program:
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000400)='./file1\x00', 0xa08802, &(0x7f0000000140)=ANY=[], 0x1, 0x693, &(0x7f0000000ec0)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180), &(0x7f00000002c0)=ANY=[], 0xb2, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) (async)
lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBMETA(r0, 0x4b63, 0x0)
[ 69.114187][ T4664] Bluetooth: hci0: command tx timeout
[ 69.204858][ T5319] loop0: detected capacity change from 0 to 1024
[ 69.246350][ T5320] hfsplus: request for non-existent node 211 in B*Tree
[ 69.249259][ T5320] hfsplus: request for non-existent node 211 in B*Tree
[ 69.254572][ T5319] ==================================================================
[ 69.257637][ T5319] BUG: KASAN: wild-memory-access in hfsplus_bnode_dump+0x403/0xbb0
[ 69.260705][ T5319] Read of size 2 at addr 000508800000103e by task syz.0.0/5319
[ 69.263535][ T5319]
[ 69.264394][ T5319] CPU: 0 UID: 0 PID: 5319 Comm: syz.0.0 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0
[ 69.268423][ T5319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 69.272327][ T5319] Call Trace:
[ 69.273497][ T5319]
[ 69.274518][ T5319] dump_stack_lvl+0x241/0x360
[ 69.276168][ T5319] ? __pfx_dump_stack_lvl+0x10/0x10
[ 69.277941][ T5319] ? __pfx__printk+0x10/0x10
[ 69.279587][ T5319] ? _printk+0xd5/0x120
[ 69.281049][ T5319] print_report+0xe8/0x550
[ 69.282589][ T5319] ? __virt_addr_valid+0x58/0x530
[ 69.284345][ T5319] ? hfsplus_bnode_dump+0x403/0xbb0
[ 69.286042][ T5319] kasan_report+0x143/0x180
[ 69.287572][ T5319] ? hfsplus_bnode_dump+0x403/0xbb0
[ 69.289479][ T5319] ? hfsplus_bnode_dump+0x403/0xbb0
[ 69.291576][ T5319] kasan_check_range+0x282/0x290
[ 69.293399][ T5319] ? hfsplus_bnode_dump+0x403/0xbb0
[ 69.295307][ T5319] __asan_memcpy+0x29/0x70
[ 69.296886][ T5319] hfsplus_bnode_dump+0x403/0xbb0
[ 69.298980][ T5319] ? __pfx_hfsplus_bnode_dump+0x10/0x10
[ 69.301055][ T5319] ? hfsplus_bnode_write_u16+0x9b/0xf0
[ 69.303122][ T5319] ? __pfx_hfsplus_bnode_write_u16+0x10/0x10
[ 69.305342][ T5319] ? rcu_is_watching+0x15/0xb0
[ 69.307156][ T5319] ? hfsplus_bnode_move+0x2da/0x910
[ 69.309128][ T5319] ? __mark_inode_dirty+0x3db/0xe90
[ 69.311084][ T5319] hfsplus_brec_remove+0x42c/0x4f0
[ 69.313055][ T5319] __hfsplus_delete_attr+0x275/0x450
[ 69.315061][ T5319] ? __pfx___hfsplus_delete_attr+0x10/0x10
[ 69.317259][ T5319] ? hfsplus_find_init+0x85/0x1c0
[ 69.319231][ T5319] hfsplus_delete_attr+0x353/0x4b0
[ 69.321059][ T5319] ? __pfx_hfsplus_delete_attr+0x10/0x10
[ 69.323082][ T5319] ? hfsplus_find_init+0x85/0x1c0
[ 69.324948][ T5319] ? hfsplus_find_init+0x14a/0x1c0
[ 69.326868][ T5319] __hfsplus_setxattr+0x4ad/0x22d0
[ 69.328956][ T5319] ? kernel_text_address+0xa7/0xe0
[ 69.330895][ T5319] ? arch_stack_walk+0xfd/0x150
[ 69.332636][ T5319] ? __pfx___hfsplus_setxattr+0x10/0x10
[ 69.334645][ T5319] ? stack_trace_save+0x118/0x1d0
[ 69.336337][ T5319] ? __lock_acquire+0x1397/0x2100
[ 69.338224][ T5319] ? __pfx_stack_trace_save+0x10/0x10
[ 69.340186][ T5319] ? stack_depot_save_flags+0x29/0x830
[ 69.342282][ T5319] ? __kasan_kmalloc+0x98/0xb0
[ 69.344196][ T5319] ? __kmalloc_cache_noprof+0x243/0x390
