Warning: Permanently added '[localhost]:39491' (ED25519) to the list of known hosts.
2025/07/16 04:36:11 ignoring optional flag "sandboxArg"="0"
2025/07/16 04:36:12 parsed 1 programs
syzkaller login: [ 88.017008][ T5330] cgroup: Unknown subsys name 'net'
[ 88.091634][ T5330] cgroup: Unknown subsys name 'cpuset'
[ 88.097360][ T5330] cgroup: Unknown subsys name 'rlimit'
[ 89.691446][ T5330] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 91.811674][ T50] cfg80211: failed to load regulatory.db
[ 93.982437][ T5347] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 94.441356][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 94.444890][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 94.480784][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 94.484281][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 95.472313][ T5367] chnl_net:caif_netlink_parms(): no params data found
[ 95.546034][ T5367] bridge0: port 1(bridge_slave_0) entered blocking state
[ 95.550586][ T5367] bridge0: port 1(bridge_slave_0) entered disabled state
[ 95.553740][ T5367] bridge_slave_0: entered allmulticast mode
[ 95.558562][ T5367] bridge_slave_0: entered promiscuous mode
[ 95.564642][ T5367] bridge0: port 2(bridge_slave_1) entered blocking state
[ 95.569433][ T5367] bridge0: port 2(bridge_slave_1) entered disabled state
[ 95.572912][ T5367] bridge_slave_1: entered allmulticast mode
[ 95.577775][ T5367] bridge_slave_1: entered promiscuous mode
[ 95.604570][ T5367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 95.611195][ T5367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 95.636414][ T5367] team0: Port device team_slave_0 added
[ 95.642586][ T5367] team0: Port device team_slave_1 added
[ 95.665856][ T5367] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 95.669537][ T5367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 95.681026][ T5367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 95.688049][ T5367] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 95.690975][ T5367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 95.702561][ T5367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 95.741108][ T5367] hsr_slave_0: entered promiscuous mode
[ 95.744408][ T5367] hsr_slave_1: entered promiscuous mode
[ 95.898421][ T5367] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 95.907138][ T5367] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 95.913961][ T5367] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 95.921317][ T5367] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 95.954526][ T5367] bridge0: port 2(bridge_slave_1) entered blocking state
[ 95.957815][ T5367] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 95.961735][ T5367] bridge0: port 1(bridge_slave_0) entered blocking state
[ 95.964899][ T5367] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 96.028624][ T5367] 8021q: adding VLAN 0 to HW filter on device bond0
[ 96.043229][ T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 96.049989][ T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 96.063098][ T5367] 8021q: adding VLAN 0 to HW filter on device team0
[ 96.073325][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 96.076381][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 96.100576][ T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 96.103672][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 96.299334][ T5367] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 96.337829][ T5367] veth0_vlan: entered promiscuous mode
[ 96.345203][ T5367] veth1_vlan: entered promiscuous mode
[ 96.372687][ T5367] veth0_macvtap: entered promiscuous mode
[ 96.379310][ T5367] veth1_macvtap: entered promiscuous mode
[ 96.394951][ T5367] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 96.405577][ T5367] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 96.415264][ T5367] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.419769][ T5367] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.423462][ T5367] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.429650][ T5367] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.572505][ T5367] syz-executor (5367) used greatest stack depth: 20984 bytes left
