./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3132798124

<...>
Warning: Permanently added '10.128.0.245' (ED25519) to the list of known hosts.
execve("./syz-executor3132798124", ["./syz-executor3132798124"], 0x7ffd06833cd0 /* 10 vars */) = 0
brk(NULL)                               = 0x555567f39000
brk(0x555567f39d00)                     = 0x555567f39d00
arch_prctl(ARCH_SET_FS, 0x555567f39380) = 0
set_tid_address(0x555567f39650)         = 5835
set_robust_list(0x555567f39660, 24)     = 0
rseq(0x555567f39ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor3132798124", 4096) = 28
getrandom("\x00\x2e\x71\x5d\xeb\x70\xbc\xa7", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x555567f39d00
brk(0x555567f5ad00)                     = 0x555567f5ad00
brk(0x555567f5b000)                     = 0x555567f5b000
mprotect(0x7fdb4274c000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
executing program
write(1, "executing program\n", 18)     = 18
memfd_create("syzkaller", 0)            = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fdb3a200000
write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768) = 32768
munmap(0x7fdb3a200000, 138412032)       = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 4
ioctl(4, LOOP_SET_FD, 3)                = 0
close(3)                                = 0
close(4)                                = 0
mkdir("./file1", 0777)                  = 0
mount("/dev/loop0", "./file1", "hfs", 0, "") = 0
openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3
[   62.970821][ T5835] loop0: detected capacity change from 0 to 64
chdir("./file1")                        = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = -1 EBUSY (Device or resource busy)
openat(AT_FDCWD, ".", O_RDONLY)         = 4
mkdirat(4, "./bus", 000)                = 0
[   63.037416][ T5835] ==================================================================
[   63.045498][ T5835] BUG: KASAN: slab-out-of-bounds in hfs_bnode_read_key+0x314/0x450
[   63.053403][ T5835] Write of size 94 at addr ffff888146b54180 by task syz-executor313/5835
[   63.061791][ T5835] 
[   63.064117][ T5835] CPU: 1 UID: 0 PID: 5835 Comm: syz-executor313 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0
[   63.074858][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   63.084904][ T5835] Call Trace:
[   63.088174][ T5835]  <TASK>
[   63.091086][ T5835]  dump_stack_lvl+0x241/0x360
[   63.095759][ T5835]  ? __pfx_dump_stack_lvl+0x10/0x10
[   63.100934][ T5835]  ? __pfx__printk+0x10/0x10
[   63.105510][ T5835]  ? _printk+0xd5/0x120
[   63.109649][ T5835]  ? __virt_addr_valid+0x183/0x530
[   63.114743][ T5835]  ? __virt_addr_valid+0x183/0x530
[   63.119838][ T5835]  print_report+0x169/0x550
[   63.124325][ T5835]  ? __virt_addr_valid+0x183/0x530
[   63.129417][ T5835]  ? __virt_addr_valid+0x183/0x530
[   63.134524][ T5835]  ? __virt_addr_valid+0x45f/0x530
[   63.139640][ T5835]  ? __phys_addr+0xba/0x170
[   63.144130][ T5835]  ? hfs_bnode_read_key+0x314/0x450
[   63.149318][ T5835]  kasan_report+0x143/0x180
[   63.153817][ T5835]  ? hfs_bnode_read_key+0x314/0x450
[   63.159018][ T5835]  kasan_check_range+0x282/0x290
[   63.163948][ T5835]  ? hfs_bnode_read_key+0x314/0x450
[   63.169137][ T5835]  __asan_memcpy+0x40/0x70
[   63.173535][ T5835]  hfs_bnode_read_key+0x314/0x450
[   63.178566][ T5835]  hfs_brec_insert+0x7f3/0xbd0
[   63.183310][ T5835]  ? __pfx_hfs_brec_insert+0x10/0x10
[   63.188572][ T5835]  ? __asan_memcpy+0x40/0x70
[   63.193172][ T5835]  hfs_cat_move+0x577/0x1030
[   63.197748][ T5835]  ? __pfx_hfs_cat_move+0x10/0x10
[   63.202851][ T5835]  ? __pfx_lock_acquire+0x10/0x10
[   63.207860][ T5835]  ? down_write_nested+0x195/0x220
[   63.212966][ T5835]  ? __pfx_down_write_nested+0x10/0x10
[   63.218410][ T5835]  hfs_rename+0x1df/0x2d0
[   63.222721][ T5835]  ? __pfx_hfs_rename+0x10/0x10
[   63.227556][ T5835]  vfs_rename+0xbdb/0xf00
[   63.231886][ T5835]  ? __pfx_vfs_rename+0x10/0x10
[   63.236715][ T5835]  ? bpf_lsm_path_rename+0x9/0x10
