program: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000400)='./file3\x00', 0xa08802, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRESDEC], 0x1, 0x693, &(0x7f0000000ec0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f0000000240), &(0x7f0000001400)=ANY=[], 0x841, 0x0) mkdir(&(0x7f0000001080)='./file0\x00', 0x74) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) (async) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r1 = getuid() mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x25000, &(0x7f0000001580)={[], [{@uid_lt={'uid<', r1}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}]}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000640)='./file1\x00', 0x0, 0x0) (async) r3 = open(&(0x7f0000000640)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000010c0)='./bus\x00') linkat(r2, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000240)='./file0\x00', 0x0) syz_read_part_table(0x1051, &(0x7f0000000000)="$eJzsz8GpAjEQBuDJy3PdrULL8GgT9uHFo6yW4tUSRYgMuosNiAjfB/kzJJPABF81lIhV/d+UWM5n28OrONXoF11EHDNyRbceh2iX/dT7l1HefzxPxS3j3vrcWj4en/dl7q+76ydnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBf8QgAAP//msoLjQ==") lremovexattr(&(0x7f0000000240)='./file1\x00', &(0x7f00000000c0)=@known='trusted.overlay.upper\x00') (async) lremovexattr(&(0x7f0000000240)='./file1\x00', &(0x7f00000000c0)=@known='trusted.overlay.upper\x00') socket$kcm(0x21, 0x2, 0x2) (async) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r4, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c00000000000008120100000d000000440c000180ee36000000001100000000"], 0x20}, 0x0) (async) sendmsg$inet(r4, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c00000000000008120100000d000000440c000180ee36000000001100000000"], 0x20}, 0x0) [ 68.638046][ T4661] Bluetooth: hci0: command tx timeout [ 68.703728][ T5314] loop0: detected capacity change from 0 to 1024 [ 68.839280][ T5314] hfsplus: request for non-existent node 211 in B*Tree [ 68.842348][ T5314] hfsplus: request for non-existent node 211 in B*Tree [ 68.845555][ T5315] ================================================================== [ 68.848495][ T5315] BUG: KASAN: wild-memory-access in hfsplus_bnode_dump+0x403/0xbb0 [ 68.852049][ T5315] Read of size 2 at addr 000508800000103e by task syz.0.0/5315 [ 68.854608][ T5315] [ 68.855472][ T5315] CPU: 0 UID: 0 PID: 5315 Comm: syz.0.0 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 68.859253][ T5315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.863218][ T5315] Call Trace: [ 68.864306][ T5315] [ 68.865268][ T5315] dump_stack_lvl+0x241/0x360 [ 68.866917][ T5315] ? __pfx_dump_stack_lvl+0x10/0x10 [ 68.868696][ T5315] ? __pfx__printk+0x10/0x10 [ 68.870354][ T5315] ? _printk+0xd5/0x120 [ 68.871829][ T5315] print_report+0xe8/0x550 [ 68.873428][ T5315] ? __virt_addr_valid+0x58/0x530 [ 68.875223][ T5315] ? hfsplus_bnode_dump+0x403/0xbb0 [ 68.876829][ T5315] kasan_report+0x143/0x180 [ 68.878295][ T5315] ? hfsplus_bnode_dump+0x403/0xbb0 [ 68.880103][ T5315] ? hfsplus_bnode_dump+0x403/0xbb0 [ 68.882051][ T5315] kasan_check_range+0x282/0x290 [ 68.883953][ T5315] ? hfsplus_bnode_dump+0x403/0xbb0 [ 68.886000][ T5315] __asan_memcpy+0x29/0x70 [ 68.887571][ T5315] hfsplus_bnode_dump+0x403/0xbb0 [ 68.889326][ T5315] ? __pfx_hfsplus_bnode_dump+0x10/0x10 [ 68.891198][ T5315] ? hfsplus_bnode_write_u16+0x9b/0xf0 [ 68.893095][ T5315] ? __pfx_hfsplus_bnode_write_u16+0x10/0x10 [ 68.895192][ T5315] ? rcu_is_watching+0x15/0xb0 [ 68.896970][ T5315] ? hfsplus_bnode_move+0x2da/0x910 [ 68.898786][ T5315] ? __mark_inode_dirty+0x3db/0xe90 [ 68.900591][ T5315] hfsplus_brec_remove+0x42c/0x4f0 [ 68.902344][ T5315] __hfsplus_delete_attr+0x275/0x450 [ 68.904204][ T5315] ? __pfx___hfsplus_delete_attr+0x10/0x10 [ 68.906366][ T5315] ? hfsplus_find_init+0x85/0x1c0 [ 68.908202][ T5315] hfsplus_delete_attr+0x353/0x4b0 [ 68.910104][ T5315] ? __pfx_hfsplus_delete_attr+0x10/0x10 [ 68.912308][ T5315] ? hfsplus_find_init+0x85/0x1c0 [ 68.914233][ T5315] ? hfsplus_find_init+0x14a/0x1c0 [ 68.916147][ T5315] __hfsplus_setxattr+0x801/0x22d0 [ 68.917999][ T5315] ? kernel_text_address+0xa7/0xe0 [ 68.919987][ T5315] ? arch_stack_walk+0xfd/0x150 [ 68.921850][ T5315] ? __pfx___hfsplus_setxattr+0x10/0x10 [ 68.924030][ T5315] ? __pfx_stack_trace_save+0x10/0x10 [ 68.925977][ T5315] ? stack_depot_save_flags+0x37/0x940 [ 68.929455][ T5315] ? __kasan_kmalloc+0x98/0xb0 [ 68.931262][ T5315] ? __kmalloc_cache_noprof+0x243/0x390 [ 68.933340][ T5315] ? hfsplus_setxattr+0x68/0xe0 [ 68.935198][ T5315] hfsplus_setxattr+0xb0/0xe0 [ 68.936975][ T5315] hfsplus_trusted_setxattr+0x40/0x60 [ 68.938819][ T5315] ? __pfx_hfsplus_trusted_setxattr+0x10/0x10 [ 68.941123][ T5315] __vfs_removexattr+0x42a/0x460 [ 68.942975][ T5315] __vfs_removexattr_locked+0x206/0x450 [ 68.945049][ T5315] vfs_removexattr+0x103/0x2b0 [ 68.946827][ T5315] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 68.949174][ T5315] ? __pfx_vfs_removexattr+0x10/0x10 [ 68.951373][ T5315] path_removexattrat+0x32e/0x670 [ 68.953403][ T5315] ? __pfx_path_removexattrat+0x10/0x10 [ 68.955571][ T5315] ? do_futex+0x392/0x560 [ 68.957247][ T5315] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 68.959702][ T5315] ? do_syscall_64+0x100/0x230 [ 68.961627][ T5315] __x64_sys_lremovexattr+0x65/0x80 [ 68.963733][ T5315] do_syscall_64+0xf3/0x230 [ 68.965567][ T5315] ? clear_bhb_loop+0x35/0x90 [ 68.967342][ T5315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.969455][ T5315] RIP: 0033:0x7f4b93585d29 [ 68.971172][ T5315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.978229][ T5315] RSP: 002b:00007f4b92ffe038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c6 [ 68.981406][ T5315] RAX: ffffffffffffffda RBX: 00007f4b93776080 RCX: 00007f4b93585d29 [ 68.984312][ T5315] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000240 [ 68.987173][ T5315] RBP: 00007f4b93601aa8 R08: 0000000000000000 R09: 0000000000000000 [ 68.990167][ T5315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.993073][ T5315] R13: 0000000000000000 R14: 00007f4b93776080 R15: 00007fff71674668 [ 68.996052][ T5315] [ 68.997216][ T5315] ================================================================== [ 69.012378][ T5315] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 69.015173][ T5315] CPU: 0 UID: 0 PID: 5315 Comm: syz.0.0 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 69.018941][ T5315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.022930][ T5315] Call Trace: [ 69.024175][ T5315] [ 69.025332][ T5315] dump_stack_lvl+0x241/0x360 [ 69.027172][ T5315] ? __pfx_dump_stack_lvl+0x10/0x10 [ 69.029245][ T5315] ? __pfx__printk+0x10/0x10 [ 69.031092][ T5315] ? preempt_schedule+0xe1/0xf0 [ 69.033001][ T5315] ? vscnprintf+0x5d/0x90 [ 69.034669][ T5315] panic+0x349/0x880 [ 69.036182][ T5315] ? check_panic_on_warn+0x21/0xb0 [ 69.038045][ T5315] ? __pfx_panic+0x10/0x10 [ 69.039889][ T5315] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 69.042177][ T5315] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 