[ 96.593293][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 96.641089][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 96.703715][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 96.810648][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 97.723385][ T5410] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 97.733248][ T45] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 97.737721][ T45] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 97.741303][ T45] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 97.745154][ T45] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 99.084315][ T13] bridge_slave_1: left allmulticast mode
[ 99.104626][ T13] bridge_slave_1: left promiscuous mode
[ 99.117792][ T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 99.147796][ T13] bridge_slave_0: left allmulticast mode
[ 99.150330][ T13] bridge_slave_0: left promiscuous mode
[ 99.152965][ T13] bridge0: port 1(bridge_slave_0) entered disabled state
2025/07/16 04:36:26 executed programs: 0
[ 99.491440][ T4685] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 99.496894][ T4685] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 99.500821][ T4685] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 99.504638][ T4685] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 99.512802][ T4685] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 99.957199][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 99.963200][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 99.971563][ T13] bond0 (unregistering): Released all slaves
[ 100.104786][ T13] hsr_slave_0: left promiscuous mode
[ 100.109893][ T13] hsr_slave_1: left promiscuous mode
[ 100.112795][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 100.116126][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 100.129146][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 100.132391][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 100.162165][ T13] veth1_macvtap: left promiscuous mode
[ 100.164803][ T13] veth0_macvtap: left promiscuous mode
[ 100.180134][ T13] veth1_vlan: left promiscuous mode
[ 100.182697][ T13] veth0_vlan: left promiscuous mode
[ 100.604920][ T13] team0 (unregistering): Port device team_slave_1 removed
[ 100.624447][ T13] team0 (unregistering): Port device team_slave_0 removed
[ 101.200998][ T5438] chnl_net:caif_netlink_parms(): no params data found
[ 101.568582][ T4685] Bluetooth: hci0: command tx timeout
[ 101.837033][ T5438] bridge0: port 1(bridge_slave_0) entered blocking state
[ 101.840271][ T5438] bridge0: port 1(bridge_slave_0) entered disabled state
[ 101.843652][ T5438] bridge_slave_0: entered allmulticast mode
[ 101.878003][ T5438] bridge_slave_0: entered promiscuous mode
[ 101.904266][ T5438] bridge0: port 2(bridge_slave_1) entered blocking state
[ 101.916647][ T5438] bridge0: port 2(bridge_slave_1) entered disabled state
[ 101.920173][ T5438] bridge_slave_1: entered allmulticast mode
[ 101.956851][ T5438] bridge_slave_1: entered promiscuous mode
[ 102.052535][ T5438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 102.071930][ T5438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 102.139926][ T5438] team0: Port device team_slave_0 added
[ 102.160303][ T5438] team0: Port device team_slave_1 added
[ 102.228365][ T5438] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 102.231360][ T5438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 102.244996][ T5438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 102.257536][ T5438] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 102.260415][ T5438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 102.273435][ T5438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 102.353730][ T5438] hsr_slave_0: entered promiscuous mode
