./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1758310054

<...>
Warning: Permanently added '10.128.1.176' (ECDSA) to the list of known hosts.
execve("./syz-executor1758310054", ["./syz-executor1758310054"], 0x7ffe25ca94a0 /* 10 vars */) = 0
brk(NULL)                               = 0x555556c11000
brk(0x555556c11c40)                     = 0x555556c11c40
arch_prctl(ARCH_SET_FS, 0x555556c11300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor1758310054", 4096) = 28
brk(0x555556c32c40)                     = 0x555556c32c40
brk(0x555556c33000)                     = 0x555556c33000
mprotect(0x7f2ff08b9000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
memfd_create("syzkaller", 0)            = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2fe8400000
write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768) = 32768
munmap(0x7f2fe8400000, 32768)           = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 4
ioctl(4, LOOP_SET_FD, 3)                = 0
close(3)                                = 0
mkdir("./bus", 0777)                    = 0
mount("/dev/loop0", "./bus", "hfs", MS_DIRSYNC|MS_REC, "") = 0
openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
chdir("./bus")                          = 0
ioctl(4, LOOP_CLR_FD)                   = 0
close(4)                                = 0
[   54.105591][ T4991] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=4991 'syz-executor175'
[   54.119326][ T4991] loop0: detected capacity change from 0 to 64
[   54.131241][ T4991] hfs: unable to locate alternate MDB
[   54.136870][ T4991] hfs: continuing without an alternate MDB
[   54.149898][ T4991] ==================================================================
[   54.158363][ T4991] BUG: KASAN: slab-out-of-bounds in hfs_bnode_read_key+0x314/0x440
[   54.166290][ T4991] Write of size 256 at addr ffff88802a969a80 by task syz-executor175/4991
[   54.174897][ T4991] 
[   54.177235][ T4991] CPU: 1 PID: 4991 Comm: syz-executor175 Not tainted 6.4.0-rc4-syzkaller-00276-ge5282a7d8f6b #0
[   54.187741][ T4991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023
[   54.197791][ T4991] Call Trace:
[   54.201058][ T4991]  <TASK>
[   54.203982][ T4991]  dump_stack_lvl+0x1e7/0x2d0
[   54.208657][ T4991]  ? nf_tcp_handle_invalid+0x650/0x650
[   54.214216][ T4991]  ? panic+0x770/0x770
[   54.218284][ T4991]  ? _printk+0xd5/0x120
[   54.222525][ T4991]  print_report+0x163/0x540
[   54.227038][ T4991]  ? __virt_addr_valid+0x22f/0x2e0
[   54.232233][ T4991]  ? __phys_addr+0xba/0x170
[   54.237003][ T4991]  ? hfs_bnode_read_key+0x314/0x440
[   54.242185][ T4991]  kasan_report+0x176/0x1b0
[   54.246767][ T4991]  ? hfs_bnode_read_key+0x314/0x440
[   54.252033][ T4991]  kasan_check_range+0x283/0x290
[   54.257042][ T4991]  ? hfs_bnode_read_key+0x314/0x440
[   54.262220][ T4991]  __asan_memcpy+0x40/0x70
[   54.266621][ T4991]  hfs_bnode_read_key+0x314/0x440
[   54.271625][ T4991]  hfs_brec_insert+0x6a1/0xbd0
[   54.276372][ T4991]  ? hfs_brec_keylen+0x360/0x360
[   54.281382][ T4991]  ? __asan_memset+0x23/0x40
[   54.286215][ T4991]  ? hfs_cat_build_record+0x242/0x800
[   54.291567][ T4991]  hfs_cat_create+0x5df/0xa70
[   54.296238][ T4991]  ? hfs_cat_build_key+0x170/0x170
[   54.301358][ T4991]  ? _raw_spin_unlock+0x28/0x40
