program:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) (async)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
ioprio_set$pid(0x1, 0x0, 0x0)
sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0xa)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000400)='./file3\x00', 0xa08802, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRESDEC], 0x1, 0x693, &(0x7f0000000ec0)="$eJzs3c1rHOcdB/DvrFay1gVHSWwnLYGKGNJSU1uycFqVQtweig+hBBcaCr0IW46F106QlaKE0qrv1x7yB6QHHQq9tNC7IYWe2h4KoTfRQwkUekkvurnM7Ky0trTKrixprebzMbPzzDyv89uZZzS7mA3wqXX1fJr3U+Tq+VdXy+2N9bn2xvrciTq7naRMN5JmZ5XiblJ8kFxJZ8lny511+aJfP+8tzV/78OONjzpbzXqpyjf2qjeYtXrJdJKxer3T+L7au963vd19vV4vbO0pto6wDNi5buBg1B7ssDZM9ce8boEnQdG5b+4wlZxMMln/HZB6dmgc7egO3lCzHAAAABxTT21mM6s5NepxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwHFSpDVWrTpLo5ueTtH9/f+Jel/q9LXGiMf8OO6PegAAAAAAAAAAcAA+v5nNrOZUkr+X2w863+y/WL2erl4/k7dzL4tZzoWsZiErWclyZpNM9TQ0sbqwsrI8O0DNS7vWvLS/8f9+f9UAAAAAAAAA4P/NT3O1+v4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACeGEUy1llVy+lueiqNZpLJJBNlubXkb930MVHstvP+0Y8DAAAAHsvkPuo8tZnNrOZUd/tBUT3zn62elyfzdu5mJUtZSTuLuVE/Q5dP/Y2N9bn2xvrcnY31uarj7z/o6LTzjf8MNYyqxXQ+e9i95+erEq3czFK150KuV4O5kUZVs/R8PZ6t5eFOflKOqfVKbcCR3ajXZWe/7vcpwkFoDFthqqo0vhWRmXpsZUNP7x2JT3x3mnv2NJvG1ic/p/foqXtIxZAxP9mtl+SXj8T8lX/99nsDNnMItiLRSBWJSz1n39mN9bmx9I158oU//u71W+27t2/dvHf+0E6jo/LoOTHXE4nn9j77nvBINIcsP1NF4szW9tV8K9/J+UzntSxnKT/IQlaymHpmzEJ9PpevUz1RSnZE6spDW6990kgm6velM4sOMqbpnKhSC3mxqnsqSynyZm5kMS9X/y5lNl/J5VzOfM87fKbvO1wdWzXTNoa76s99MduX+q/KmXqwesmfBy04vM4ttYzr0z1x7Z1zp6q83j3bUXpmgPvRkHNj83N1ouzjZ/u5bRyaRyMx2xOJZ/eOxG+qa+Ne++7t5VsLb/Vpf+2R7ZfGt9O/OMw789DK8+WZTNYzycNnR5n37NYs83C8JupvXDp5jR15Z6q8ouheqd/e5UotIz5flT67a0uXqrznduaN1SP/xz978h76eytv/mU08QRgSCe/dHKi9e/WX1vvt37eutV6dfKbJ7564oWJjP9p/GvNmbGXGi8Uf8j7+dH28z8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB/99559/ZCu724vHui0T/rYBNF/UM+/co008oRDOMoE0Wy1n4wdrAtZ/THNUCi+yOCj9vO61eeiMM51omxJPWeHyfb50/9FnV+Ce27/x3ZDAUclosrd966eO+dd7+8dGfhjcU3Fu+OX748PzN/+eW5izeX2osznddRjxI4DNt/D4x6JAAAAAAAAAAAAMCgjuJ/GvR0Nz3CQwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACOqavn0xxPkdmZCzPl9sb6XLtcuuntks0kjUZS/DApPkiupLNkqqe5ol8/7y3NX/vw442Ptttqdss39qo3mLV6yXSSsXq9w8T+2rver72BFVtHWAbsXDdwMGr/CwAA//8xgggQ")
setxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f0000000240), &(0x7f0000001400)=ANY=[], 0x841, 0x0) (async)
setxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f0000000240), &(0x7f0000001400)=ANY=[], 0x841, 0x0)
lremovexattr(&(0x7f0000000240)='./file1\x00', &(0x7f00000000c0)=@known='trusted.overlay.upper\x00')
[ 74.998557][ T4667] Bluetooth: hci0: command tx timeout
[ 75.110894][ T5327] loop0: detected capacity change from 0 to 1024
[ 75.142451][ T5327] hfsplus: request for non-existent node 211 in B*Tree
[ 75.144865][ T5327] hfsplus: request for non-existent node 211 in B*Tree
[ 75.148361][ T5327] ==================================================================