[ 102.367800][ T5438] hsr_slave_1: entered promiscuous mode
[ 102.998826][ T5438] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 103.018028][ T5438] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 103.028839][ T5438] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 103.044199][ T5438] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 103.194816][ T5438] 8021q: adding VLAN 0 to HW filter on device bond0
[ 103.229939][ T5438] 8021q: adding VLAN 0 to HW filter on device team0
[ 103.242010][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 103.245480][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 103.290768][ T1040] bridge0: port 2(bridge_slave_1) entered blocking state
[ 103.294057][ T1040] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 103.608795][ T5438] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 103.650837][ T4685] Bluetooth: hci0: command tx timeout
[ 103.699751][ T5438] veth0_vlan: entered promiscuous mode
[ 103.721189][ T5438] veth1_vlan: entered promiscuous mode
[ 103.770682][ T5438] veth0_macvtap: entered promiscuous mode
[ 103.780277][ T5438] veth1_macvtap: entered promiscuous mode
[ 103.829585][ T5438] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 103.842157][ T5438] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 103.861618][ T5438] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 103.865871][ T5438] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 103.888029][ T5438] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 103.892316][ T5438] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 104.035579][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 104.054823][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 104.089224][ T1040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 104.098948][ T1040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 104.204032][ T5500] loop0: detected capacity change from 0 to 1024
[ 104.310036][ T5500] hfsplus: request for non-existent node 211 in B*Tree
[ 104.316977][ T5500] hfsplus: request for non-existent node 211 in B*Tree
[ 104.332030][ T5500] ==================================================================
[ 104.335871][ T5500] BUG: KASAN: slab-out-of-bounds in hfsplus_bnode_read+0xc0/0x2a0
[ 104.339317][ T5500] Read of size 8 at addr ffff888036ca19c8 by task syz.0.16/5500
[ 104.347021][ T5500]
[ 104.348122][ T5500] CPU: 0 UID: 0 PID: 5500 Comm: syz.0.16 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full)
[ 104.348136][ T5500] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 104.348142][ T5500] Call Trace:
[ 104.348148][ T5500]
[ 104.348155][ T5500] dump_stack_lvl+0x189/0x250
[ 104.348175][ T5500] ? __virt_addr_valid+0x1c8/0x5c0
[ 104.348191][ T5500] ? rcu_is_watching+0x15/0xb0
[ 104.348205][ T5500] ? __kasan_check_byte+0x12/0x40
[ 104.348220][ T5500] ? __pfx_dump_stack_lvl+0x10/0x10
[ 104.348231][ T5500] ? rcu_is_watching+0x15/0xb0
[ 104.348242][ T5500] ? lock_release+0x4b/0x3e0
[ 104.348255][ T5500] ? __virt_addr_valid+0x1c8/0x5c0
[ 104.348267][ T5500] ? __virt_addr_valid+0x4a5/0x5c0
[ 104.348280][ T5500] print_report+0xca/0x230
[ 104.348291][ T5500] ? hfsplus_bnode_read+0xc0/0x2a0
[ 104.348303][ T5500] kasan_report+0x118/0x150
[ 104.348316][ T5500] ? hfsplus_bnode_read+0xc0/0x2a0
[ 104.348334][ T5500] hfsplus_bnode_read+0xc0/0x2a0
[ 104.348346][ T5500] hfsplus_bnode_dump+0x300/0x450
[ 104.348360][ T5500] ? __pfx_hfsplus_bnode_dump+0x10/0x10
[ 104.348371][ T5500] ? hfsplus_bnode_write_u16+0x8b/0xd0
[ 104.348382][ T5500] ? hfsplus_bnode_move+0x393/0xb90
[ 104.348392][ T5500] ? __pfx___hfsplus_brec_find+0x10/0x10
[ 104.348404][ T5500] hfsplus_brec_remove+0x480/0x550
[ 104.348420][ T5500] __hfsplus_delete_attr+0x1d4/0x360
[ 104.348434][ T5500] ? __pfx___hfsplus_delete_attr+0x10/0x10
[ 104.348449][ T5500] ? hfsplus_attr_build_key+0xee/0x260
[ 104.348462][ T5500] hfsplus_delete_attr+0x231/0x2d0