[   54.306208][ T4991]  ? hfs_new_inode+0x88e/0xac0
[   54.310968][ T4991]  hfs_create+0x66/0xd0
[   54.315283][ T4991]  ? hfs_lookup+0x2f0/0x2f0
[   54.319782][ T4991]  path_openat+0x13df/0x3170
[   54.324368][ T4991]  ? do_filp_open+0x490/0x490
[   54.329042][ T4991]  do_filp_open+0x234/0x490
[   54.333537][ T4991]  ? vfs_tmpfile+0x4a0/0x4a0
[   54.338130][ T4991]  ? _raw_spin_unlock+0x28/0x40
[   54.342978][ T4991]  ? alloc_fd+0x59c/0x640
[   54.347301][ T4991]  do_sys_openat2+0x13f/0x500
[   54.351958][ T4991]  ? print_irqtrace_events+0x220/0x220
[   54.357399][ T4991]  ? do_sys_open+0x230/0x230
[   54.362233][ T4991]  ? lockdep_hardirqs_on+0x98/0x140
[   54.367415][ T4991]  ? _raw_spin_unlock_irq+0x2e/0x50
[   54.372591][ T4991]  ? ptrace_notify+0x278/0x380
[   54.377341][ T4991]  __x64_sys_openat+0x247/0x290
[   54.382175][ T4991]  ? __ia32_sys_open+0x270/0x270
[   54.387100][ T4991]  ? syscall_enter_from_user_mode+0x32/0x230
[   54.393180][ T4991]  ? syscall_enter_from_user_mode+0x8c/0x230
[   54.399137][ T4991]  do_syscall_64+0x41/0xc0
[   54.403537][ T4991]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   54.409434][ T4991] RIP: 0033:0x7f2ff084cb39
[   54.413835][ T4991] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[   54.433697][ T4991] RSP: 002b:00007ffee0060a98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   54.442188][ T4991] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2ff084cb39
[   54.450233][ T4991] RDX: 0000000000141842 RSI: 0000000020000380 RDI: 00000000ffffff9c
[   54.458219][ T4991] RBP: 00007f2ff080c140 R08: 0000000000000260 R09: 0000000000000000
[   54.466261][ T4991] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2ff080c1d0
[   54.474210][ T4991] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   54.482340][ T4991]  </TASK>
[   54.485345][ T4991] 
[   54.487648][ T4991] Allocated by task 4991:
[   54.491949][ T4991]  kasan_set_track+0x4f/0x70
[   54.496613][ T4991]  __kasan_kmalloc+0x98/0xb0
[   54.501186][ T4991]  __kmalloc+0xb9/0x230
[   54.505318][ T4991]  hfs_find_init+0x90/0x1f0
[   54.509920][ T4991]  hfs_cat_create+0x182/0xa70
[   54.515482][ T4991]  hfs_create+0x66/0xd0
[   54.519641][ T4991]  path_openat+0x13df/0x3170
[   54.524216][ T4991]  do_filp_open+0x234/0x490
[   54.528701][ T4991]  do_sys_openat2+0x13f/0x500
[   54.533534][ T4991]  __x64_sys_openat+0x247/0x290
[   54.538363][ T4991]  do_syscall_64+0x41/0xc0
[   54.542766][ T4991]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   54.548635][ T4991] 
[   54.550963][ T4991] The buggy address belongs to the object at ffff88802a969a80
[   54.550963][ T4991]  which belongs to the cache kmalloc-96 of size 96
[   54.564862][ T4991] The buggy address is located 0 bytes inside of
[   54.564862][ T4991]  allocated 78-byte region [ffff88802a969a80, ffff88802a969ace)
[   54.578725][ T4991] 
[   54.581031][ T4991] The buggy address belongs to the physical page:
[   54.587428][ T4991] page:ffffea0000aa5a40 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a969
[   54.597571][ T4991] anon flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[   54.605620][ T4991] page_type: 0xffffffff()
[   54.610014][ T4991] raw: 00fff00000000200 ffff888012441780 0000000000000000 dead000000000001
