Warning: Permanently added '10.128.1.111' (ED25519) to the list of known hosts.
executing program
[ 60.259176][ T4162] loop0: detected capacity change from 0 to 1024
[ 60.369787][ T4162] hfsplus: request for non-existent node 134217728 in B*Tree
[ 60.377415][ T4162] hfsplus: request for non-existent node 134217728 in B*Tree
[ 60.388026][ T4162] ==================================================================
[ 60.396239][ T4162] BUG: KASAN: slab-out-of-bounds in hfsplus_bnode_read+0x85/0x1c0
[ 60.404113][ T4162] Read of size 8 at addr ffff88802be29098 by task syz-executor138/4162
[ 60.412364][ T4162]
[ 60.414703][ T4162] CPU: 1 PID: 4162 Comm: syz-executor138 Not tainted 5.15.180-syzkaller #0
[ 60.423303][ T4162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 60.433367][ T4162] Call Trace:
[ 60.436656][ T4162]
[ 60.439578][ T4162] dump_stack_lvl+0x1e3/0x2d0
[ 60.444279][ T4162] ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[ 60.449900][ T4162] ? _printk+0xd1/0x120
[ 60.454056][ T4162] ? __wake_up_klogd+0xcc/0x100
[ 60.458894][ T4162] ? panic+0x860/0x860
[ 60.462951][ T4162] ? _raw_spin_lock_irqsave+0xdd/0x120
[ 60.468405][ T4162] print_address_description+0x63/0x3b0
[ 60.473946][ T4162] ? hfsplus_bnode_read+0x85/0x1c0
[ 60.479055][ T4162] kasan_report+0x16b/0x1c0
[ 60.483552][ T4162] ? hfsplus_bnode_read+0x85/0x1c0
[ 60.488656][ T4162] hfsplus_bnode_read+0x85/0x1c0
[ 60.493589][ T4162] hfsplus_bnode_dump+0x3f7/0x7c0
[ 60.498609][ T4162] ? hfsplus_bnode_move+0xa80/0xa80
[ 60.503799][ T4162] ? hfsplus_bnode_write_u16+0x97/0xf0
[ 60.509251][ T4162] ? rcu_is_watching+0x11/0xa0
[ 60.514007][ T4162] ? hfsplus_bnode_move+0x355/0xa80
[ 60.519204][ T4162] ? __mark_inode_dirty+0x3dd/0xd60
[ 60.524394][ T4162] hfsplus_brec_remove+0x428/0x4e0
[ 60.529504][ T4162] __hfsplus_delete_attr+0x271/0x450
[ 60.534796][ T4162] ? hfsplus_delete_attr+0x4a0/0x4a0
[ 60.540075][ T4162] ? mutex_lock_nested+0x17/0x20
[ 60.545002][ T4162] hfsplus_delete_attr+0x34f/0x4a0
[ 60.550125][ T4162] ? hfsplus_mark_inode_dirty+0x30/0x30
[ 60.555681][ T4162] ? mutex_lock_nested+0x17/0x20
[ 60.560605][ T4162] ? hfsplus_find_init+0x146/0x1c0
[ 60.565705][ T4162] __hfsplus_setxattr+0x494/0x22c0
[ 60.570812][ T4162] ? unwind_get_return_address+0x49/0x80
[ 60.576453][ T4162] ? hfsplus_delete_all_attrs+0x3c0/0x3c0
[ 60.582167][ T4162] ? stack_trace_save+0x113/0x1c0
[ 60.587181][ T4162] ? kasan_unpoison+0x42/0x60
[ 60.591907][ T4162] ? hfsplus_setxattr+0x64/0xe0
[ 60.596749][ T4162] hfsplus_setxattr+0xac/0xe0
[ 60.601414][ T4162] hfsplus_trusted_setxattr+0x3c/0x50
[ 60.606770][ T4162] ? hfsplus_trusted_getxattr+0x40/0x40
[ 60.612321][ T4162] __vfs_setxattr+0x3e7/0x420
[ 60.617105][ T4162] __vfs_setxattr_noperm+0x12a/0x5e0
[ 60.622379][ T4162] vfs_setxattr+0x21d/0x420
[ 60.626885][ T4162] ? xattr_permission+0x4f0/0x4f0
[ 60.632354][ T4162] ? __might_fault+0xb4/0x110
[ 60.637041][ T4162] ? strncpy_from_user+0x209/0x370
[ 60.642153][ T4162] setxattr+0x27e/0x2e0
[ 60.646306][ T4162] ? path_setxattr+0x2a0/0x2a0
[ 60.651083][ T4162] ? preempt_count_add+0x8f/0x180
[ 60.656132][ T4162] ? __mnt_want_write+0x1e6/0x260
[ 60.661166][ T4162] path_setxattr+0x1bc/0x2a0
[ 60.665763][ T4162] ? simple_xattr_list_add+0xf0/0xf0