[ 104.348477][ T5500] ? __pfx_hfsplus_delete_attr+0x10/0x10
[ 104.348491][ T5500] ? hfsplus_find_init+0x8c/0x1d0
[ 104.348504][ T5500] ? hfsplus_find_init+0x15a/0x1d0
[ 104.348517][ T5500] __hfsplus_setxattr+0x71c/0x1f40
[ 104.348532][ T5500] ? do_raw_spin_lock+0x121/0x290
[ 104.348548][ T5500] ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 104.349529][ T5500] ? lockdep_hardirqs_on+0x9c/0x150
[ 104.349544][ T5500] ? __pfx___hfsplus_setxattr+0x10/0x10
[ 104.349558][ T5500] ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 104.349592][ T5500] ? __kasan_kmalloc+0x93/0xb0
[ 104.349606][ T5500] ? hfsplus_setxattr+0x102/0x180
[ 104.349622][ T5500] hfsplus_setxattr+0x11e/0x180
[ 104.349639][ T5500] hfsplus_trusted_setxattr+0x40/0x60
[ 104.349653][ T5500] ? __pfx_hfsplus_trusted_setxattr+0x10/0x10
[ 104.349668][ T5500] __vfs_removexattr+0x42e/0x470
[ 104.349687][ T5500] __vfs_removexattr_locked+0x1ed/0x230
[ 104.349702][ T5500] vfs_removexattr+0x80/0x1b0
[ 104.349716][ T5500] path_removexattrat+0x35d/0x690
[ 104.349728][ T5500] ? __pfx_path_removexattrat+0x10/0x10
[ 104.349738][ T5500] ? do_futex+0x395/0x420
[ 104.349758][ T5500] ? __pfx___se_sys_futex+0x10/0x10
[ 104.349773][ T5500] ? rcu_is_watching+0x15/0xb0
[ 104.349788][ T5500] __x64_sys_lremovexattr+0x65/0x80
[ 104.349805][ T5500] do_syscall_64+0xfa/0x3b0
[ 104.349817][ T5500] ? lockdep_hardirqs_on+0x9c/0x150
[ 104.349833][ T5500] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 104.349845][ T5500] ? clear_bhb_loop+0x60/0xb0
[ 104.349857][ T5500] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 104.349869][ T5500] RIP: 0033:0x7f76c638e929
[ 104.349883][ T5500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 104.349893][ T5500] RSP: 002b:00007ffe71923bc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000c6
[ 104.349906][ T5500] RAX: ffffffffffffffda RBX: 00007f76c65b5fa0 RCX: 00007f76c638e929
[ 104.349914][ T5500] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000200000000240
[ 104.349921][ T5500] RBP: 00007f76c6410b39 R08: 0000000000000000 R09: 0000000000000000
[ 104.349928][ T5500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 104.349934][ T5500] R13: 00007f76c65b5fa0 R14: 00007f76c65b5fa0 R15: 0000000000000002
[ 104.349947][ T5500]
[ 104.349951][ T5500]
[ 104.515500][ T5500] Allocated by task 5500:
[ 104.517447][ T5500] kasan_save_track+0x3e/0x80
[ 104.519503][ T5500] __kasan_kmalloc+0x93/0xb0
[ 104.521507][ T5500] __kmalloc_noprof+0x27a/0x4f0
[ 104.523677][ T5500] __hfs_bnode_create+0xf3/0x810
[ 104.526093][ T5500] hfsplus_bnode_find+0x224/0xd20
[ 104.528259][ T5500] hfsplus_brec_find+0x15c/0x500
[ 104.530503][ T5500] hfsplus_attr_exists+0x163/0x1d0
[ 104.532729][ T5500] __hfsplus_setxattr+0x33e/0x1f40
[ 104.534963][ T5500] hfsplus_setxattr+0x11e/0x180
[ 104.536963][ T5500] hfsplus_trusted_setxattr+0x40/0x60
[ 104.539302][ T5500] __vfs_setxattr+0x439/0x480
[ 104.541438][ T5500] __vfs_setxattr_noperm+0x12d/0x660
[ 104.543835][ T5500] vfs_setxattr+0x16b/0x2f0
[ 104.545994][ T5500] filename_setxattr+0x274/0x600
[ 104.548279][ T5500] path_setxattrat+0x364/0x3a0
[ 104.550426][ T5500] __x64_sys_setxattr+0xbc/0xe0
[ 104.552587][ T5500] do_syscall_64+0xfa/0x3b0
[ 104.554640][ T5500] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 104.557257][ T5500]
[ 104.558355][ T5500] The buggy address belongs to the object at ffff888036ca1900
[ 104.558355][ T5500] which belongs to the cache kmalloc-192 of size 192
[ 104.564433][ T5500] The buggy address is located 48 bytes to the right of
[ 104.564433][ T5500] allocated 152-byte region [ffff888036ca1900, ffff888036ca1998)
[ 104.570979][ T5500]
[ 104.572081][ T5500] The buggy address belongs to the physical page:
[ 104.574862][ T5500] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x36ca1
[ 104.578740][ T5500] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff)
[ 104.581949][ T5500] page_type: f5(slab)
[ 104.583736][ T5500] raw: 04fff00000000000 ffff88801a4413c0 ffffea0001644180 dead000000000002