[ 75.150978][ T5327] BUG: KASAN: wild-memory-access in hfsplus_bnode_dump+0x403/0xbb0
[ 75.153595][ T5327] Read of size 2 at addr 000508800000103e by task syz.0.0/5327
[ 75.156286][ T5327]
[ 75.157156][ T5327] CPU: 0 UID: 0 PID: 5327 Comm: syz.0.0 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0
[ 75.157172][ T5327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 75.157178][ T5327] Call Trace:
[ 75.157185][ T5327]
[ 75.157191][ T5327] dump_stack_lvl+0x241/0x360
[ 75.157207][ T5327] ? __pfx_dump_stack_lvl+0x10/0x10
[ 75.157218][ T5327] ? __pfx__printk+0x10/0x10
[ 75.157235][ T5327] ? _printk+0xd5/0x120
[ 75.157251][ T5327] print_report+0xe8/0x550
[ 75.157268][ T5327] ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 75.157283][ T5327] ? __virt_addr_valid+0x58/0x530
[ 75.157298][ T5327] ? hfsplus_bnode_dump+0x403/0xbb0
[ 75.157312][ T5327] kasan_report+0x143/0x180
[ 75.157326][ T5327] ? irqentry_exit+0x63/0x90
[ 75.157389][ T5327] ? hfsplus_bnode_dump+0x403/0xbb0
[ 75.157403][ T5327] ? hfsplus_bnode_dump+0x403/0xbb0
[ 75.157417][ T5327] kasan_check_range+0x282/0x290
[ 75.157440][ T5327] ? hfsplus_bnode_dump+0x403/0xbb0
[ 75.157455][ T5327] __asan_memcpy+0x29/0x70
[ 75.157498][ T5327] hfsplus_bnode_dump+0x403/0xbb0
[ 75.157543][ T5327] ? __pfx_hfsplus_bnode_dump+0x10/0x10
[ 75.157559][ T5327] ? hfsplus_bnode_write_u16+0x9b/0xf0
[ 75.157575][ T5327] ? __pfx_hfsplus_bnode_write_u16+0x10/0x10
[ 75.157590][ T5327] ? rcu_is_watching+0x15/0xb0
[ 75.157601][ T5327] ? hfsplus_bnode_move+0x2da/0x910
[ 75.157615][ T5327] ? __mark_inode_dirty+0x3db/0xe90
[ 75.157627][ T5327] hfsplus_brec_remove+0x42c/0x4f0
[ 75.157646][ T5327] __hfsplus_delete_attr+0x275/0x450
[ 75.157658][ T5327] ? __pfx___hfsplus_delete_attr+0x10/0x10
[ 75.157668][ T5327] ? hfsplus_find_init+0x85/0x1c0
[ 75.157685][ T5327] hfsplus_delete_attr+0x353/0x4b0
[ 75.157697][ T5327] ? __pfx_hfsplus_delete_attr+0x10/0x10
[ 75.157707][ T5327] ? hfsplus_find_init+0x85/0x1c0
[ 75.157721][ T5327] ? hfsplus_find_init+0x14a/0x1c0
[ 75.157736][ T5327] __hfsplus_setxattr+0x801/0x22d0
[ 75.157749][ T5327] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 75.157764][ T5327] ? _raw_spin_unlock_irqrestore+0x8f/0x140
[ 75.157774][ T5327] ? lockdep_hardirqs_on+0x99/0x150
[ 75.157785][ T5327] ? __pfx___hfsplus_setxattr+0x10/0x10
[ 75.157795][ T5327] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 75.157806][ T5327] ? stack_depot_save_flags+0x7b4/0x940
[ 75.157831][ T5327] ? __kasan_kmalloc+0x98/0xb0
[ 75.157844][ T5327] ? __kmalloc_cache_noprof+0x243/0x390
[ 75.157854][ T5327] ? hfsplus_setxattr+0x68/0xe0
[ 75.157865][ T5327] hfsplus_setxattr+0xb0/0xe0
[ 75.157876][ T5327] hfsplus_trusted_setxattr+0x40/0x60
[ 75.157889][ T5327] ? __pfx_hfsplus_trusted_setxattr+0x10/0x10
[ 75.157901][ T5327] __vfs_removexattr+0x42a/0x460
[ 75.157919][ T5327] __vfs_removexattr_locked+0x206/0x450
[ 75.157936][ T5327] vfs_removexattr+0x103/0x2b0
[ 75.157951][ T5327] ? __pfx_rcu_read_lock_any_held+0x10/0x10