[ 60.671051][ T4162] ? syscall_enter_from_user_mode+0x2e/0x240
[ 60.677026][ T4162] __x64_sys_setxattr+0xb7/0xd0
[ 60.681897][ T4162] do_syscall_64+0x3b/0x80
[ 60.686310][ T4162] ? clear_bhb_loop+0x15/0x70
[ 60.690983][ T4162] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 60.696877][ T4162] RIP: 0033:0x7fddeda0d6f9
[ 60.701284][ T4162] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 60.720879][ T4162] RSP: 002b:00007ffd2b5cc0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[ 60.729737][ T4162] RAX: ffffffffffffffda RBX: 0031656c69662f2e RCX: 00007fddeda0d6f9
[ 60.737721][ T4162] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000200000000180
[ 60.745694][ T4162] RBP: 0072657070752e79 R08: 0000000000000002 R09: 0000000000000000
[ 60.753660][ T4162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 60.761621][ T4162] R13: 00007ffd2b5cc2a8 R14: 0000000000000001 R15: 0000000000000001
[ 60.769610][ T4162]
[ 60.772631][ T4162]
[ 60.774948][ T4162] Allocated by task 4162:
[ 60.779274][ T4162] ____kasan_kmalloc+0xba/0xf0
[ 60.784040][ T4162] __kmalloc+0x168/0x300
[ 60.788272][ T4162] __hfs_bnode_create+0xf9/0xbb0
[ 60.793205][ T4162] hfsplus_bnode_find+0x22e/0xe80
[ 60.798239][ T4162] hfsplus_brec_find+0x17f/0x570
[ 60.803166][ T4162] hfsplus_attr_exists+0x15b/0x1c0
[ 60.808268][ T4162] __hfsplus_setxattr+0x453/0x22c0
[ 60.813378][ T4162] hfsplus_setxattr+0xac/0xe0
[ 60.818064][ T4162] hfsplus_trusted_setxattr+0x3c/0x50
[ 60.823442][ T4162] __vfs_setxattr+0x3e7/0x420
[ 60.828107][ T4162] __vfs_setxattr_noperm+0x12a/0x5e0
[ 60.833380][ T4162] vfs_setxattr+0x21d/0x420
[ 60.837868][ T4162] setxattr+0x27e/0x2e0
[ 60.842008][ T4162] path_setxattr+0x1bc/0x2a0
[ 60.846579][ T4162] __x64_sys_setxattr+0xb7/0xd0
[ 60.851429][ T4162] do_syscall_64+0x3b/0x80
[ 60.855833][ T4162] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 60.861724][ T4162]
[ 60.864035][ T4162] Last potentially related work creation:
[ 60.869738][ T4162] kasan_save_stack+0x36/0x60
[ 60.874405][ T4162] kasan_record_aux_stack+0xba/0x100
[ 60.879690][ T4162] insert_work+0x54/0x3e0
[ 60.884021][ T4162] __queue_work+0x963/0xd00
[ 60.888514][ T4162] queue_work_on+0x14b/0x250
[ 60.893106][ T4162] call_usermodehelper_exec+0x269/0x450
[ 60.898650][ T4162] kobject_uevent_env+0x69e/0x8d0
[ 60.903689][ T4162] device_add+0xa4f/0xfd0
[ 60.908010][ T4162] netdev_register_kobject+0x176/0x310
[ 60.913483][ T4162] register_netdevice+0xfe7/0x16a0
[ 60.918585][ T4162] register_netdev+0x37/0x50
[ 60.923163][ T4162] rose_proto_init+0x19c/0x7c0
[ 60.927913][ T4162] do_one_initcall+0x22b/0x7a0
[ 60.932667][ T4162] do_initcall_level+0x157/0x210
[ 60.937589][ T4162] do_initcalls+0x49/0x90
[ 60.941902][ T4162] kernel_init_freeable+0x425/0x5c0
[ 60.947084][ T4162] kernel_init+0x19/0x290
[ 60.951411][ T4162] ret_from_fork+0x1f/0x30
[ 60.955828][ T4162]
[ 60.958173][ T4162] The buggy address belongs to the object at ffff88802be29000
[ 60.958173][ T4162] which belongs to the cache kmalloc-192 of size 192
[ 60.972214][ T4162] The buggy address is located 152 bytes inside of
[ 60.972214][ T4162] 192-byte region [ffff88802be29000, ffff88802be290c0)
[ 60.985475][ T4162] The buggy address belongs to the page:
[ 60.991101][ T4162] page:ffffea0000af8a40 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2be29
