341] RBP: 00007f97e8e10b39 R08: 0000000000000000 R09: 0000000000000000
[ 75.439507][ T5341] R10: 0000000000000841 R11: 0000000000000246 R12: 0000000000000000
[ 75.439514][ T5341] R13: 0000000000000001 R14: 00007f97e8fb6080 R15: 00007ffe7051a458
[ 75.439525][ T5341]
[ 75.439530][ T5341]
[ 75.605926][ T5341] Allocated by task 5340:
[ 75.607960][ T5341] kasan_save_track+0x3e/0x80
[ 75.610127][ T5341] __kasan_kmalloc+0x93/0xb0
[ 75.612265][ T5341] __kmalloc_noprof+0x27a/0x4f0
[ 75.614345][ T5341] __hfs_bnode_create+0xf3/0x810
[ 75.616576][ T5341] hfsplus_bnode_find+0x224/0xd20
[ 75.618812][ T5341] hfsplus_brec_find+0x15c/0x500
[ 75.621066][ T5341] hfsplus_attr_exists+0x163/0x1d0
[ 75.623412][ T5341] __hfsplus_setxattr+0x33e/0x1f40
[ 75.625743][ T5341] hfsplus_setxattr+0x11e/0x180
[ 75.627918][ T5341] hfsplus_trusted_setxattr+0x40/0x60
[ 75.630297][ T5341] __vfs_setxattr+0x43c/0x480
[ 75.632388][ T5341] __vfs_setxattr_noperm+0x12d/0x660
[ 75.634745][ T5341] vfs_setxattr+0x16b/0x2f0
[ 75.636841][ T5341] filename_setxattr+0x274/0x600
[ 75.639047][ T5341] path_setxattrat+0x364/0x3a0
[ 75.641199][ T5341] __x64_sys_setxattr+0xbc/0xe0
[ 75.643437][ T5341] do_syscall_64+0xfa/0x3b0
[ 75.645475][ T5341] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 75.648018][ T5341]
[ 75.649149][ T5341] The buggy address belongs to the object at ffff8880366a9900
[ 75.649149][ T5341] which belongs to the cache kmalloc-192 of size 192
[ 75.655295][ T5341] The buggy address is located 48 bytes to the right of
[ 75.655295][ T5341] allocated 152-byte region [ffff8880366a9900, ffff8880366a9998)
[ 75.661505][ T5341]
[ 75.662599][ T5341] The buggy address belongs to the physical page:
[ 75.665376][ T5341] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x366a9
[ 75.668992][ T5341] anon flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff)
[ 75.672405][ T5341] page_type: f5(slab)
[ 75.674124][ T5341] raw: 04fff00000000000 ffff88801a4413c0 0000000000000000 dead000000000001
[ 75.677565][ T5341] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[ 75.681590][ T5341] page dumped because: kasan: bad access detected
[ 75.684866][ T5341] page_owner tracks the page as allocated
[ 75.687396][ T5341] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 54, tgid 54 (kworker/0:2), ts 16893156507, free_ts 0
[ 75.695266][ T5341] post_alloc_hook+0x240/0x2a0
[ 75.697436][ T5341] get_page_from_freelist+0x21e4/0x22c0
[ 75.699891][ T5341] __alloc_frozen_pages_noprof+0x181/0x370
[ 75.702425][ T5341] alloc_pages_mpol+0x232/0x4a0
[ 75.704687][ T5341] allocate_slab+0x8a/0x3b0
[ 75.706689][ T5341] ___slab_alloc+0xbfc/0x1480
[ 75.708707][ T5341] __kmalloc_noprof+0x305/0x4f0
[ 75.710882][ T5341] usb_alloc_urb+0x46/0x150
[ 75.712926][ T5341] usb_control_msg+0x118/0x3e0
[ 75.715034][ T5341] hub_ext_port_status+0x116/0x820
[ 75.717403][ T5341] hub_activate+0x77d/0x1a70
[ 75.719371][ T5341] process_scheduled_works+0xae1/0x17b0
[ 75.721681][ T5341] worker_thread+0x8a0/0xda0
[ 75.723806][ T5341] kthread+0x70e/0x8a0
[ 75.725733][ T5341] ret_from_fork+0x3fc/0x770
[ 75.727742][ T5341] ret_from_fork_asm+0x1a/0x30
[ 75.729817][ T5341] page_owner free stack trace missing
[ 75.732124][ T5341]
[ 75.733301][ T5341] Memory state around the buggy address:
[ 75.735732][ T5341] ffff8880366a9880: 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 75.739222][ T5341] ffff8880366a9900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 75.742599][ T5341] >ffff8880366a9980: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 75.746033][ T5341] ^
[ 75.748655][ T5341] ffff8880366a9a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 75.752102][ T5341] ffff8880366a9a80: 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 75.755592][ T5341] ==================================================================
[ 75.776673][ T5341] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 75.779805][ T5341] CPU: 0 UID: 0 PID: 5341 Comm: syz.0.0 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full)
[ 75.784192][ T5341] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 75.789397][ T5341] Call Trace:
[ 75.790976][ T5341]
[ 75.792546][ T5341] dump_stack_lvl+0x99/0x250
[ 75.794600][ T5341] ? __asan_memcpy+0x40/0x70
[ 75.796780][ T5341] ? __pfx_dump_stack_lvl+0x10/0x10
[ 75.799072][ T5341] ? __pfx__printk+0x10/0x10
[ 75.801152][ T5341] panic+0x2db/0x790
[ 75.802891][ T5341] ? __pfx_preempt_schedule+0x10/0x10
[ 75.805308][ T5341] ? __pfx_panic+0x10/0x10
[ 75.807361][ T5341] ? _raw_spin_unlock_irqrestore+0xfd/0x110
[ 75.810021][ T5341] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 75.812830][ T5341] ? hfsplus_bnode_read+0xc0/0x2a0
[ 75.815078][ T5341] check_panic_on_warn+0x89/0xb0
[ 75.817253][ T5341] ? hfsplus_bnode_read+0xc0/0x2a0
[ 75.819516][ T5341] end_report+0x78/0x160
[ 75.821314][ T5341] kasan_report+0x129/0x150
[ 75.823261][ T5341] ? hfsplus_bnode_read+0xc0/0x2a0
[ 75.825623][ T5341] hfsplus_bnode_read+0xc0/0x2a0
[ 75.827909][ T5341] hfsplus_bnode_dump+0x300/0x450
[ 75.830468][ T5341] ? __pfx_hfsplus_bnode_dump+0x10/0x10
[ 75.832902][ T5341] ? hfsplus_bnode_write_u16+0x8b/0xd0
[ 75.835956][ T5341] ? hfsplus_bnode_move+0x393/0xb90
[ 75.838527][ T5341] ? __pfx___hfsplus_brec_find+0x10/0x10
[ 75.841055][ T5341] hfsplus_brec_remove+0x480/0x550
[ 75.843425][ T5341] __hfsplus_delete_attr+0x1d4/0x360
[ 75.845795][ T5341] ? __pfx___hfsplus_delete_attr+0x10/0x10
[ 75.848570][ T5341] ? hfsplus_attr_build_key+0xee/0x260
[ 75.851064][ T5341] hfsplus_delete_attr+0x231/0x2d0
[ 75.853382][ T5341] ? __pfx_hfsplus_delete_attr+0x10/0x10
[ 75.855847][ T5341] ? hfsplus_find_init+0x8c/0x1d0
[ 75.858018][ T5341] ? hfsplus_find_init+0x15a/0x1d0
[ 75.860376][ T5341] __hfsplus_setxattr+0x37a/0x1f40
[ 75.862601][ T5341] ? is_bpf_text_address+0x26/0x2b0
[ 75.864807][ T5341] ? kernel_text_address+0xa5/0xe0
[ 75.867176][ T5341] ? unwind_get_return_address+0x4d/0x90
[ 75.869761][ T5341] ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 75.872537][ T5341] ? arch_stack_walk+0xfc/0x150
[ 75.874720][ T5341] ? __pfx___hfsplus_setxattr+0x10/0x10
[ 75.877029][ T5341] ? stack_trace_save+0x9c/0xe0
[ 75.879194][ T5341] ? hfsplus_setxattr+0x68/0x180
[ 75.881261][ T5341] ? __kasan_kmalloc+0x93/0xb0
[ 75.883508][ T5341] ? hfsplus_setxattr+0x102/0x180
[ 75.885764][ T5341] hfsplus_setxattr+0x11e/0x180
[ 75.888001][ T5341] hfsplus_trusted_setxattr+0x40/0x60
[ 75.890284][ T5341] ? __pfx_hfsplus_trusted_setxattr+0x10/0x10
[ 75.892908][ T5341] __vfs_setxattr+0x43c/0x480
[ 75.895006][ T5341] __vfs_setxattr_noperm+0x12d/0x660
[ 75.897263][ T5341] vfs_setxattr+0x16b/0x2f0
[ 75.899267][ T5341] ? __pfx_vfs_setxattr+0x10/0x10
[ 75.901488][ T5341] ? mnt_get_write_access+0x223/0x2a0
[ 75.903852][ T5341] filename_setxattr+0x274/0x600
[ 75.905998][ T5341] ? __pfx_filename_setxattr+0x10/0x10
[ 75.908432][ T5341] ? getname_flags+0x1e5/0x540
[ 75.910480][ T5341] path_setxattrat+0x364/0x3a0
[ 75.912543][ T5341] ? __pfx_path_setxattrat+0x10/0x10
[ 75.914942][ T5341] ? exc_page_fault+0x76/0xf0
[ 75.917025][ T5341] ? do_user_addr_fault+0xc8a/0x1390
[ 75.919267][ T5341] __x64_sys_setxattr+0xbc/0xe0
[ 75.921456][ T5341] do_syscall_64+0xfa/0x3b0
[ 75.923407][ T5341] ? lockdep_hardirqs_on+0x9c/0x150
[ 75.925751][ T5341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 75.928295][ T5341] ? clear_bhb_loop+0x60/0xb0
[ 75.930360][ T5341] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 75.932953][ T5341] RIP: 0033:0x7f97e8d8e929
[ 75.934976][ T5341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 75.943226][ T5341] RSP: 002b:00007f97e9bbb038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[ 75.946832][ T5341] RAX: ffffffffffffffda RBX: 00007f97e8fb6080 RCX: 00007f97e8d8e929
[ 75.950291][ T5341] RDX: 0000200000001400 RSI: 0000200000000240 RDI: 0000200000000280
[ 75.953752][ T5341] RBP: 00007f97e8e10b39 R08: 0000000000000000 R09: 0000000000000000
[ 75.957243][ T5341] R10: 0000000000000841 R11: 0000000000000246 R12: 0000000000000000
[ 75.960733][ T5341] R13: 0000000000000001 R14: 00007f97e8fb6080 R15: 00007ffe7051a458
[ 75.964473][ T5341]
[ 75.966321][ T5341] Kernel Offset: disabled
[ 75.968295][ T5341] Rebooting in 86400 seconds..