69.044501][ T5315] ? print_report+0xe8/0x550 [ 69.046070][ T5315] check_panic_on_warn+0x86/0xb0 [ 69.047807][ T5315] ? hfsplus_bnode_dump+0x403/0xbb0 [ 69.049543][ T5315] end_report+0x77/0x160 [ 69.050927][ T5315] kasan_report+0x154/0x180 [ 69.052433][ T5315] ? hfsplus_bnode_dump+0x403/0xbb0 [ 69.054415][ T5315] ? hfsplus_bnode_dump+0x403/0xbb0 [ 69.056543][ T5315] kasan_check_range+0x282/0x290 [ 69.058469][ T5315] ? hfsplus_bnode_dump+0x403/0xbb0 [ 69.060438][ T5315] __asan_memcpy+0x29/0x70 [ 69.062202][ T5315] hfsplus_bnode_dump+0x403/0xbb0 [ 69.064161][ T5315] ? __pfx_hfsplus_bnode_dump+0x10/0x10 [ 69.066296][ T5315] ? hfsplus_bnode_write_u16+0x9b/0xf0 [ 69.068693][ T5315] ? __pfx_hfsplus_bnode_write_u16+0x10/0x10 [ 69.070895][ T5315] ? rcu_is_watching+0x15/0xb0 [ 69.072568][ T5315] ? hfsplus_bnode_move+0x2da/0x910 [ 69.074441][ T5315] ? __mark_inode_dirty+0x3db/0xe90 [ 69.076275][ T5315] hfsplus_brec_remove+0x42c/0x4f0 [ 69.077988][ T5315] __hfsplus_delete_attr+0x275/0x450 [ 69.079744][ T5315] ? __pfx___hfsplus_delete_attr+0x10/0x10 [ 69.081718][ T5315] ? hfsplus_find_init+0x85/0x1c0 [ 69.083541][ T5315] hfsplus_delete_attr+0x353/0x4b0 [ 69.085428][ T5315] ? __pfx_hfsplus_delete_attr+0x10/0x10 [ 69.087611][ T5315] ? hfsplus_find_init+0x85/0x1c0 [ 69.089708][ T5315] ? hfsplus_find_init+0x14a/0x1c0 [ 69.091771][ T5315] __hfsplus_setxattr+0x801/0x22d0 [ 69.093775][ T5315] ? kernel_text_address+0xa7/0xe0 [ 69.095841][ T5315] ? arch_stack_walk+0xfd/0x150 [ 69.097908][ T5315] ? __pfx___hfsplus_setxattr+0x10/0x10 [ 69.100020][ T5315] ? __pfx_stack_trace_save+0x10/0x10 [ 69.102318][ T5315] ? stack_depot_save_flags+0x37/0x940 [ 69.104508][ T5315] ? __kasan_kmalloc+0x98/0xb0 [ 69.106382][ T5315] ? __kmalloc_cache_noprof+0x243/0x390 [ 69.108581][ T5315] ? hfsplus_setxattr+0x68/0xe0 [ 69.110460][ T5315] hfsplus_setxattr+0xb0/0xe0 [ 69.112256][ T5315] hfsplus_trusted_setxattr+0x40/0x60 [ 69.114369][ T5315] ? __pfx_hfsplus_trusted_setxattr+0x10/0x10 [ 69.116754][ T5315] __vfs_removexattr+0x42a/0x460 [ 69.118612][ T5315] __vfs_removexattr_locked+0x206/0x450 [ 69.120687][ T5315] vfs_removexattr+0x103/0x2b0 [ 69.122553][ T5315] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 69.124930][ T5315] ? __pfx_vfs_removexattr+0x10/0x10 [ 69.126973][ T5315] path_removexattrat+0x32e/0x670 [ 69.128939][ T5315] ? __pfx_path_removexattrat+0x10/0x10 [ 69.131077][ T5315] ? do_futex+0x392/0x560 [ 69.132649][ T5315] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 69.134920][ T5315] ? do_syscall_64+0x100/0x230 [ 69.136694][ T5315] __x64_sys_lremovexattr+0x65/0x80 [ 69.138558][ T5315] do_syscall_64+0xf3/0x230 [ 69.140309][ T5315] ? clear_bhb_loop+0x35/0x90 [ 69.142057][ T5315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.144422][ T5315] RIP: 0033:0x7f4b93585d29 [ 69.146130][ T5315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.153189][ T5315] RSP: 002b:00007f4b92ffe038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c6 [ 69.156281][ T5315] RAX: ffffffffffffffda RBX: 00007f4b93776080 RCX: 00007f4b93585d29 [ 69.159288][ T5315] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000240 [ 69.162230][ T5315] RBP: 00007f4b93601aa8 R08: 0000000000000000 R09: 0000000000000000 [ 69.165199][ T5315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.168171][ T5315] R13: 0000000000000000 R14: 00007f4b93776080 R15: 00007fff71674668 [ 69.171271][ T5315] [ 69.172751][ T5315] Kernel Offset: disabled [ 69.174361][ T5315] Rebooting in 86400 seconds..