[ 104.587565][ T5500] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[ 104.591299][ T5500] page dumped because: kasan: bad access detected
[ 104.594070][ T5500] page_owner tracks the page as allocated
[ 104.596570][ T5500] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 18958745754, free_ts 0
[ 104.604014][ T5500] post_alloc_hook+0x240/0x2a0
[ 104.606140][ T5500] get_page_from_freelist+0x21e4/0x22c0
[ 104.608534][ T5500] __alloc_frozen_pages_noprof+0x181/0x370
[ 104.611019][ T5500] alloc_pages_mpol+0x232/0x4a0
[ 104.613203][ T5500] allocate_slab+0x8a/0x3b0
[ 104.615161][ T5500] ___slab_alloc+0xbfc/0x1480
[ 104.617281][ T5500] __kmalloc_cache_noprof+0x296/0x3d0
[ 104.619639][ T5500] call_usermodehelper_setup+0x8e/0x270
[ 104.622062][ T5500] kobject_uevent_env+0x65c/0x8c0
[ 104.624319][ T5500] device_add+0x557/0xb50
[ 104.626307][ T5500] device_create+0x25b/0x2f0
[ 104.628288][ T5500] mon_bin_add+0xb6/0x130
[ 104.630162][ T5500] mon_bus_init+0x162/0x2a0
[ 104.632191][ T5500] mon_notify+0x112/0x3f0
[ 104.634097][ T5500] notifier_call_chain+0x1b3/0x3e0
[ 104.637097][ T5500] blocking_notifier_call_chain+0x6a/0x90
[ 104.640386][ T5500] page_owner free stack trace missing
[ 104.642707][ T5500]
[ 104.643789][ T5500] Memory state around the buggy address:
[ 104.646351][ T5500] ffff888036ca1880: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[ 104.649939][ T5500] ffff888036ca1900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 104.653505][ T5500] >ffff888036ca1980: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 104.656946][ T5500] ^
[ 104.659742][ T5500] ffff888036ca1a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 104.663516][ T5500] ffff888036ca1a80: 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 104.667505][ T5500] ==================================================================
[ 104.867235][ T5500] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 104.870452][ T5500] CPU: 0 UID: 0 PID: 5500 Comm: syz.0.16 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full)
[ 104.875615][ T5500] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 104.880138][ T5500] Call Trace:
[ 104.881762][ T5500]
[ 104.883206][ T5500] dump_stack_lvl+0x99/0x250
[ 104.885245][ T5500] ? __asan_memcpy+0x40/0x70
[ 104.887199][ T5500] ? __pfx_dump_stack_lvl+0x10/0x10
[ 104.889358][ T5500] ? __pfx__printk+0x10/0x10
[ 104.891360][ T5500] panic+0x2db/0x790
[ 104.893126][ T5500] ? __pfx_preempt_schedule+0x10/0x10
[ 104.895455][ T5500] ? __pfx_panic+0x10/0x10
[ 104.897610][ T5500] ? _raw_spin_unlock_irqrestore+0xfd/0x110
[ 104.900183][ T5500] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 104.902845][ T5500] ? hfsplus_bnode_read+0xc0/0x2a0
[ 104.904966][ T5500] check_panic_on_warn+0x89/0xb0
[ 104.907521][ T5500] ? hfsplus_bnode_read+0xc0/0x2a0
[ 104.910307][ T5500] end_report+0x78/0x160
[ 104.912515][ T5500] kasan_report+0x129/0x150
[ 104.914510][ T5500] ? hfsplus_bnode_read+0xc0/0x2a0
[ 104.916650][ T5500] hfsplus_bnode_read+0xc0/0x2a0
[ 104.918814][ T5500] hfsplus_bnode_dump+0x300/0x450
[ 104.920923][ T5500] ? __pfx_hfsplus_bnode_dump+0x10/0x10
[ 104.923265][ T5500] ? hfsplus_bnode_write_u16+0x8b/0xd0
[ 104.925679][ T5500] ? hfsplus_bnode_move+0x393/0xb90
[ 104.927927][ T5500] ? __pfx___hfsplus_brec_find+0x10/0x10
[ 104.930581][ T5500] hfsplus_brec_remove+0x480/0x550
[ 104.933103][ T5500] __hfsplus_delete_attr+0x1d4/0x360
[ 104.935564][ T5500] ? __pfx___hfsplus_delete_attr+0x10/0x10
[ 104.938503][ T5500] ? hfsplus_attr_build_key+0xee/0x260
[ 104.941283][ T5500] hfsplus_delete_attr+0x231/0x2d0
[ 104.943740][ T5500] ? __pfx_hfsplus_delete_attr+0x10/0x10
[ 104.946227][ T5500] ? hfsplus_find_init+0x8c/0x1d0
[ 104.948339][ T5500] ? hfsplus_find_init+0x15a/0x1d0
[ 104.950451][ T5500] __hfsplus_setxattr+0x71c/0x1f40
[ 104.952633][ T5500] ? do_raw_spin_lock+0x121/0x290
[ 104.954820][ T5500] ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 104.957404][ T5500] ? lockdep_hardirqs_on+0x9c/0x150