[ 69.346318][ T5319] ? hfsplus_setxattr+0x68/0xe0
[ 69.348355][ T5319] hfsplus_setxattr+0xb0/0xe0
[ 69.350226][ T5319] hfsplus_trusted_setxattr+0x40/0x60
[ 69.352172][ T5319] ? __pfx_hfsplus_trusted_setxattr+0x10/0x10
[ 69.354331][ T5319] __vfs_setxattr+0x468/0x4a0
[ 69.355977][ T5319] __vfs_setxattr_noperm+0x12e/0x660
[ 69.357872][ T5319] vfs_setxattr+0x221/0x430
[ 69.359543][ T5319] ? __pfx_vfs_setxattr+0x10/0x10
[ 69.361303][ T5319] filename_setxattr+0x2af/0x430
[ 69.363166][ T5319] ? __pfx_filename_setxattr+0x10/0x10
[ 69.365243][ T5319] ? getname_flags+0x1e3/0x540
[ 69.367031][ T5319] path_setxattrat+0x440/0x510
[ 69.368837][ T5319] ? __pfx_path_setxattrat+0x10/0x10
[ 69.370792][ T5319] ? do_sys_openat2+0x17a/0x1d0
[ 69.372606][ T5319] ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 69.374811][ T5319] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 69.377153][ T5319] __x64_sys_lsetxattr+0xbf/0xe0
[ 69.379033][ T5319] do_syscall_64+0xf3/0x230
[ 69.380749][ T5319] ? clear_bhb_loop+0x35/0x90
[ 69.382504][ T5319] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 69.384711][ T5319] RIP: 0033:0x7f034fb7fed9
[ 69.386299][ T5319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 69.393248][ T5319] RSP: 002b:00007f0350a38058 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd
[ 69.396075][ T5319] RAX: ffffffffffffffda RBX: 00007f034fd45fa0 RCX: 00007f034fb7fed9
[ 69.399035][ T5319] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000020000040
[ 69.401884][ T5319] RBP: 00007f034fbf3cc8 R08: 0000000000000000 R09: 0000000000000000
[ 69.404630][ T5319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 69.407293][ T5319] R13: 0000000000000000 R14: 00007f034fd45fa0 R15: 00007ffff609f268
[ 69.409979][ T5319]
[ 69.411055][ T5319] ==================================================================
[ 69.423023][ T5319] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 69.425619][ T5319] CPU: 0 UID: 0 PID: 5319 Comm: syz.0.0 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0
[ 69.429389][ T5319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 69.433302][ T5319] Call Trace:
[ 69.434497][ T5319]
[ 69.435644][ T5319] dump_stack_lvl+0x241/0x360
[ 69.437458][ T5319] ? __pfx_dump_stack_lvl+0x10/0x10
[ 69.439676][ T5319] ? __pfx__printk+0x10/0x10
[ 69.441451][ T5319] ? preempt_schedule+0xe1/0xf0
[ 69.443293][ T5319] ? vscnprintf+0x5d/0x90
[ 69.444900][ T5319] panic+0x349/0x880
[ 69.446384][ T5319] ? check_panic_on_warn+0x21/0xb0
[ 69.448343][ T5319] ? __pfx_panic+0x10/0x10
[ 69.450063][ T5319] ? _raw_spin_unlock_irqrestore+0x130/0x140
[ 69.452423][ T5319] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 69.454796][ T5319] ? print_report+0xe8/0x550
[ 69.456683][ T5319] check_panic_on_warn+0x86/0xb0
[ 69.458608][ T5319] ? hfsplus_bnode_dump+0x403/0xbb0
[ 69.460584][ T5319] end_report+0x77/0x160
[ 69.462152][ T5319] kasan_report+0x154/0x180
[ 69.463882][ T5319] ? hfsplus_bnode_dump+0x403/0xbb0
[ 69.465871][ T5319] ? hfsplus_bnode_dump+0x403/0xbb0
[ 69.467957][ T5319] kasan_check_range+0x282/0x290
[ 69.469851][ T5319] ? hfsplus_bnode_dump+0x403/0xbb0
[ 69.471893][ T5319] __asan_memcpy+0x29/0x70