[   63.241727][ T5835]  do_renameat2+0xd94/0x13f0
[   63.246303][ T5835]  ? __pfx_do_renameat2+0x10/0x10
[   63.251309][ T5835]  ? __virt_addr_valid+0x183/0x530
[   63.256404][ T5835]  ? __check_object_size+0x48e/0x900
[   63.261676][ T5835]  ? getname_flags+0x1e3/0x540
[   63.266426][ T5835]  ? do_syscall_64+0x100/0x230
[   63.271172][ T5835]  __x64_sys_renameat2+0xce/0xe0
[   63.276106][ T5835]  do_syscall_64+0xf3/0x230
[   63.280587][ T5835]  ? clear_bhb_loop+0x35/0x90
[   63.285248][ T5835]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   63.291129][ T5835] RIP: 0033:0x7fdb426d9679
[   63.295534][ T5835] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[   63.315128][ T5835] RSP: 002b:00007ffe6d3a91d8 EFLAGS: 00000246 ORIG_RAX: 000000000000013c
[   63.323521][ T5835] RAX: ffffffffffffffda RBX: 00007ffe6d3a93a8 RCX: 00007fdb426d9679
[   63.331475][ T5835] RDX: 0000000000000004 RSI: 0000000020000380 RDI: 0000000000000004
[   63.339432][ T5835] RBP: 00007fdb4274c610 R08: 0000000000000000 R09: 00007ffe6d3a93a8
[   63.347386][ T5835] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000001
[   63.355351][ T5835] R13: 00007ffe6d3a9398 R14: 0000000000000001 R15: 0000000000000001
[   63.363311][ T5835]  </TASK>
[   63.366314][ T5835] 
[   63.368618][ T5835] Allocated by task 5835:
[   63.372924][ T5835]  kasan_save_track+0x3f/0x80
[   63.377586][ T5835]  __kasan_kmalloc+0x98/0xb0
[   63.382159][ T5835]  __kmalloc_noprof+0x1fc/0x400
[   63.387003][ T5835]  hfs_find_init+0x90/0x1f0
[   63.391491][ T5835]  hfs_cat_move+0x146/0x1030
[   63.396059][ T5835]  hfs_rename+0x1df/0x2d0
[   63.400368][ T5835]  vfs_rename+0xbdb/0xf00
[   63.404677][ T5835]  do_renameat2+0xd94/0x13f0
[   63.409246][ T5835]  __x64_sys_renameat2+0xce/0xe0
[   63.414161][ T5835]  do_syscall_64+0xf3/0x230
[   63.418657][ T5835]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   63.424543][ T5835] 
[   63.426846][ T5835] The buggy address belongs to the object at ffff888146b54180
[   63.426846][ T5835]  which belongs to the cache kmalloc-96 of size 96
[   63.440705][ T5835] The buggy address is located 0 bytes inside of
[   63.440705][ T5835]  allocated 78-byte region [ffff888146b54180, ffff888146b541ce)
[   63.454581][ T5835] 
[   63.456886][ T5835] The buggy address belongs to the physical page:
[   63.463278][ T5835] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x146b54
[   63.472124][ T5835] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff)
[   63.479301][ T5835] page_type: f5(slab)
[   63.483259][ T5835] raw: 057ff00000000000 ffff88801ac41280 dead000000000100 dead000000000122
[   63.491836][ T5835] raw: 0000000000000000 0000000080200020 00000001f5000000 0000000000000000
[   63.500395][ T5835] page dumped because: kasan: bad access detected
[   63.506800][ T5835] page_owner tracks the page as allocated
[   63.512509][ T5835] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 9549184651, free_ts 0
[   63.530025][ T5835]  post_alloc_hook+0x1f3/0x230
[   63.534799][ T5835]  get_page_from_freelist+0x363e/0x3790
[   63.540332][ T5835]  __alloc_pages_noprof+0x292/0x710
[   63.545514][ T5835]  alloc_pages_mpol_noprof+0x3e8/0x680
[   63.551005][ T5835]  alloc_slab_page+0x6a/0x140
[   63.555667][ T5835]  allocate_slab+0x5a/0x2f0
[   63.560149][ T5835]  ___slab_alloc+0xcd1/0x14b0
[   63.564804][ T5835]  __slab_alloc+0x58/0xa0
[   63.569113][ T5835]  __kmalloc_cache_noprof+0x1d5/0x2c0
[   63.574466][ T5835]  dev_pm_qos_expose_flags+0x91/0x2b0
[   63.579824][ T5835]  usb_hub_create_port_device+0x6dd/0xc10
[   63.585525][ T5835]  hub_probe+0x2503/0x3640
[   63.589923][ T5835]  usb_probe_interface+0x645/0xbb0
[   63.595015][ T5835]  really_probe+0x2b8/0xad0
[   63.599515][ T5835]  __driver_probe_device+0x1a2/0x390
[   63.604794][ T5835]  driver_probe_device+0x50/0x430
[   63.609797][ T5835] page_owner free stack trace missing
[   63.615141][ T5835] 
[   63.617443][ T5835] Memory state around the buggy address:
[   63.623044][ T5835]  ffff888146b54080: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[   63.631095][ T5835]  ffff888146b54100: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc
[   63.639134][ T5835] >ffff888146b54180: 00 00 00 00 00 00 00 00 00 06 fc fc fc fc fc fc
[   63.647170][ T5835]                                               ^
[   63.653559][ T5835]  ffff888146b54200: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc
[   63.661600][ T5835]  ffff888146b54280: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[   63.669637][ T5835] ==================================================================
[   63.678475][ T5835] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   63.685705][ T5835] CPU: 1 UID: 0 PID: 5835 Comm: syz-executor313 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0
[   63.696465][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   63.706504][ T5835] Call Trace:
[   63.709773][ T5835]  <TASK>
[   63.712683][ T5835]  dump_stack_lvl+0x241/0x360
[   63.717345][ T5835]  ? __pfx_dump_stack_lvl+0x10/0x10
[   63.722521][ T5835]  ? __pfx__printk+0x10/0x10
[   63.727099][ T5835]  ? preempt_schedule+0xe1/0xf0
[   63.731932][ T5835]  ? vscnprintf+0x5d/0x90
[   63.736243][ T5835]  panic+0x349/0x880
[   63.740122][ T5835]  ? check_panic_on_warn+0x21/0xb0
[   63.745215][ T5835]  ? __pfx_panic+0x10/0x10
[   63.749614][ T5835]  ? _raw_spin_unlock_irqrestore+0x130/0x140
[   63.755576][ T5835]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   63.761882][ T5835]  ? print_report+0x502/0x550
[   63.766541][ T5835]  check_panic_on_warn+0x86/0xb0
[   63.771458][ T5835]  ? hfs_bnode_read_key+0x314/0x450
[   63.776640][ T5835]  end_report+0x77/0x160
[   63.780879][ T5835]  kasan_report+0x154/0x180
[   63.785364][ T5835]  ? hfs_bnode_read_key+0x314/0x450
[   63.790548][ T5835]  kasan_check_range+0x282/0x290
[   63.795464][ T5835]  ? hfs_bnode_read_key+0x314/0x450
[   63.800644][ T5835]  __asan_memcpy+0x40/0x70
[   63.805043][ T5835]  hfs_bnode_read_key+0x314/0x450
[   63.810050][ T5835]  hfs_brec_insert+0x7f3/0xbd0
[   63.814796][ T5835]  ? __pfx_hfs_brec_insert+0x10/0x10
[   63.820057][ T5835]  ? __asan_memcpy+0x40/0x70
[   63.824629][ T5835]  hfs_cat_move+0x577/0x1030
[   63.829201][ T5835]  ? __pfx_hfs_cat_move+0x10/0x10
[   63.834204][ T5835]  ? __pfx_lock_acquire+0x10/0x10
[   63.839215][ T5835]  ? down_write_nested+0x195/0x220
[   63.844311][ T5835]  ? __pfx_down_write_nested+0x10/0x10
[   63.849756][ T5835]  hfs_rename+0x1df/0x2d0
[   63.854065][ T5835]  ? __pfx_hfs_rename+0x10/0x10
[   63.858897][ T5835]  vfs_rename+0xbdb/0xf00
[   63.863207][ T5835]  ? __pfx_vfs_rename+0x10/0x10
[   63.868039][ T5835]  ? bpf_lsm_path_rename+0x9/0x10
[   63.873101][ T5835]  do_renameat2+0xd94/0x13f0
[   63.877697][ T5835]  ? __pfx_do_renameat2+0x10/0x10
[   63.882723][ T5835]  ? __virt_addr_valid+0x183/0x530
[   63.887825][ T5835]  ? __check_object_size+0x48e/0x900
[   63.893096][ T5835]  ? getname_flags+0x1e3/0x540
[   63.897862][ T5835]  ? do_syscall_64+0x100/0x230
[   63.902608][ T5835]  __x64_sys_renameat2+0xce/0xe0
[   63.907532][ T5835]  do_syscall_64+0xf3/0x230
[   63.912030][ T5835]  ? clear_bhb_loop+0x35/0x90
[   63.916691][ T5835]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   63.922574][ T5835] RIP: 0033:0x7fdb426d9679
[   63.926970][ T5835] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[   63.946559][ T5835] RSP: 002b:00007ffe6d3a91d8 EFLAGS: 00000246 ORIG_RAX: 000000000000013c
[   63.954960][ T5835] RAX: ffffffffffffffda RBX: 00007ffe6d3a93a8 RCX: 00007fdb426d9679
[   63.962910][ T5835] RDX: 0000000000000004 RSI: 0000000020000380 RDI: 0000000000000004
[   63.970866][ T5835] RBP: 00007fdb4274c610 R08: 0000000000000000 R09: 00007ffe6d3a93a8
[   63.978824][ T5835] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000001
[   63.986779][ T5835] R13: 00007ffe6d3a9398 R14: 0000000000000001 R15: 0000000000000001
[   63.994738][ T5835]  </TASK>
[   63.998061][ T5835] Kernel Offset: disabled
[   64.002374][ T5835] Rebooting in 86400 seconds..