[ 61.001251][ T4162] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 61.008820][ T4162] raw: 00fff00000000200 ffffea0000af80c0 0000000800000008 ffff888017441a00
[ 61.017394][ T4162] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
[ 61.025958][ T4162] page dumped because: kasan: bad access detected
[ 61.032366][ T4162] page_owner tracks the page as allocated
[ 61.038062][ T4162] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 16496522300, free_ts 16495876839
[ 61.053851][ T4162] get_page_from_freelist+0x3b78/0x3d40
[ 61.059411][ T4162] __alloc_pages+0x272/0x700
[ 61.063993][ T4162] alloc_page_interleave+0x22/0x1c0
[ 61.069198][ T4162] new_slab+0xbb/0x4b0
[ 61.073256][ T4162] ___slab_alloc+0x6f6/0xe10
[ 61.077831][ T4162] kmem_cache_alloc_trace+0x1a0/0x290
[ 61.083184][ T4162] call_usermodehelper_setup+0x8a/0x260
[ 61.088715][ T4162] kobject_uevent_env+0x681/0x8d0
[ 61.093729][ T4162] device_add+0xa4f/0xfd0
[ 61.098042][ T4162] netdev_register_kobject+0x176/0x310
[ 61.103503][ T4162] register_netdevice+0xfe7/0x16a0
[ 61.108601][ T4162] register_netdev+0x37/0x50
[ 61.113181][ T4162] rose_proto_init+0x19c/0x7c0
[ 61.117931][ T4162] do_one_initcall+0x22b/0x7a0
[ 61.122679][ T4162] do_initcall_level+0x157/0x210
[ 61.127607][ T4162] do_initcalls+0x49/0x90
[ 61.132538][ T4162] page last free stack trace:
[ 61.137216][ T4162] free_unref_page_prepare+0xc34/0xcf0
[ 61.142667][ T4162] free_unref_page+0x95/0x2d0
[ 61.147336][ T4162] __vunmap+0x8b3/0xa50
[ 61.151496][ T4162] free_work+0x57/0x80
[ 61.155552][ T4162] process_one_work+0x8a1/0x10c0
[ 61.160480][ T4162] worker_thread+0xaca/0x1280
[ 61.165141][ T4162] kthread+0x3f6/0x4f0
[ 61.169194][ T4162] ret_from_fork+0x1f/0x30
[ 61.173599][ T4162]
[ 61.175908][ T4162] Memory state around the buggy address:
[ 61.181529][ T4162] ffff88802be28f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 61.189590][ T4162] ffff88802be29000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 61.197663][ T4162] >ffff88802be29080: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 61.205795][ T4162] ^
[ 61.210625][ T4162] ffff88802be29100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 61.218669][ T4162] ffff88802be29180: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 61.226711][ T4162] ==================================================================
[ 61.234753][ T4162] Disabling lock debugging due to kernel taint
[ 61.241177][ T4162] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 61.248375][ T4162] CPU: 1 PID: 4162 Comm: syz-executor138 Tainted: G B 5.15.180-syzkaller #0
[ 61.258365][ T4162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 61.268409][ T4162] Call Trace:
[ 61.271674][ T4162]
[ 61.274604][ T4162] dump_stack_lvl+0x1e3/0x2d0
[ 61.279278][ T4162] ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[ 61.284902][ T4162] ? panic+0x860/0x860
[ 61.288953][ T4162] ? rcu_is_watching+0x11/0xa0
[ 61.293721][ T4162] ? preempt_schedule_common+0xa6/0xd0
[ 61.299256][ T4162] panic+0x318/0x860
[ 61.303139][ T4162] ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 61.309302][ T4162] ? check_panic_on_warn+0x1d/0xa0
[ 61.314422][ T4162] ? fb_is_primary_device+0xd0/0xd0