[ 75.157963][ T5327] ? __pfx_vfs_removexattr+0x10/0x10
[ 75.157980][ T5327] path_removexattrat+0x32e/0x670
[ 75.157993][ T5327] ? __pfx_path_removexattrat+0x10/0x10
[ 75.158004][ T5327] ? do_futex+0x33b/0x560
[ 75.158021][ T5327] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 75.158034][ T5327] ? do_syscall_64+0x100/0x230
[ 75.158047][ T5327] __x64_sys_lremovexattr+0x65/0x80
[ 75.158059][ T5327] do_syscall_64+0xf3/0x230
[ 75.158072][ T5327] ? clear_bhb_loop+0x35/0x90
[ 75.158088][ T5327] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 75.158102][ T5327] RIP: 0033:0x7ff60e58cd29
[ 75.158113][ T5327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 75.158122][ T5327] RSP: 002b:00007ff60f3f1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c6
[ 75.158133][ T5327] RAX: ffffffffffffffda RBX: 00007ff60e7a5fa0 RCX: 00007ff60e58cd29
[ 75.158140][ T5327] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000240
[ 75.158146][ T5327] RBP: 00007ff60e60e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 75.158152][ T5327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 75.158158][ T5327] R13: 0000000000000000 R14: 00007ff60e7a5fa0 R15: 00007ffca070d988
[ 75.158169][ T5327]
[ 75.158173][ T5327] ==================================================================
[ 75.308401][ T5327] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 75.311148][ T5327] CPU: 0 UID: 0 PID: 5327 Comm: syz.0.0 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0
[ 75.314902][ T5327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 75.319009][ T5327] Call Trace:
[ 75.320304][ T5327]
[ 75.321504][ T5327] dump_stack_lvl+0x241/0x360
[ 75.323336][ T5327] ? __pfx_dump_stack_lvl+0x10/0x10
[ 75.325232][ T5327] ? __pfx__printk+0x10/0x10
[ 75.326957][ T5327] ? lock_release+0xbf/0xa30
[ 75.328726][ T5327] ? vscnprintf+0x5d/0x90
[ 75.330401][ T5327] panic+0x349/0x880
[ 75.331903][ T5327] ? check_panic_on_warn+0x21/0xb0
[ 75.333852][ T5327] ? __pfx_panic+0x10/0x10
[ 75.335596][ T5327] ? mark_lock+0x9a/0x360
[ 75.337235][ T5327] ? _raw_spin_unlock_irqrestore+0xd8/0x140
[ 75.339536][ T5327] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 75.341780][ T5327] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 75.344084][ T5327] ? print_report+0xe8/0x550
[ 75.345865][ T5327] ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 75.348193][ T5327] check_panic_on_warn+0x86/0xb0
[ 75.350091][ T5327] ? hfsplus_bnode_dump+0x403/0xbb0
[ 75.352046][ T5327] end_report+0x77/0x160
[ 75.353701][ T5327] kasan_report+0x154/0x180
[ 75.355430][ T5327] ? irqentry_exit+0x63/0x90
[ 75.357209][ T5327] ? hfsplus_bnode_dump+0x403/0xbb0
[ 75.359168][ T5327] ? hfsplus_bnode_dump+0x403/0xbb0
[ 75.361038][ T5327] kasan_check_range+0x282/0x290
[ 75.362862][ T5327] ? hfsplus_bnode_dump+0x403/0xbb0
[ 75.365039][ T5327] __asan_memcpy+0x29/0x70
[ 75.366862][ T5327] hfsplus_bnode_dump+0x403/0xbb0
[ 75.368821][ T5327] ? __pfx_hfsplus_bnode_dump+0x10/0x10
