Warning: Permanently added '[localhost]:37942' (ED25519) to the list of known hosts. 2024/12/16 15:08:44 ignoring optional flag "sandboxArg"="0" 2024/12/16 15:08:44 ignoring optional flag "type"="qemu" 2024/12/16 15:08:44 parsed 1 programs [ 110.772250][ T5571] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 113.973663][ T5373] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 113.978168][ T5373] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 113.982369][ T5373] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 113.986652][ T5373] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 113.990299][ T5373] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 113.993328][ T5373] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 115.803207][ T5623] chnl_net:caif_netlink_parms(): no params data found [ 115.839161][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.843425][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.846246][ T5623] bridge_slave_0: entered allmulticast mode [ 115.849387][ T5623] bridge_slave_0: entered promiscuous mode [ 115.853734][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.856490][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.859210][ T5623] bridge_slave_1: entered allmulticast mode [ 115.864040][ T5623] bridge_slave_1: entered promiscuous mode [ 115.878913][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.885467][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.901979][ T5623] team0: Port device team_slave_0 added [ 115.905651][ T5623] team0: Port device team_slave_1 added [ 115.917735][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.921564][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.931602][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.937218][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.940889][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.952781][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.974403][ T5623] hsr_slave_0: entered promiscuous mode [ 115.977117][ T5623] hsr_slave_1: entered promiscuous mode [ 116.462898][ T5623] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 116.481975][ T5623] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 116.486955][ T5623] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 116.502804][ T5623] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 116.598349][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.626119][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.647639][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.650560][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.655061][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.657977][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.960775][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.006081][ T5623] veth0_vlan: entered promiscuous mode [ 117.027027][ T5623] veth1_vlan: entered promiscuous mode [ 117.063377][ T5623] veth0_macvtap: entered promiscuous mode [ 117.067875][ T5623] veth1_macvtap: entered promiscuous mode [ 117.115865][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.134847][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.142000][ T5623] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.145492][ T5623] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.148850][ T5623] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.166555][ T5623] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.391794][ T1036] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.462775][ T1036] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.504926][ T1036] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.643756][ T1036] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.761094][ T3076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.763714][ T3076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.801289][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.804275][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2024/12/16 15:08:57 executed programs: 0 [ 119.094049][ T4665] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 119.097926][ T4665] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 119.102825][ T4665] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 119.106327][ T4665] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 119.109480][ T4665] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 119.114691][ T4665] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 119.354447][ T5720] chnl_net:caif_netlink_parms(): no params data found [ 119.433996][ T5720] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.436941][ T5720] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.450095][ T5720] bridge_slave_0: entered allmulticast mode [ 119.453420][ T5720] bridge_slave_0: entered promiscuous mode [ 119.462408][ T5720] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.465188][ T5720] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.468092][ T5720] bridge_slave_1: entered allmulticast mode [ 119.491275][ T5720] bridge_slave_1: entered promiscuous mode [ 119.526915][ T5720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.543209][ T5720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.583070][ T5720] team0: Port device team_slave_0 added [ 119.591524][ T5720] team0: Port device team_slave_1 added [ 119.630130][ T5720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.632942][ T5720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.661531][ T5720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.671230][ T5720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.673898][ T5720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.701653][ T5720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.755563][ T5720] hsr_slave_0: entered promiscuous mode [ 119.769254][ T5720] hsr_slave_1: entered promiscuous mode [ 119.780443][ T5720] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.783340][ T5720] Cannot create hsr debugfs directory [ 119.984507][ T1036] bridge_slave_1: left allmulticast mode [ 119.986830][ T1036] bridge_slave_1: left promiscuous mode [ 119.988908][ T1036] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.012630][ T1036] bridge_slave_0: left allmulticast mode [ 120.015011][ T1036] bridge_slave_0: left promiscuous mode [ 120.017307][ T1036] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.245934][ T1036] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.252880][ T1036] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.257132][ T1036] bond0 (unregistering): Released all slaves [ 120.329010][ T1036] hsr_slave_0: left promiscuous mode [ 120.351505][ T1036] hsr_slave_1: left promiscuous mode [ 120.354143][ T1036] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.357023][ T1036] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.373169][ T1036] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.375994][ T1036] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.398735][ T1036] veth1_macvtap: left promiscuous mode [ 120.407953][ T1036] veth0_macvtap: left promiscuous mode [ 120.420239][ T1036] veth1_vlan: left promiscuous mode [ 120.422250][ T1036] veth0_vlan: left promiscuous mode [ 120.963164][ T1036] team0 (unregistering): Port device team_slave_1 removed [ 120.998272][ T1036] team0 (unregistering): Port device team_slave_0 removed [ 121.192772][ T4665] Bluetooth: hci0: command tx timeout [ 121.506307][ T5720] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 121.533253][ T5720] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 121.783851][ T5720] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 121.788662][ T5720] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 122.137936][ T5720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.193007][ T5720] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.201415][ T3076] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.203899][ T3076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.238850][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.241469][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.504869][ T5720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.561696][ T5720] veth0_vlan: entered promiscuous mode [ 122.574272][ T5720] veth1_vlan: entered promiscuous mode [ 122.613994][ T5720] veth0_macvtap: entered promiscuous mode [ 122.622654][ T5720] veth1_macvtap: entered promiscuous mode [ 122.637197][ T5720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.662803][ T5720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.670891][ T5720] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.674269][ T5720] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.677582][ T5720] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.698020][ T5720] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.805971][ T1036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.808986][ T1036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.839026][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.845590][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.918589][ T5793] loop0: detected capacity change from 0 to 1024 [ 122.987831][ T5793] ================================================================== [ 122.990990][ T5793] BUG: KASAN: slab-out-of-bounds in hfsplus_bnode_read_key+0x394/0x610 [ 122.994199][ T5793] Write of size 4026 at addr ffff88804f0d4800 by task syz.0.15/5793 [ 122.997697][ T5793] [ 122.998452][ T5793] CPU: 0 UID: 0 PID: 5793 Comm: syz.0.15 Not tainted 6.13.0-rc3-syzkaller-g78d4f34e2115 #0 [ 123.001817][ T5793] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 123.005207][ T5793] Call Trace: [ 123.006371][ T5793] [ 123.007377][ T5793] dump_stack_lvl+0x241/0x360 [ 123.008969][ T5793] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.010628][ T5793] ? __pfx__printk+0x10/0x10 [ 123.012118][ T5793] ? _printk+0xd5/0x120 [ 123.013477][ T5793] ? __virt_addr_valid+0x183/0x530 [ 123.015154][ T5793] ? __virt_addr_valid+0x183/0x530 [ 123.016848][ T5793] print_report+0x169/0x550 [ 123.018575][ T5793] ? __virt_addr_valid+0x183/0x530 [ 123.020404][ T5793] ? __virt_addr_valid+0x183/0x530 [ 123.022280][ T5793] ? __virt_addr_valid+0x45f/0x530 [ 123.023919][ T5793] ? __phys_addr+0xba/0x170 [ 123.025236][ T5793] ? hfsplus_bnode_read_key+0x394/0x610 [ 123.027271][ T5793] kasan_report+0x143/0x180 [ 123.029065][ T5793] ? hfsplus_bnode_read_key+0x394/0x610 [ 123.031186][ T5793] kasan_check_range+0x282/0x290 [ 123.033090][ T5793] ? hfsplus_bnode_read_key+0x394/0x610 [ 123.034912][ T5793] __asan_memcpy+0x40/0x70 [ 123.036475][ T5793] hfsplus_bnode_read_key+0x394/0x610 [ 123.038392][ T5793] ? __pfx_hfsplus_bnode_read_key+0x10/0x10 [ 123.040531][ T5793] ? hfsplus_bnode_write+0x1e1/0x230 [ 123.042502][ T5793] hfsplus_brec_insert+0x6ea/0xde0 [ 123.044333][ T5793] ? __pfx_hfsplus_brec_insert+0x10/0x10 [ 123.046478][ T5793] ? hfsplus_find_init+0x85/0x1c0 [ 123.048265][ T5793] ? hfsplus_create_attr+0x462/0x640 [ 123.050292][ T5793] hfsplus_create_attr+0x4a2/0x640 [ 123.052205][ T5793] ? __pfx_hfsplus_create_attr+0x10/0x10 [ 123.054343][ T5793] ? hfsplus_find_init+0x85/0x1c0 [ 123.056270][ T5793] ? hfsplus_find_init+0x14a/0x1c0 [ 123.058193][ T5793] __hfsplus_setxattr+0x6fe/0x22d0 [ 123.060127][ T5793] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 123.062568][ T5793] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 123.064830][ T5793] ? __pfx___hfsplus_setxattr+0x10/0x10 [ 123.066879][ T5793] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 123.068979][ T5793] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 123.071347][ T5793] ? stack_trace_save+0x118/0x1d0 [ 123.073274][ T5793] ? stack_depot_save_flags+0x7b4/0x940 [ 123.075279][ T5793] ? __kasan_kmalloc+0x98/0xb0 [ 123.077045][ T5793] ? __kmalloc_cache_noprof+0x243/0x390 [ 123.078993][ T5793] ? hfsplus_setxattr+0x68/0xe0 [ 123.080438][ T5793] hfsplus_setxattr+0xb0/0xe0 [ 123.081849][ T5793] hfsplus_user_setxattr+0x40/0x60 [ 123.083465][ T5793] ? __pfx_hfsplus_user_setxattr+0x10/0x10 [ 123.085416][ T5793] __vfs_setxattr+0x468/0x4a0 [ 123.087090][ T5793] __vfs_setxattr_noperm+0x12e/0x660 [ 123.089017][ T5793] vfs_setxattr+0x221/0x430 [ 123.090657][ T5793] ? __pfx_vfs_setxattr+0x10/0x10 [ 123.092443][ T5793] filename_setxattr+0x2af/0x430 [ 123.094244][ T5793] ? __phys_addr_symbol+0x2f/0x70 [ 123.096092][ T5793] ? __pfx_filename_setxattr+0x10/0x10 [ 123.098024][ T5793] ? getname_flags+0x1e3/0x540 [ 123.099732][ T5793] path_setxattrat+0x440/0x510 [ 123.101279][ T5793] ? __pfx_path_setxattrat+0x10/0x10 [ 123.103115][ T5793] ? do_sys_openat2+0x17a/0x1d0 [ 123.104841][ T5793] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 123.106933][ T5793] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 123.109206][ T5793] __x64_sys_setxattr+0xbc/0xe0 [ 123.111014][ T5793] do_syscall_64+0xf3/0x230 [ 123.112673][ T5793] ? clear_bhb_loop+0x35/0x90 [ 123.114406][ T5793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.116458][ T5793] RIP: 0033:0x7f178f77def9 [ 123.118071][ T5793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.125024][ T5793] RSP: 002b:00007f179053f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 123.127731][ T5793] RAX: ffffffffffffffda RBX: 00007f178f935f80 RCX: 00007f178f77def9 [ 123.130233][ T5793] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000020000080 [ 123.132657][ T5793] RBP: 00007f178f7f0b76 R08: 0000000000000001 R09: 0000000000000000 [ 123.135330][ T5793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.138271][ T5793] R13: 0000000000000000 R14: 00007f178f935f80 R15: 00007ffef06de848 [ 123.141202][ T5793] [ 123.142262][ T5793] [ 123.143069][ T5793] Allocated by task 5793: [ 123.144448][ T5793] kasan_save_track+0x3f/0x80 [ 123.146120][ T5793] __kasan_kmalloc+0x98/0xb0 [ 123.147723][ T5793] __kmalloc_noprof+0x285/0x4c0 [ 123.149362][ T5793] hfsplus_find_init+0x85/0x1c0 [ 123.151173][ T5793] hfsplus_create_attr+0x161/0x640 [ 123.153115][ T5793] __hfsplus_setxattr+0x6fe/0x22d0 [ 123.154868][ T5793] hfsplus_setxattr+0xb0/0xe0 [ 123.156512][ T5793] hfsplus_user_setxattr+0x40/0x60 [ 123.158323][ T5793] __vfs_setxattr+0x468/0x4a0 [ 123.160058][ T5793] __vfs_setxattr_noperm+0x12e/0x660 [ 123.162026][ T5793] vfs_setxattr+0x221/0x430 [ 123.163680][ T5793] filename_setxattr+0x2af/0x430 [ 123.165496][ T5793] path_setxattrat+0x440/0x510 [ 123.167266][ T5793] __x64_sys_setxattr+0xbc/0xe0 [ 123.169027][ T5793] do_syscall_64+0xf3/0x230 [ 123.170856][ T5793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.172974][ T5793] [ 123.173672][ T5793] The buggy address belongs to the object at ffff88804f0d4800 [ 123.173672][ T5793] which belongs to the cache kmalloc-1k of size 1024 [ 123.177961][ T5793] The buggy address is located 0 bytes inside of [ 123.177961][ T5793] allocated 536-byte region [ffff88804f0d4800, ffff88804f0d4a18) [ 123.183202][ T5793] [ 123.184159][ T5793] The buggy address belongs to the physical page: [ 123.186801][ T5793] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4f0d4 [ 123.190281][ T5793] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 123.193431][ T5793] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 123.196282][ T5793] page_type: f5(slab) [ 123.197819][ T5793] raw: 04fff00000000040 ffff88801ac41dc0 dead000000000100 dead000000000122 [ 123.200987][ T5793] raw: 0000000000000000 0000000080080008 00000001f5000000 0000000000000000 [ 123.204135][ T5793] head: 04fff00000000040 ffff88801ac41dc0 dead000000000100 dead000000000122 [ 123.207380][ T5793] head: 0000000000000000 0000000080080008 00000001f5000000 0000000000000000 [ 123.210637][ T5793] head: 04fff00000000002 ffffea00013c3501 ffffffffffffffff 0000000000000000 [ 123.213698][ T5793] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 123.216875][ T5793] page dumped because: kasan: bad access detected [ 123.219263][ T5793] page_owner tracks the page as allocated [ 123.221477][ T5793] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5685, tgid 5685 (syz-executor), ts 118311165182, free_ts 118293869464 [ 123.229135][ T5793] post_alloc_hook+0x1f3/0x230 [ 123.230901][ T5793] get_page_from_freelist+0x365c/0x37a0 [ 123.233068][ T5793] __alloc_pages_noprof+0x292/0x710 [ 123.235015][ T5793] alloc_pages_mpol_noprof+0x3e8/0x680 [ 123.237202][ T5793] alloc_slab_page+0x6a/0x110 [ 123.239274][ T5793] allocate_slab+0x5a/0x2b0 [ 123.241121][ T5793] ___slab_alloc+0xc27/0x14a0 [ 123.242956][ T5793] __slab_alloc+0x58/0xa0 [ 123.244635][ T5793] __kmalloc_cache_noprof+0x27b/0x390 [ 123.247124][ T5793] afs_alloc_call+0x7c/0x430 [ 123.249463][ T5793] afs_charge_preallocation+0xe4/0x2c0 [ 123.252083][ T5793] afs_open_socket+0x459/0x610 [ 123.254284][ T5793] afs_net_init+0x7b9/0x9a0 [ 123.256049][ T5793] ops_init+0x31e/0x590 [ 123.257622][ T5793] setup_net+0x287/0x9e0 [ 123.259754][ T5793] copy_net_ns+0x33f/0x570 [ 123.261943][ T5793] page last free pid 5347 tgid 5347 stack trace: [ 123.264924][ T5793] free_unref_page+0xd3f/0x1010 [ 123.267165][ T5793] kasan_depopulate_vmalloc_pte+0x74/0x90 [ 123.269056][ T5793] __apply_to_page_range+0x806/0xde0 [ 123.271173][ T5793] kasan_release_vmalloc+0xa5/0xd0 [ 123.272978][ T5793] purge_vmap_node+0x22f/0x8d0 [ 123.274825][ T5793] __purge_vmap_area_lazy+0x708/0xae0 [ 123.276941][ T5793] drain_vmap_area_work+0x27/0x40 [ 123.278864][ T5793] process_scheduled_works+0xa66/0x1840 [ 123.281056][ T5793] worker_thread+0x870/0xd30 [ 123.282851][ T5793] kthread+0x2f0/0x390 [ 123.284411][ T5793] ret_from_fork+0x4b/0x80 [ 123.286173][ T5793] ret_from_fork_asm+0x1a/0x30 [ 123.287775][ T5793] [ 123.288741][ T5793] Memory state around the buggy address: [ 123.290813][ T5793] ffff88804f0d4900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 123.293546][ T5793] ffff88804f0d4980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 123.296597][ T5793] >ffff88804f0d4a00: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 123.299560][ T5793] ^ [ 123.301313][ T5793] ffff88804f0d4a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 123.304368][ T5793] ffff88804f0d4b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 123.307412][ T5793] ================================================================== [ 