[ 69.473597][ T5319] hfsplus_bnode_dump+0x403/0xbb0
[ 69.475524][ T5319] ? __pfx_hfsplus_bnode_dump+0x10/0x10
[ 69.477563][ T5319] ? hfsplus_bnode_write_u16+0x9b/0xf0
[ 69.479582][ T5319] ? __pfx_hfsplus_bnode_write_u16+0x10/0x10
[ 69.481774][ T5319] ? rcu_is_watching+0x15/0xb0
[ 69.483590][ T5319] ? hfsplus_bnode_move+0x2da/0x910
[ 69.485709][ T5319] ? __mark_inode_dirty+0x3db/0xe90
[ 69.487684][ T5319] hfsplus_brec_remove+0x42c/0x4f0
[ 69.489721][ T5319] __hfsplus_delete_attr+0x275/0x450
[ 69.491734][ T5319] ? __pfx___hfsplus_delete_attr+0x10/0x10
[ 69.493852][ T5319] ? hfsplus_find_init+0x85/0x1c0
[ 69.495818][ T5319] hfsplus_delete_attr+0x353/0x4b0
[ 69.497870][ T5319] ? __pfx_hfsplus_delete_attr+0x10/0x10
[ 69.500176][ T5319] ? hfsplus_find_init+0x85/0x1c0
[ 69.502177][ T5319] ? hfsplus_find_init+0x14a/0x1c0
[ 69.504107][ T5319] __hfsplus_setxattr+0x4ad/0x22d0
[ 69.506097][ T5319] ? kernel_text_address+0xa7/0xe0
[ 69.508089][ T5319] ? arch_stack_walk+0xfd/0x150
[ 69.509935][ T5319] ? __pfx___hfsplus_setxattr+0x10/0x10
[ 69.512060][ T5319] ? stack_trace_save+0x118/0x1d0
[ 69.513986][ T5319] ? __lock_acquire+0x1397/0x2100
[ 69.515948][ T5319] ? __pfx_stack_trace_save+0x10/0x10
[ 69.518060][ T5319] ? stack_depot_save_flags+0x29/0x830
[ 69.520205][ T5319] ? __kasan_kmalloc+0x98/0xb0
[ 69.522014][ T5319] ? __kmalloc_cache_noprof+0x243/0x390
[ 69.524166][ T5319] ? hfsplus_setxattr+0x68/0xe0
[ 69.526025][ T5319] hfsplus_setxattr+0xb0/0xe0
[ 69.527901][ T5319] hfsplus_trusted_setxattr+0x40/0x60
[ 69.529816][ T5319] ? __pfx_hfsplus_trusted_setxattr+0x10/0x10
[ 69.532027][ T5319] __vfs_setxattr+0x468/0x4a0
[ 69.533811][ T5319] __vfs_setxattr_noperm+0x12e/0x660
[ 69.535690][ T5319] vfs_setxattr+0x221/0x430
[ 69.537305][ T5319] ? __pfx_vfs_setxattr+0x10/0x10
[ 69.539072][ T5319] filename_setxattr+0x2af/0x430
[ 69.540846][ T5319] ? __pfx_filename_setxattr+0x10/0x10
[ 69.542776][ T5319] ? getname_flags+0x1e3/0x540
[ 69.544448][ T5319] path_setxattrat+0x440/0x510
[ 69.546031][ T5319] ? __pfx_path_setxattrat+0x10/0x10
[ 69.547951][ T5319] ? do_sys_openat2+0x17a/0x1d0
[ 69.549691][ T5319] ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 69.551945][ T5319] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 69.554253][ T5319] __x64_sys_lsetxattr+0xbf/0xe0
[ 69.556118][ T5319] do_syscall_64+0xf3/0x230
[ 69.557822][ T5319] ? clear_bhb_loop+0x35/0x90
[ 69.559596][ T5319] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 69.561974][ T5319] RIP: 0033:0x7f034fb7fed9
[ 69.563617][ T5319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 69.570749][ T5319] RSP: 002b:00007f0350a38058 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd
[ 69.573762][ T5319] RAX: ffffffffffffffda RBX: 00007f034fd45fa0 RCX: 00007f034fb7fed9
[ 69.576864][ T5319] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000020000040
[ 69.579805][ T5319] RBP: 00007f034fbf3cc8 R08: 0000000000000000 R09: 0000000000000000
[ 69.582782][ T5319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 69.585703][ T5319] R13: 0000000000000000 R14: 00007f034fd45fa0 R15: 00007ffff609f268
[ 69.588516][ T5319]
[ 69.589946][ T5319] Kernel Offset: disabled
[ 69.591526][ T5319] Rebooting in 86400 seconds..