./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3248401701

<...>
Warning: Permanently added '10.128.0.66' (ECDSA) to the list of known hosts.
execve("./syz-executor3248401701", ["./syz-executor3248401701"], 0x7fff4b2c7300 /* 10 vars */) = 0
brk(NULL)                               = 0x555556e49000
brk(0x555556e49c40)                     = 0x555556e49c40
arch_prctl(ARCH_SET_FS, 0x555556e49300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor3248401701", 4096) = 28
brk(0x555556e6ac40)                     = 0x555556e6ac40
brk(0x555556e6b000)                     = 0x555556e6b000
mprotect(0x7f7b64d61000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
memfd_create("syzkaller", 0)            = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7b5c8a8000
write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768) = 32768
munmap(0x7f7b5c8a8000, 32768)           = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 4
ioctl(4, LOOP_SET_FD, 3)                = 0
close(3)                                = 0
mkdir("./file0", 0777)                  = 0
mount("/dev/loop0", "./file0", "hfs", MS_RDONLY|MS_NOSUID, "iocharset=cp737,") = 0
openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
chdir("./file0")                        = 0
ioctl(4, LOOP_CLR_FD)                   = 0
close(4)                                = 0
syzkaller login: [   52.975427][ T3630] loop0: detected capacity change from 0 to 64
[   52.991446][ T3630] ==================================================================
[   52.999521][ T3630] BUG: KASAN: slab-out-of-bounds in hfs_asc2mac+0x693/0x720
[   53.006931][ T3630] Write of size 1 at addr ffff88801831eb4e by task syz-executor324/3630
[   53.015261][ T3630] 
[   53.017563][ T3630] CPU: 0 PID: 3630 Comm: syz-executor324 Not tainted 6.1.0-rc8-syzkaller-00148-g0d1409e4ff08 #0
[   53.027969][ T3630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[   53.038004][ T3630] Call Trace:
[   53.041276][ T3630]  <TASK>
[   53.044184][ T3630]  dump_stack_lvl+0xd1/0x138
[   53.048786][ T3630]  print_report+0x15e/0x45d
[   53.053274][ T3630]  ? __phys_addr+0xc8/0x140
[   53.057777][ T3630]  ? hfs_asc2mac+0x693/0x720
[   53.062348][ T3630]  kasan_report+0xbf/0x1f0
[   53.066754][ T3630]  ? hfs_asc2mac+0x693/0x720
[   53.071328][ T3630]  hfs_asc2mac+0x693/0x720
[   53.075729][ T3630]  ? hfs_mac2asc+0x530/0x530
[   53.080410][ T3630]  ? hfs_find_init+0x95/0x240
[   53.085153][ T3630]  ? rcu_read_lock_sched_held+0x3e/0x70
[   53.090689][ T3630]  hfs_cat_build_key+0xc4/0x170
[   53.095618][ T3630]  hfs_lookup+0x1c6/0x310
[   53.099962][ T3630]  ? hfs_rename+0x210/0x210
[   53.104470][ T3630]  ? d_alloc_parallel+0x694/0x1410
[   53.109598][ T3630]  ? __d_lookup_rcu+0x4c0/0x4c0
[   53.114445][ T3630]  ? __d_lookup+0x2b2/0x460
[   53.118945][ T3630]  lookup_open.isra.0+0x76a/0x12a0
[   53.124057][ T3630]  ? link_path_walk.part.0+0xe20/0xe20
[   53.129511][ T3630]  ? irq_entries_start+0x70/0xcc0