123.331060][ T4665] Bluetooth: hci0: command tx timeout [ 123.409526][ T5793] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 123.412245][ T5793] CPU: 0 UID: 0 PID: 5793 Comm: syz.0.15 Not tainted 6.13.0-rc3-syzkaller-g78d4f34e2115 #0 [ 123.415821][ T5793] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 123.419757][ T5793] Call Trace: [ 123.420937][ T5793] [ 123.422082][ T5793] dump_stack_lvl+0x241/0x360 [ 123.424000][ T5793] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.426096][ T5793] ? __pfx__printk+0x10/0x10 [ 123.427952][ T5793] ? preempt_schedule+0xe1/0xf0 [ 123.429918][ T5793] ? vscnprintf+0x5d/0x90 [ 123.431660][ T5793] panic+0x349/0x880 [ 123.433252][ T5793] ? check_panic_on_warn+0x21/0xb0 [ 123.435156][ T5793] ? __pfx_panic+0x10/0x10 [ 123.436922][ T5793] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 123.439285][ T5793] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 123.441636][ T5793] ? print_report+0x502/0x550 [ 123.443431][ T5793] check_panic_on_warn+0x86/0xb0 [ 123.445310][ T5793] ? hfsplus_bnode_read_key+0x394/0x610 [ 123.447202][ T5793] end_report+0x77/0x160 [ 123.448714][ T5793] kasan_report+0x154/0x180 [ 123.450230][ T5793] ? hfsplus_bnode_read_key+0x394/0x610 [ 123.452228][ T5793] kasan_check_range+0x282/0x290 [ 123.454217][ T5793] ? hfsplus_bnode_read_key+0x394/0x610 [ 123.456371][ T5793] __asan_memcpy+0x40/0x70 [ 123.458122][ T5793] hfsplus_bnode_read_key+0x394/0x610 [ 123.460238][ T5793] ? __pfx_hfsplus_bnode_read_key+0x10/0x10 [ 123.462588][ T5793] ? hfsplus_bnode_write+0x1e1/0x230 [ 123.464691][ T5793] hfsplus_brec_insert+0x6ea/0xde0 [ 123.466735][ T5793] ? __pfx_hfsplus_brec_insert+0x10/0x10 [ 123.468991][ T5793] ? hfsplus_find_init+0x85/0x1c0 [ 123.470985][ T5793] ? hfsplus_create_attr+0x462/0x640 [ 123.473103][ T5793] hfsplus_create_attr+0x4a2/0x640 [ 123.475195][ T5793] ? __pfx_hfsplus_create_attr+0x10/0x10 [ 123.477506][ T5793] ? hfsplus_find_init+0x85/0x1c0 [ 123.479529][ T5793] ? hfsplus_find_init+0x14a/0x1c0 [ 123.481644][ T5793] __hfsplus_setxattr+0x6fe/0x22d0 [ 123.483695][ T5793] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 123.486206][ T5793] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 123.488519][ T5793] ? __pfx___hfsplus_setxattr+0x10/0x10 [ 123.490627][ T5793] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 123.492823][ T5793] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 123.495225][ T5793] ? stack_trace_save+0x118/0x1d0 [ 123.497115][ T5793] ? stack_depot_save_flags+0x7b4/0x940 [ 123.499169][ T5793] ? __kasan_kmalloc+0x98/0xb0 [ 123.501019][ T5793] ? __kmalloc_cache_noprof+0x243/0x390 [ 123.503064][ T5793] ? hfsplus_setxattr+0x68/0xe0 [ 123.504921][ T5793] hfsplus_setxattr+0xb0/0xe0 [ 123.506752][ T5793] hfsplus_user_setxattr+0x40/0x60 [ 123.508668][ T5793] ? __pfx_hfsplus_user_setxattr+0x10/0x10 [ 123.510883][ T5793] __vfs_setxattr+0x468/0x4a0 [ 123.512546][ T5793] __vfs_setxattr_noperm+0x12e/0x660 [ 123.514537][ T5793] vfs_setxattr+0x221/0x430 [ 123.516249][ T5793] ? __pfx_vfs_setxattr+0x10/0x10 [ 123.518149][ T5793] filename_setxattr+0x2af/0x430 [ 123.519915][ T5793] ? __phys_addr_symbol+0x2f/0x70 [ 123.521746][ T5793] ? __pfx_filename_setxattr+0x10/0x10 [ 123.523764][ T5793] ? getname_flags+0x1e3/0x540 [ 123.525535][ T5793] path_setxattrat+0x440/0x510 [ 123.527229][ T5793] ? __pfx_path_setxattrat+0x10/0x10 [ 123.529228][ T5793] ? do_sys_openat2+0x17a/0x1d0 [ 123.531035][ T5793] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 123.533259][ T5793] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 123.535578][ T5793] __x64_sys_setxattr+0xbc/0xe0 [ 123.537467][ T5793] do_syscall_64+0xf3/0x230 [ 123.539206][ T5793] ? clear_bhb_loop+0x35/0x90 [ 123.541026][ T5793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.543285][ T5793] RIP: 0033:0x7f178f77def9 [ 123.544944][ T5793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.551882][ T5793] RSP: 002b:00007f179053f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 123.555024][ T5793] RAX: ffffffffffffffda RBX: 00007f178f935f80 RCX: 00007f178f77def9 [ 123.557934][ T5793] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000020000080 [ 123.560872][ T5793] RBP: 00007f178f7f0b76 R08: 0000000000000001 R09: 0000000000000000 [ 123.563787][ T5793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.566775][ T5793] R13: 0000000000000000 R14: 00007f178f935f80 R15: 00007ffef06de848 [ 123.569747][ T5793] [ 123.571176][ T5793] Kernel Offset: disabled [ 123.572800][ T5793] Rebooting in 86400 seconds..