[ 61.319614][ T4162] ? _raw_spin_unlock_irqrestore+0x128/0x130
[ 61.325581][ T4162] ? _raw_spin_unlock+0x40/0x40
[ 61.330882][ T4162] check_panic_on_warn+0x7e/0xa0
[ 61.335807][ T4162] ? hfsplus_bnode_read+0x85/0x1c0
[ 61.340904][ T4162] end_report+0x6d/0xf0
[ 61.345057][ T4162] kasan_report+0x18e/0x1c0
[ 61.349566][ T4162] ? hfsplus_bnode_read+0x85/0x1c0
[ 61.354667][ T4162] hfsplus_bnode_read+0x85/0x1c0
[ 61.359606][ T4162] hfsplus_bnode_dump+0x3f7/0x7c0
[ 61.364884][ T4162] ? hfsplus_bnode_move+0xa80/0xa80
[ 61.370076][ T4162] ? hfsplus_bnode_write_u16+0x97/0xf0
[ 61.375524][ T4162] ? rcu_is_watching+0x11/0xa0
[ 61.380269][ T4162] ? hfsplus_bnode_move+0x355/0xa80
[ 61.385450][ T4162] ? __mark_inode_dirty+0x3dd/0xd60
[ 61.390633][ T4162] hfsplus_brec_remove+0x428/0x4e0
[ 61.395735][ T4162] __hfsplus_delete_attr+0x271/0x450
[ 61.401011][ T4162] ? hfsplus_delete_attr+0x4a0/0x4a0
[ 61.406288][ T4162] ? mutex_lock_nested+0x17/0x20
[ 61.411212][ T4162] hfsplus_delete_attr+0x34f/0x4a0
[ 61.416308][ T4162] ? hfsplus_mark_inode_dirty+0x30/0x30
[ 61.421842][ T4162] ? mutex_lock_nested+0x17/0x20
[ 61.426763][ T4162] ? hfsplus_find_init+0x146/0x1c0
[ 61.431867][ T4162] __hfsplus_setxattr+0x494/0x22c0
[ 61.436971][ T4162] ? unwind_get_return_address+0x49/0x80
[ 61.442607][ T4162] ? hfsplus_delete_all_attrs+0x3c0/0x3c0
[ 61.448315][ T4162] ? stack_trace_save+0x113/0x1c0
[ 61.453347][ T4162] ? kasan_unpoison+0x42/0x60
[ 61.458043][ T4162] ? hfsplus_setxattr+0x64/0xe0
[ 61.462887][ T4162] hfsplus_setxattr+0xac/0xe0
[ 61.467552][ T4162] hfsplus_trusted_setxattr+0x3c/0x50
[ 61.472904][ T4162] ? hfsplus_trusted_getxattr+0x40/0x40
[ 61.478434][ T4162] __vfs_setxattr+0x3e7/0x420
[ 61.483104][ T4162] __vfs_setxattr_noperm+0x12a/0x5e0
[ 61.488393][ T4162] vfs_setxattr+0x21d/0x420
[ 61.492881][ T4162] ? xattr_permission+0x4f0/0x4f0
[ 61.497889][ T4162] ? __might_fault+0xb4/0x110
[ 61.502637][ T4162] ? strncpy_from_user+0x209/0x370
[ 61.507735][ T4162] setxattr+0x27e/0x2e0
[ 61.511893][ T4162] ? path_setxattr+0x2a0/0x2a0
[ 61.516645][ T4162] ? preempt_count_add+0x8f/0x180
[ 61.521654][ T4162] ? __mnt_want_write+0x1e6/0x260
[ 61.526677][ T4162] path_setxattr+0x1bc/0x2a0
[ 61.531253][ T4162] ? simple_xattr_list_add+0xf0/0xf0
[ 61.536525][ T4162] ? syscall_enter_from_user_mode+0x2e/0x240
[ 61.542495][ T4162] __x64_sys_setxattr+0xb7/0xd0
[ 61.547329][ T4162] do_syscall_64+0x3b/0x80
[ 61.551733][ T4162] ? clear_bhb_loop+0x15/0x70
[ 61.556399][ T4162] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 61.562278][ T4162] RIP: 0033:0x7fddeda0d6f9
[ 61.566674][ T4162] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 61.586262][ T4162] RSP: 002b:00007ffd2b5cc0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[ 61.594660][ T4162] RAX: ffffffffffffffda RBX: 0031656c69662f2e RCX: 00007fddeda0d6f9
[ 61.602622][ T4162] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000200000000180
[ 61.610577][ T4162] RBP: 0072657070752e79 R08: 0000000000000002 R09: 0000000000000000
[ 61.618558][ T4162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 61.626514][ T4162] R13: 00007ffd2b5cc2a8 R14: 0000000000000001 R15: 0000000000000001
[ 61.634474][ T4162]
[ 61.637771][ T4162] Kernel Offset: disabled
[ 61.642093][ T4162] Rebooting in 86400 seconds..