[   53.134527][ T3630]  ? irq_entries_start+0x70/0xcc0
[   53.139541][ T3630]  ? lookup_fast+0x14e/0x520
[   53.144392][ T3630]  path_openat+0x996/0x2860
[   53.148893][ T3630]  ? path_lookupat+0x840/0x840
[   53.153651][ T3630]  do_filp_open+0x1ba/0x410
[   53.158137][ T3630]  ? may_open_dev+0xf0/0xf0
[   53.162622][ T3630]  ? find_held_lock+0x2d/0x110
[   53.167379][ T3630]  ? do_raw_spin_lock+0x124/0x2b0
[   53.172398][ T3630]  ? rwlock_bug.part.0+0x90/0x90
[   53.177321][ T3630]  ? _raw_spin_unlock+0x28/0x40
[   53.182159][ T3630]  ? alloc_fd+0x2d8/0x6d0
[   53.186476][ T3630]  do_sys_openat2+0x16d/0x4c0
[   53.191139][ T3630]  ? build_open_flags+0x6f0/0x6f0
[   53.196151][ T3630]  ? ptrace_notify+0xfe/0x140
[   53.200993][ T3630]  ? lock_downgrade+0x6e0/0x6e0
[   53.205835][ T3630]  __x64_sys_open+0x11d/0x1c0
[   53.210499][ T3630]  ? do_sys_open+0x150/0x150
[   53.215073][ T3630]  ? _raw_spin_unlock_irq+0x2e/0x50
[   53.220345][ T3630]  ? ptrace_notify+0xfe/0x140
[   53.225025][ T3630]  do_syscall_64+0x39/0xb0
[   53.229452][ T3630]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   53.235337][ T3630] RIP: 0033:0x7f7b64cf4839
[   53.239746][ T3630] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[   53.259351][ T3630] RSP: 002b:00007ffd3e44cb78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[   53.267990][ T3630] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7b64cf4839
[   53.275974][ T3630] RDX: 0000000000000100 RSI: 0000000000002000 RDI: 0000000020000800
[   53.283930][ T3630] RBP: 00007f7b64cb40d0 R08: 0000000000000245 R09: 0000000000000000
[   53.291884][ T3630] R10: 00007ffd3e44ca40 R11: 0000000000000246 R12: 00007f7b64cb4160
[   53.299844][ T3630] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   53.307814][ T3630]  </TASK>
[   53.310815][ T3630] 
[   53.313121][ T3630] Allocated by task 3630:
[   53.317449][ T3630]  kasan_save_stack+0x22/0x40
[   53.322119][ T3630]  kasan_set_track+0x25/0x30
[   53.326961][ T3630]  __kasan_kmalloc+0xa5/0xb0
[   53.331629][ T3630]  __kmalloc+0x5a/0xd0
[   53.335681][ T3630]  hfs_find_init+0x95/0x240
[   53.340255][ T3630]  hfs_lookup+0x102/0x310
[   53.344582][ T3630]  lookup_open.isra.0+0x76a/0x12a0
[   53.349685][ T3630]  path_openat+0x996/0x2860
[   53.354192][ T3630]  do_filp_open+0x1ba/0x410
[   53.358676][ T3630]  do_sys_openat2+0x16d/0x4c0
[   53.363338][ T3630]  __x64_sys_open+0x11d/0x1c0
[   53.368001][ T3630]  do_syscall_64+0x39/0xb0
[   53.372495][ T3630]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   53.378375][ T3630] 
[   53.380682][ T3630] The buggy address belongs to the object at ffff88801831eb00
[   53.380682][ T3630]  which belongs to the cache kmalloc-96 of size 96
[   53.394558][ T3630] The buggy address is located 78 bytes inside of
[   53.394558][ T3630]  96-byte region [ffff88801831eb00, ffff88801831eb60)
[   53.407639][ T3630] 
[   53.409942][ T3630] The buggy address belongs to the physical page:
[   53.416328][ T3630] page:ffffea000060c780 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1831e