[ 104.959643][ T5500] ? __pfx___hfsplus_setxattr+0x10/0x10
[ 104.961966][ T5500] ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 104.964549][ T5500] ? __kasan_kmalloc+0x93/0xb0
[ 104.966594][ T5500] ? hfsplus_setxattr+0x102/0x180
[ 104.968763][ T5500] hfsplus_setxattr+0x11e/0x180
[ 104.970950][ T5500] hfsplus_trusted_setxattr+0x40/0x60
[ 104.974109][ T5500] ? __pfx_hfsplus_trusted_setxattr+0x10/0x10
[ 104.977219][ T5500] __vfs_removexattr+0x42e/0x470
[ 104.979377][ T5500] __vfs_removexattr_locked+0x1ed/0x230
[ 104.982006][ T5500] vfs_removexattr+0x80/0x1b0
[ 104.983957][ T5500] path_removexattrat+0x35d/0x690
[ 104.986062][ T5500] ? __pfx_path_removexattrat+0x10/0x10
[ 104.988588][ T5500] ? do_futex+0x395/0x420
[ 104.990600][ T5500] ? __pfx___se_sys_futex+0x10/0x10
[ 104.992956][ T5500] ? rcu_is_watching+0x15/0xb0
[ 104.995130][ T5500] __x64_sys_lremovexattr+0x65/0x80
[ 104.997497][ T5500] do_syscall_64+0xfa/0x3b0
[ 104.999396][ T5500] ? lockdep_hardirqs_on+0x9c/0x150
[ 105.001544][ T5500] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 105.004240][ T5500] ? clear_bhb_loop+0x60/0xb0
[ 105.006238][ T5500] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 105.008652][ T5500] RIP: 0033:0x7f76c638e929
[ 105.010355][ T5500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 105.017962][ T5500] RSP: 002b:00007ffe71923bc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000c6
[ 105.021260][ T5500] RAX: ffffffffffffffda RBX: 00007f76c65b5fa0 RCX: 00007f76c638e929
[ 105.024491][ T5500] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000200000000240
[ 105.027771][ T5500] RBP: 00007f76c6410b39 R08: 0000000000000000 R09: 0000000000000000
[ 105.031229][ T5500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 105.034617][ T5500] R13: 00007f76c65b5fa0 R14: 00007f76c65b5fa0 R15: 0000000000000002
[ 105.038073][ T5500]
[ 105.039805][ T5500] Kernel Offset: disabled
[ 105.041705][ T5500] Rebooting in 86400 seconds..
VM DIAGNOSIS:
04:36:31 Registers:
info registers vcpu 0
CPU#0
RAX=0000000000000065 RBX=0000000000000065 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90002a4eb70
R8 =ffff888033d00237 R9 =1ffff110067a0046 R10=dffffc0000000000 R11=ffffffff85479720
R12=dffffc0000000000 R13=ffffffff99af98a3 R14=ffffffff99dfe700 R15=0000000000000000
RIP=ffffffff8547979c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555576479500 ffffffff 00c00000
GS =0000 ffff88808d21b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007fac197e3000 CR3=00000000510d9000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=000000000000000f Opmask01=00000000000000ff Opmask02=000000000000003f Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0072657070752e79 616c7265766f2e64
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe71923270 00007ffe719230f0
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe71923130
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe71923270
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe71923270 00007ffe719230f0
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe71923130 00007ffe71923110
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f76c6411bb3
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f76c6411c91
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0073756c70736668
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000035313631 3535000500060006
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3434373634343831 3531363135353930 3733373034343736 3434383100000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 10088231ffff0000 0bff6a3070375cec 0658475b1581bdaf debbdafec4c3bd7a
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b19274c97ab59837 aaf637cb766adbb6 8f8de3f0fb5fcd2d ef3f5fa2b9a7aa64
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b3a4ae483e2930fc 52468d24cd92ede9 ba5cbb5cfac6f6e5 330b99d9914f1cd3
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e7aba98e00000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000