[   54.618573][ T4991] raw: 0000000000000000 0000000080200020 00000001ffffffff 0000000000000000
[   54.627130][ T4991] page dumped because: kasan: bad access detected
[   54.633515][ T4991] page_owner tracks the page as allocated
[   54.639375][ T4991] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY), pid 4454, tgid 4454 (udevd), ts 19438667625, free_ts 19434626307
[   54.656895][ T4991]  post_alloc_hook+0x1e6/0x210
[   54.661738][ T4991]  get_page_from_freelist+0x321c/0x33a0
[   54.667276][ T4991]  __alloc_pages+0x255/0x670
[   54.671849][ T4991]  alloc_slab_page+0x6a/0x160
[   54.676507][ T4991]  new_slab+0x84/0x2f0
[   54.680553][ T4991]  ___slab_alloc+0xa85/0x10a0
[   54.685203][ T4991]  __kmem_cache_alloc_node+0x1b8/0x290
[   54.690643][ T4991]  __kmalloc+0xa8/0x230
[   54.694774][ T4991]  tomoyo_encode+0x26f/0x530
[   54.699344][ T4991]  tomoyo_realpath_from_path+0x598/0x5e0
[   54.704963][ T4991]  tomoyo_path_perm+0x28d/0x700
[   54.709791][ T4991]  security_inode_getattr+0xd3/0x120
[   54.715064][ T4991]  vfs_statx+0x18f/0x480
[   54.719374][ T4991]  __x64_sys_newfstatat+0x14f/0x1d0
[   54.724650][ T4991]  do_syscall_64+0x41/0xc0
[   54.729834][ T4991]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   54.740395][ T4991] page last free stack trace:
[   54.745046][ T4991]  free_unref_page_prepare+0x903/0xa30
[   54.750661][ T4991]  free_unref_page+0x37/0x3f0
[   54.755330][ T4991]  qlist_free_all+0x22/0x60
[   54.759827][ T4991]  kasan_quarantine_reduce+0x14b/0x160
[   54.765282][ T4991]  __kasan_slab_alloc+0x23/0x70
[   54.770216][ T4991]  slab_post_alloc_hook+0x68/0x3a0
[   54.775493][ T4991]  __kmem_cache_alloc_node+0x14c/0x290
[   54.780944][ T4991]  __kmalloc+0xa8/0x230
[   54.785081][ T4991]  tomoyo_encode+0x26f/0x530
[   54.789652][ T4991]  tomoyo_realpath_from_path+0x598/0x5e0
[   54.795269][ T4991]  tomoyo_path_perm+0x28d/0x700
[   54.800107][ T4991]  security_inode_getattr+0xd3/0x120
[   54.805371][ T4991]  vfs_statx+0x18f/0x480
[   54.809594][ T4991]  __x64_sys_newfstatat+0x14f/0x1d0
[   54.814860][ T4991]  do_syscall_64+0x41/0xc0
[   54.819345][ T4991]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   54.825219][ T4991] 
[   54.827524][ T4991] Memory state around the buggy address:
[   54.833132][ T4991]  ffff88802a969980: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc
[   54.841170][ T4991]  ffff88802a969a00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[   54.849211][ T4991] >ffff88802a969a80: 00 00 00 00 00 00 00 00 00 06 fc fc fc fc fc fc
[   54.857249][ T4991]                                               ^
[   54.863723][ T4991]  ffff88802a969b00: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[   54.871993][ T4991]  ffff88802a969b80: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc
[   54.880639][ T4991] ==================================================================
[   54.889449][ T4991] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   54.896668][ T4991] CPU: 0 PID: 4991 Comm: syz-executor175 Not tainted 6.4.0-rc4-syzkaller-00276-ge5282a7d8f6b #0
[   54.907084][ T4991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023
[   54.917216][ T4991] Call Trace:
[   54.920484][ T4991]  <TASK>
[   54.923399][ T4991]  dump_stack_lvl+0x1e7/0x2d0