[   53.426472][ T3630] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[   53.434001][ T3630] raw: 00fff00000000200 ffffea0000891000 dead000000000007 ffff888012041780
[   53.442569][ T3630] raw: 0000000000000000 0000000080200020 00000001ffffffff 0000000000000000
[   53.451129][ T3630] page dumped because: kasan: bad access detected
[   53.457519][ T3630] page_owner tracks the page as allocated
[   53.463213][ T3630] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, tgid 1 (swapper/0), ts 1848229881, free_ts 1818652591
[   53.480557][ T3630]  get_page_from_freelist+0x10b5/0x2d50
[   53.486097][ T3630]  __alloc_pages+0x1cb/0x5b0
[   53.490764][ T3630]  alloc_page_interleave+0x1e/0x200
[   53.495951][ T3630]  alloc_pages+0x233/0x270
[   53.500440][ T3630]  allocate_slab+0x25f/0x350
[   53.505015][ T3630]  ___slab_alloc+0xa91/0x1400
[   53.509681][ T3630]  __slab_alloc.constprop.0+0x56/0xa0
[   53.515037][ T3630]  __kmem_cache_alloc_node+0x199/0x3e0
[   53.520484][ T3630]  __kmalloc+0x4a/0xd0
[   53.524536][ T3630]  acpi_evaluate_object+0x8d/0x7f9
[   53.529728][ T3630]  acpi_evaluate_integer+0xc3/0x1e0
[   53.535107][ T3630]  acpi_bus_get_status+0x191/0x340
[   53.540210][ T3630]  acpi_add_single_object+0x12a/0x1b00
[   53.545651][ T3630]  acpi_bus_check_add+0x21c/0x5e0
[   53.550658][ T3630]  acpi_ns_walk_namespace+0x250/0x432
[   53.556020][ T3630]  acpi_walk_namespace+0xf2/0x12b
[   53.561126][ T3630] page last free stack trace:
[   53.566299][ T3630]  free_pcp_prepare+0x65c/0xd90
[   53.571140][ T3630]  free_unref_page+0x1d/0x4d0
[   53.575911][ T3630]  qlist_free_all+0x6a/0x170
[   53.580493][ T3630]  kasan_quarantine_remove_cache+0xd6/0xf0
[   53.586384][ T3630]  kmem_cache_shrink+0xd/0x20
[   53.591057][ T3630]  acpi_os_purge_cache+0x15/0x20
[   53.596086][ T3630]  acpi_purge_cached_objects+0x9f/0xd4
[   53.601539][ T3630]  acpi_initialize_objects+0x2f/0x99
[   53.606820][ T3630]  acpi_init+0x1d4/0x9e0
[   53.611048][ T3630]  do_one_initcall+0x141/0x780
[   53.615801][ T3630]  kernel_init_freeable+0x6ff/0x788
[   53.620987][ T3630]  kernel_init+0x1e/0x1d0
[   53.625303][ T3630]  ret_from_fork+0x1f/0x30
[   53.629704][ T3630] 
[   53.632009][ T3630] Memory state around the buggy address:
[   53.637631][ T3630]  ffff88801831ea00: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[   53.645675][ T3630]  ffff88801831ea80: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[   53.653738][ T3630] >ffff88801831eb00: 00 00 00 00 00 00 00 00 00 06 fc fc fc fc fc fc
[   53.661796][ T3630]                                               ^
[   53.668187][ T3630]  ffff88801831eb80: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc
[   53.676229][ T3630]  ffff88801831ec00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[   53.684270][ T3630] ==================================================================
[   53.693460][ T3630] Kernel panic - not syncing: panic_on_warn set ...