[ 75.371007][ T5327] ? hfsplus_bnode_write_u16+0x9b/0xf0
[ 75.373132][ T5327] ? __pfx_hfsplus_bnode_write_u16+0x10/0x10
[ 75.375467][ T5327] ? rcu_is_watching+0x15/0xb0
[ 75.377323][ T5327] ? hfsplus_bnode_move+0x2da/0x910
[ 75.379317][ T5327] ? __mark_inode_dirty+0x3db/0xe90
[ 75.381291][ T5327] hfsplus_brec_remove+0x42c/0x4f0
[ 75.383276][ T5327] __hfsplus_delete_attr+0x275/0x450
[ 75.385358][ T5327] ? __pfx___hfsplus_delete_attr+0x10/0x10
[ 75.387596][ T5327] ? hfsplus_find_init+0x85/0x1c0
[ 75.389505][ T5327] hfsplus_delete_attr+0x353/0x4b0
[ 75.391453][ T5327] ? __pfx_hfsplus_delete_attr+0x10/0x10
[ 75.393652][ T5327] ? hfsplus_find_init+0x85/0x1c0
[ 75.395546][ T5327] ? hfsplus_find_init+0x14a/0x1c0
[ 75.397543][ T5327] __hfsplus_setxattr+0x801/0x22d0
[ 75.399440][ T5327] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 75.401626][ T5327] ? _raw_spin_unlock_irqrestore+0x8f/0x140
[ 75.403794][ T5327] ? lockdep_hardirqs_on+0x99/0x150
[ 75.405597][ T5327] ? __pfx___hfsplus_setxattr+0x10/0x10
[ 75.407708][ T5327] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 75.410124][ T5327] ? stack_depot_save_flags+0x7b4/0x940
[ 75.412034][ T5327] ? __kasan_kmalloc+0x98/0xb0
[ 75.413701][ T5327] ? __kmalloc_cache_noprof+0x243/0x390
[ 75.418679][ T5327] ? hfsplus_setxattr+0x68/0xe0
[ 75.420405][ T5327] hfsplus_setxattr+0xb0/0xe0
[ 75.422344][ T5327] hfsplus_trusted_setxattr+0x40/0x60
[ 75.424117][ T5327] ? __pfx_hfsplus_trusted_setxattr+0x10/0x10
[ 75.426047][ T5327] __vfs_removexattr+0x42a/0x460
[ 75.427750][ T5327] __vfs_removexattr_locked+0x206/0x450
[ 75.429615][ T5327] vfs_removexattr+0x103/0x2b0
[ 75.431316][ T5327] ? __pfx_rcu_read_lock_any_held+0x10/0x10
[ 75.433318][ T5327] ? __pfx_vfs_removexattr+0x10/0x10
[ 75.435159][ T5327] path_removexattrat+0x32e/0x670
[ 75.437098][ T5327] ? __pfx_path_removexattrat+0x10/0x10
[ 75.439279][ T5327] ? do_futex+0x33b/0x560
[ 75.440707][ T5327] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 75.442916][ T5327] ? do_syscall_64+0x100/0x230
[ 75.444527][ T5327] __x64_sys_lremovexattr+0x65/0x80
[ 75.446490][ T5327] do_syscall_64+0xf3/0x230
[ 75.448160][ T5327] ? clear_bhb_loop+0x35/0x90
[ 75.449833][ T5327] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 75.452011][ T5327] RIP: 0033:0x7ff60e58cd29
[ 75.453985][ T5327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 75.460403][ T5327] RSP: 002b:00007ff60f3f1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c6
[ 75.462898][ T5327] RAX: ffffffffffffffda RBX: 00007ff60e7a5fa0 RCX: 00007ff60e58cd29
[ 75.465558][ T5327] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000240
[ 75.468431][ T5327] RBP: 00007ff60e60e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 75.471078][ T5327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 75.473602][ T5327] R13: 0000000000000000 R14: 00007ff60e7a5fa0 R15: 00007ffca070d988
[ 75.476070][ T5327]
[ 75.479029][ T5327] Kernel Offset: disabled
[ 75.480621][ T5327] Rebooting in 86400 seconds..