./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2022001543

<...>
Warning: Permanently added '10.128.1.96' (ED25519) to the list of known hosts.
execve("./syz-executor2022001543", ["./syz-executor2022001543"], 0x7ffdd5152180 /* 10 vars */) = 0
brk(NULL)                               = 0x555555e5d000
brk(0x555555e5dd00)                     = 0x555555e5dd00
arch_prctl(ARCH_SET_FS, 0x555555e5d380) = 0
set_tid_address(0x555555e5d650)         = 5836
set_robust_list(0x555555e5d660, 24)     = 0
rseq(0x555555e5dca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor2022001543", 4096) = 28
getrandom("\x40\x63\x4b\x20\x89\xb3\x00\xe4", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x555555e5dd00
brk(0x555555e7ed00)                     = 0x555555e7ed00
brk(0x555555e7f000)                     = 0x555555e7f000
mprotect(0x7fdb1c06c000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
executing program
write(1, "executing program\n", 18)     = 18
memfd_create("syzkaller", 0)            = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fdb13a00000
write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768) = 32768
munmap(0x7fdb13a00000, 138412032)       = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 4
ioctl(4, LOOP_SET_FD, 3)                = 0
close(3)                                = 0
close(4)                                = 0
mkdir("./file1", 0777)                  = 0
mount("/dev/loop0", "./file1", "hfs", 0, "") = 0
openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3
chdir("./file1")                        = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = -1 EBUSY (Device or resource busy)
openat(AT_FDCWD, ".", O_RDONLY)         = 4
syzkaller login: [   61.445400][ T5836] loop0: detected capacity change from 0 to 64
mkdirat(4, "./bus", 000)                = 0
[   61.516842][ T5836] ==================================================================
[   61.524927][ T5836] BUG: KASAN: slab-out-of-bounds in hfs_bnode_read_key+0x314/0x450
[   61.532850][ T5836] Write of size 94 at addr ffff888144394280 by task syz-executor202/5836
[   61.541252][ T5836] 
[   61.543620][ T5836] CPU: 0 UID: 0 PID: 5836 Comm: syz-executor202 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0
[   61.554368][ T5836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   61.564426][ T5836] Call Trace:
[   61.568044][ T5836]  <TASK>
[   61.570968][ T5836]  dump_stack_lvl+0x241/0x360
[   61.575648][ T5836]  ? __pfx_dump_stack_lvl+0x10/0x10
[   61.580837][ T5836]  ? __pfx__printk+0x10/0x10
[   61.585424][ T5836]  ? _printk+0xd5/0x120
[   61.589573][ T5836]  ? __virt_addr_valid+0x183/0x530
[   61.594677][ T5836]  ? __virt_addr_valid+0x183/0x530
[   61.599777][ T5836]  print_report+0x169/0x550
[   61.604271][ T5836]  ? __virt_addr_valid+0x183/0x530
[   61.609375][ T5836]  ? __virt_addr_valid+0x183/0x530
[   61.614477][ T5836]  ? __virt_addr_valid+0x45f/0x530
[   61.619575][ T5836]  ? __phys_addr+0xba/0x170
[   61.624069][ T5836]  ? hfs_bnode_read_key+0x314/0x450
[   61.629269][ T5836]  kasan_report+0x143/0x180
[   61.633759][ T5836]  ? hfs_bnode_read_key+0x314/0x450
[   61.638954][ T5836]  kasan_check_range+0x282/0x290
[   61.643883][ T5836]  ? hfs_bnode_read_key+0x314/0x450
[   61.649081][ T5836]  __asan_memcpy+0x40/0x70
[   61.653492][ T5836]  hfs_bnode_read_key+0x314/0x450
[   61.658511][ T5836]  hfs_brec_insert+0x7f3/0xbd0
[   61.663267][ T5836]  ? __pfx_hfs_brec_insert+0x10/0x10
[   61.668539][ T5836]  ? __asan_memcpy+0x40/0x70
[   61.673124][ T5836]  hfs_cat_move+0x577/0x1030
[   61.677707][ T5836]  ? __pfx_hfs_cat_move+0x10/0x10
[   61.682720][ T5836]  ? __pfx_lock_acquire+0x10/0x10
[   61.687739][ T5836]  ? down_write_nested+0x195/0x220
[   61.692845][ T5836]  ? __pfx_down_write_nested+0x10/0x10
[   61.698295][ T5836]  hfs_rename+0x1df/0x2d0
[   61.702613][ T5836]  ? __pfx_hfs_rename+0x10/0x10
[   61.707456][ T5836]  vfs_rename+0xbdb/0xf00
[   61.711778][ T5836]  ? __pfx_vfs_rename+0x10/0x10
[   61.716619][ T5836]  ? bpf_lsm_path_rename+0x9/0x10