[   53.700054][ T3630] CPU: 1 PID: 3630 Comm: syz-executor324 Not tainted 6.1.0-rc8-syzkaller-00148-g0d1409e4ff08 #0
[   53.710468][ T3630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[   53.720503][ T3630] Call Trace:
[   53.723760][ T3630]  <TASK>
[   53.726675][ T3630]  dump_stack_lvl+0xd1/0x138
[   53.731262][ T3630]  panic+0x2cc/0x626
[   53.735247][ T3630]  ? panic_print_sys_info.part.0+0x110/0x110
[   53.741213][ T3630]  ? preempt_schedule_common+0x59/0xc0
[   53.746659][ T3630]  ? preempt_schedule_thunk+0x1a/0x1c
[   53.752020][ T3630]  end_report.part.0+0x3f/0x7c
[   53.756764][ T3630]  ? hfs_asc2mac+0x693/0x720
[   53.761336][ T3630]  kasan_report.cold+0xa/0xf
[   53.765993][ T3630]  ? hfs_asc2mac+0x693/0x720
[   53.770584][ T3630]  hfs_asc2mac+0x693/0x720
[   53.774983][ T3630]  ? hfs_mac2asc+0x530/0x530
[   53.779554][ T3630]  ? hfs_find_init+0x95/0x240
[   53.784294][ T3630]  ? rcu_read_lock_sched_held+0x3e/0x70
[   53.789825][ T3630]  hfs_cat_build_key+0xc4/0x170
[   53.794673][ T3630]  hfs_lookup+0x1c6/0x310
[   53.799157][ T3630]  ? hfs_rename+0x210/0x210
[   53.803652][ T3630]  ? d_alloc_parallel+0x694/0x1410
[   53.808753][ T3630]  ? __d_lookup_rcu+0x4c0/0x4c0
[   53.813591][ T3630]  ? __d_lookup+0x2b2/0x460
[   53.818086][ T3630]  lookup_open.isra.0+0x76a/0x12a0
[   53.823185][ T3630]  ? link_path_walk.part.0+0xe20/0xe20
[   53.828632][ T3630]  ? irq_entries_start+0x70/0xcc0
[   53.833660][ T3630]  ? irq_entries_start+0x70/0xcc0
[   53.838682][ T3630]  ? lookup_fast+0x14e/0x520
[   53.843262][ T3630]  path_openat+0x996/0x2860
[   53.847755][ T3630]  ? path_lookupat+0x840/0x840
[   53.852503][ T3630]  do_filp_open+0x1ba/0x410
[   53.856983][ T3630]  ? may_open_dev+0xf0/0xf0
[   53.862304][ T3630]  ? find_held_lock+0x2d/0x110
[   53.867056][ T3630]  ? do_raw_spin_lock+0x124/0x2b0
[   53.872059][ T3630]  ? rwlock_bug.part.0+0x90/0x90
[   53.876976][ T3630]  ? _raw_spin_unlock+0x28/0x40
[   53.881806][ T3630]  ? alloc_fd+0x2d8/0x6d0
[   53.886121][ T3630]  do_sys_openat2+0x16d/0x4c0
[   53.890869][ T3630]  ? build_open_flags+0x6f0/0x6f0
[   53.895880][ T3630]  ? ptrace_notify+0xfe/0x140
[   53.900548][ T3630]  ? lock_downgrade+0x6e0/0x6e0
[   53.905386][ T3630]  __x64_sys_open+0x11d/0x1c0
[   53.910044][ T3630]  ? do_sys_open+0x150/0x150
[   53.914612][ T3630]  ? _raw_spin_unlock_irq+0x2e/0x50
[   53.919791][ T3630]  ? ptrace_notify+0xfe/0x140
[   53.924472][ T3630]  do_syscall_64+0x39/0xb0
[   53.928874][ T3630]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   53.934754][ T3630] RIP: 0033:0x7f7b64cf4839
[   53.939147][ T3630] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[   53.958825][ T3630] RSP: 002b:00007ffd3e44cb78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[   53.967218][ T3630] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7b64cf4839
[   53.975168][ T3630] RDX: 0000000000000100 RSI: 0000000000002000 RDI: 0000000020000800
[   53.983120][ T3630] RBP: 00007f7b64cb40d0 R08: 0000000000000245 R09: 0000000000000000
[   53.991246][ T3630] R10: 00007ffd3e44ca40 R11: 0000000000000246 R12: 00007f7b64cb4160
[   53.999285][ T3630] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   54.007262][ T3630]  </TASK>
[   54.010370][ T3630] Kernel Offset: disabled
[   54.014684][ T3630] Rebooting in 86400 seconds..