[   54.928072][ T4991]  ? nf_tcp_handle_invalid+0x650/0x650
[   54.933522][ T4991]  ? panic+0x770/0x770
[   54.937584][ T4991]  ? preempt_schedule_common+0x83/0xc0
[   54.943043][ T4991]  ? vscnprintf+0x5d/0x80
[   54.947361][ T4991]  panic+0x30f/0x770
[   54.951353][ T4991]  ? check_panic_on_warn+0x21/0xa0
[   54.956456][ T4991]  ? __memcpy_flushcache+0x2b0/0x2b0
[   54.961741][ T4991]  ? _raw_spin_unlock_irqrestore+0x12c/0x140
[   54.967708][ T4991]  ? _raw_spin_unlock+0x40/0x40
[   54.972550][ T4991]  check_panic_on_warn+0x82/0xa0
[   54.977650][ T4991]  ? hfs_bnode_read_key+0x314/0x440
[   54.982843][ T4991]  end_report+0x63/0x110
[   54.987075][ T4991]  kasan_report+0x183/0x1b0
[   54.991567][ T4991]  ? hfs_bnode_read_key+0x314/0x440
[   54.996759][ T4991]  kasan_check_range+0x283/0x290
[   55.001697][ T4991]  ? hfs_bnode_read_key+0x314/0x440
[   55.007056][ T4991]  __asan_memcpy+0x40/0x70
[   55.011461][ T4991]  hfs_bnode_read_key+0x314/0x440
[   55.016673][ T4991]  hfs_brec_insert+0x6a1/0xbd0
[   55.021432][ T4991]  ? hfs_brec_keylen+0x360/0x360
[   55.026357][ T4991]  ? __asan_memset+0x23/0x40
[   55.030936][ T4991]  ? hfs_cat_build_record+0x242/0x800
[   55.036297][ T4991]  hfs_cat_create+0x5df/0xa70
[   55.040966][ T4991]  ? hfs_cat_build_key+0x170/0x170
[   55.046067][ T4991]  ? _raw_spin_unlock+0x28/0x40
[   55.050902][ T4991]  ? hfs_new_inode+0x88e/0xac0
[   55.055656][ T4991]  hfs_create+0x66/0xd0
[   55.059797][ T4991]  ? hfs_lookup+0x2f0/0x2f0
[   55.064287][ T4991]  path_openat+0x13df/0x3170
[   55.068885][ T4991]  ? do_filp_open+0x490/0x490
[   55.073641][ T4991]  do_filp_open+0x234/0x490
[   55.078140][ T4991]  ? vfs_tmpfile+0x4a0/0x4a0
[   55.082740][ T4991]  ? _raw_spin_unlock+0x28/0x40
[   55.087665][ T4991]  ? alloc_fd+0x59c/0x640
[   55.091986][ T4991]  do_sys_openat2+0x13f/0x500
[   55.096653][ T4991]  ? print_irqtrace_events+0x220/0x220
[   55.102111][ T4991]  ? do_sys_open+0x230/0x230
[   55.106689][ T4991]  ? lockdep_hardirqs_on+0x98/0x140
[   55.111874][ T4991]  ? _raw_spin_unlock_irq+0x2e/0x50
[   55.117058][ T4991]  ? ptrace_notify+0x278/0x380
[   55.121811][ T4991]  __x64_sys_openat+0x247/0x290
[   55.126652][ T4991]  ? __ia32_sys_open+0x270/0x270
[   55.131578][ T4991]  ? syscall_enter_from_user_mode+0x32/0x230
[   55.137545][ T4991]  ? syscall_enter_from_user_mode+0x8c/0x230
[   55.143510][ T4991]  do_syscall_64+0x41/0xc0
[   55.147917][ T4991]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   55.153830][ T4991] RIP: 0033:0x7f2ff084cb39
[   55.158237][ T4991] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[   55.177830][ T4991] RSP: 002b:00007ffee0060a98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   55.186230][ T4991] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2ff084cb39
[   55.194275][ T4991] RDX: 0000000000141842 RSI: 0000000020000380 RDI: 00000000ffffff9c
[   55.202235][ T4991] RBP: 00007f2ff080c140 R08: 0000000000000260 R09: 0000000000000000
[   55.210278][ T4991] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2ff080c1d0
[   55.218237][ T4991] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   55.226198][ T4991]  </TASK>
[   55.229462][ T4991] Kernel Offset: disabled
[   55.233807][ T4991] Rebooting in 86400 seconds..