[   61.721636][ T5836]  do_renameat2+0xd94/0x13f0
[   61.726224][ T5836]  ? __pfx_do_renameat2+0x10/0x10
[   61.731328][ T5836]  ? __virt_addr_valid+0x183/0x530
[   61.736429][ T5836]  ? __check_object_size+0x48e/0x900
[   61.741706][ T5836]  ? getname_flags+0x1e3/0x540
[   61.746460][ T5836]  ? do_syscall_64+0x100/0x230
[   61.751226][ T5836]  __x64_sys_renameat2+0xce/0xe0
[   61.756166][ T5836]  do_syscall_64+0xf3/0x230
[   61.760658][ T5836]  ? clear_bhb_loop+0x35/0x90
[   61.765325][ T5836]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   61.771214][ T5836] RIP: 0033:0x7fdb1bff9679
[   61.775629][ T5836] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[   61.795229][ T5836] RSP: 002b:00007ffc975b7448 EFLAGS: 00000246 ORIG_RAX: 000000000000013c
[   61.803642][ T5836] RAX: ffffffffffffffda RBX: 00007ffc975b7618 RCX: 00007fdb1bff9679
[   61.811608][ T5836] RDX: 0000000000000004 RSI: 0000000020000380 RDI: 0000000000000004
[   61.819567][ T5836] RBP: 00007fdb1c06c610 R08: 0000000000000000 R09: 00007ffc975b7618
[   61.827529][ T5836] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000001
[   61.835489][ T5836] R13: 00007ffc975b7608 R14: 0000000000000001 R15: 0000000000000001
[   61.843456][ T5836]  </TASK>
[   61.846471][ T5836] 
[   61.848780][ T5836] Allocated by task 5836:
[   61.853092][ T5836]  kasan_save_track+0x3f/0x80
[   61.857762][ T5836]  __kasan_kmalloc+0x98/0xb0
[   61.862347][ T5836]  __kmalloc_noprof+0x1fc/0x400
[   61.867187][ T5836]  hfs_find_init+0x90/0x1f0
[   61.871680][ T5836]  hfs_cat_move+0x146/0x1030
[   61.876255][ T5836]  hfs_rename+0x1df/0x2d0
[   61.880567][ T5836]  vfs_rename+0xbdb/0xf00
[   61.884885][ T5836]  do_renameat2+0xd94/0x13f0
[   61.889461][ T5836]  __x64_sys_renameat2+0xce/0xe0
[   61.894385][ T5836]  do_syscall_64+0xf3/0x230
[   61.898877][ T5836]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   61.904762][ T5836] 
[   61.907075][ T5836] The buggy address belongs to the object at ffff888144394280
[   61.907075][ T5836]  which belongs to the cache kmalloc-96 of size 96
[   61.920941][ T5836] The buggy address is located 0 bytes inside of
[   61.920941][ T5836]  allocated 78-byte region [ffff888144394280, ffff8881443942ce)
[   61.934810][ T5836] 
[   61.937122][ T5836] The buggy address belongs to the physical page:
[   61.943526][ T5836] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x144394
[   61.952363][ T5836] anon flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff)
[   61.959982][ T5836] page_type: f5(slab)
[   61.963954][ T5836] raw: 057ff00000000000 ffff88801ac41280 ffffea000532bf00 dead000000000005
[   61.972525][ T5836] raw: 0000000000000000 0000000080200020 00000001f5000000 0000000000000000
[   61.981092][ T5836] page dumped because: kasan: bad access detected
[   61.987496][ T5836] page_owner tracks the page as allocated
[   61.993194][ T5836] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 7146444062, free_ts 0
[   62.010719][ T5836]  post_alloc_hook+0x1f3/0x230
[   62.015479][ T5836]  get_page_from_freelist+0x363e/0x3790
[   62.021016][ T5836]  __alloc_pages_noprof+0x292/0x710
[   62.026211][ T5836]  alloc_pages_mpol_noprof+0x3e8/0x680
[   62.031655][ T5836]  alloc_slab_page+0x6a/0x140
[   62.036324][ T5836]  allocate_slab+0x5a/0x2f0
[   62.040817][ T5836]  ___slab_alloc+0xcd1/0x14b0
[   62.045502][ T5836]  __slab_alloc+0x58/0xa0
[   62.049842][ T5836]  __kmalloc_noprof+0x25a/0x400
[   62.054692][ T5836]  ops_init+0x75/0x590
[   62.058759][ T5836]  register_pernet_operations+0x30d/0x630
[   62.064475][ T5836]  register_pernet_subsys+0x28/0x40
[   62.069661][ T5836]  bonding_init+0x37/0x110
[   62.074067][ T5836]  do_one_initcall+0x248/0x880
[   62.078821][ T5836]  do_initcall_level+0x157/0x210
[   62.083772][ T5836]  do_initcalls+0x3f/0x80
[   62.088097][ T5836] page_owner free stack trace missing
[   62.093449][ T5836] 
[   62.095763][ T5836] Memory state around the buggy address:
[   62.101382][ T5836]  ffff888144394180: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[   62.109429][ T5836]  ffff888144394200: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[   62.117497][ T5836] >ffff888144394280: 00 00 00 00 00 00 00 00 00 06 fc fc fc fc fc fc
[   62.125559][ T5836]                                               ^
[   62.131964][ T5836]  ffff888144394300: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[   62.140013][ T5836]  ffff888144394380: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[   62.148058][ T5836] ==================================================================
[   62.160921][ T5836] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   62.168144][ T5836] CPU: 1 UID: 0 PID: 5836 Comm: syz-executor202 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0
[   62.178897][ T5836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   62.188967][ T5836] Call Trace:
[   62.192240][ T5836]  <TASK>
[   62.195160][ T5836]  dump_stack_lvl+0x241/0x360
[   62.199827][ T5836]  ? __pfx_dump_stack_lvl+0x10/0x10
[   62.205051][ T5836]  ? __pfx__printk+0x10/0x10
[   62.209644][ T5836]  ? preempt_schedule+0xe1/0xf0
[   62.214504][ T5836]  ? vscnprintf+0x5d/0x90
[   62.218833][ T5836]  panic+0x349/0x880
[   62.222739][ T5836]  ? check_panic_on_warn+0x21/0xb0
[   62.227840][ T5836]  ? __pfx_panic+0x10/0x10
[   62.232244][ T5836]  ? _raw_spin_unlock_irqrestore+0x130/0x140
[   62.238251][ T5836]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   62.244583][ T5836]  ? print_report+0x502/0x550
[   62.249252][ T5836]  check_panic_on_warn+0x86/0xb0
[   62.254177][ T5836]  ? hfs_bnode_read_key+0x314/0x450
[   62.259359][ T5836]  end_report+0x77/0x160
[   62.263580][ T5836]  kasan_report+0x154/0x180
[   62.268061][ T5836]  ? hfs_bnode_read_key+0x314/0x450
[   62.273244][ T5836]  kasan_check_range+0x282/0x290
[   62.278159][ T5836]  ? hfs_bnode_read_key+0x314/0x450
[   62.283338][ T5836]  __asan_memcpy+0x40/0x70
[   62.287748][ T5836]  hfs_bnode_read_key+0x314/0x450
[   62.292763][ T5836]  hfs_brec_insert+0x7f3/0xbd0
[   62.297511][ T5836]  ? __pfx_hfs_brec_insert+0x10/0x10
[   62.302776][ T5836]  ? __asan_memcpy+0x40/0x70
[   62.307351][ T5836]  hfs_cat_move+0x577/0x1030
[   62.311925][ T5836]  ? __pfx_hfs_cat_move+0x10/0x10
[   62.316929][ T5836]  ? __pfx_lock_acquire+0x10/0x10
[   62.321937][ T5836]  ? down_write_nested+0x195/0x220
[   62.327030][ T5836]  ? __pfx_down_write_nested+0x10/0x10
[   62.332474][ T5836]  hfs_rename+0x1df/0x2d0
[   62.336782][ T5836]  ? __pfx_hfs_rename+0x10/0x10
[   62.341611][ T5836]  vfs_rename+0xbdb/0xf00
[   62.345942][ T5836]  ? __pfx_vfs_rename+0x10/0x10
[   62.350770][ T5836]  ? bpf_lsm_path_rename+0x9/0x10
[   62.355779][ T5836]  do_renameat2+0xd94/0x13f0
[   62.360351][ T5836]  ? __pfx_do_renameat2+0x10/0x10
[   62.365355][ T5836]  ? __virt_addr_valid+0x183/0x530
[   62.370445][ T5836]  ? __check_object_size+0x48e/0x900
[   62.375711][ T5836]  ? getname_flags+0x1e3/0x540
[   62.380455][ T5836]  ? do_syscall_64+0x100/0x230
[   62.385199][ T5836]  __x64_sys_renameat2+0xce/0xe0
[   62.390115][ T5836]  do_syscall_64+0xf3/0x230
[   62.394598][ T5836]  ? clear_bhb_loop+0x35/0x90
[   62.399274][ T5836]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.405155][ T5836] RIP: 0033:0x7fdb1bff9679
[   62.409554][ T5836] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[   62.429149][ T5836] RSP: 002b:00007ffc975b7448 EFLAGS: 00000246 ORIG_RAX: 000000000000013c
[   62.437567][ T5836] RAX: ffffffffffffffda RBX: 00007ffc975b7618 RCX: 00007fdb1bff9679
[   62.445522][ T5836] RDX: 0000000000000004 RSI: 0000000020000380 RDI: 0000000000000004
[   62.453475][ T5836] RBP: 00007fdb1c06c610 R08: 0000000000000000 R09: 00007ffc975b7618
[   62.461428][ T5836] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000001
[   62.469390][ T5836] R13: 00007ffc975b7608 R14: 0000000000000001 R15: 0000000000000001
[   62.477350][ T5836]  </TASK>
[   62.480630][ T5836] Kernel Offset: disabled
[   62.484944][ T5836] Rebooting in 86400 seconds..