program:
syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x8b, 0x2b9, &(0x7f0000000700)="$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")
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x440000, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_mount_image$bcachefs(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x8010, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRES16, @ANYRESHEX=0x0], 0xff, 0x5943, &(0x7f0000006bc0)="$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")
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x22400)
ioctl$LOOP_SET_STATUS(r6, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x3, 0x9, 0x10, 0x1d, "9e959f16b6787b08aa26e66c4056a51695284854c282ec6bcfeef4fb0efcc1d8a6078ed98e033fd5f0643902dd8f6fac274de9d940bba5e592bbd4ce85450d00", "f625c10e6e4c36c800dee96015e0fb7e904dc8df62a3a893ec00347f41be5a08", [0x6, 0x8]})
write$binfmt_script(r5, &(0x7f0000000200), 0xffffff60)
copy_file_range(r4, 0x0, r3, 0x0, 0xffffffffa003e45c, 0x700000000000000)
r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000000040)={0x2, 0x0, [{0x1, 0x877, 0x3, 0xfffffff9, 0x2}, {0x7, 0x7fffffff, 0x7d6, 0x3396, 0x6}]})
ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000080)={0x2, 0x2, 0x8125, 0x0, 0x2, 0x1ff})
r8 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x619302, 0x0)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e22, @remote}], 0x20)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r10, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x32}}], 0x10)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r8, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r9, 0x1, 0x70bd26, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x8000)
creat(&(0x7f00000002c0)='./file0\x00', 0x22)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
[ 81.101355][ T5302] Bluetooth: hci0: command tx timeout
[ 81.106379][ T1309] ieee802154 phy0 wpan0: encryption failed: -22
[ 81.109035][ T1309] ieee802154 phy1 wpan1: encryption failed: -22
[ 81.179375][ T5318] loop0: detected capacity change from 0 to 64
[ 81.536868][ T5318] ==================================================================
[ 81.539881][ T5318] BUG: KASAN: slab-out-of-bounds in hfs_bnode_read_key+0x314/0x450
[ 81.542975][ T5318] Write of size 94 at addr ffff888043b6d200 by task syz.0.0/5318
[ 81.545784][ T5318]
[ 81.546678][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz.0.0 Not tainted 6.14.0-rc1-syzkaller-00235-g9946eaf552b1 #0
[ 81.546691][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 81.546697][ T5318] Call Trace:
[ 81.546702][ T5318]
[ 81.546708][ T5318] dump_stack_lvl+0x241/0x360
[ 81.546723][ T5318] ? __pfx_dump_stack_lvl+0x10/0x10
[ 81.546731][ T5318] ? __pfx__printk+0x10/0x10
[ 81.546744][ T5318] ? _printk+0xd5/0x120
[ 81.546756][ T5318] ? __virt_addr_valid+0x183/0x530
[ 81.546769][ T5318] ? __virt_addr_valid+0x183/0x530
[ 81.546781][ T5318] print_report+0x169/0x550
[ 81.546795][ T5318] ? __virt_addr_valid+0x183/0x530
[ 81.546809][ T5318] ? __virt_addr_valid+0x183/0x530
[ 81.546821][ T5318] ? __virt_addr_valid+0x45f/0x530
[ 81.546833][ T5318] ? __phys_addr+0xba/0x170
[ 81.546846][ T5318] ? hfs_bnode_read_key+0x314/0x450
[ 81.546855][ T5318] kasan_report+0x143/0x180
[ 81.546865][ T5318] ? hfs_bnode_read_key+0x314/0x450
[ 81.546873][ T5318] kasan_check_range+0x282/0x290
[ 81.546879][ T5318] ? hfs_bnode_read_key+0x314/0x450
[ 81.546886][ T5318] __asan_memcpy+0x40/0x70
[ 81.546895][ T5318] hfs_bnode_read_key+0x314/0x450
[ 81.546903][ T5318] hfs_brec_insert+0x7f3/0xbd0
[ 81.546914][ T5318] ? __pfx_hfs_brec_insert+0x10/0x10
[ 81.546927][ T5318] hfs_cat_create+0x41d/0xa50
[ 81.546940][ T5318] ? __pfx_hfs_cat_create+0x10/0x10
[ 81.546957][ T5318] ? _raw_spin_unlock+0x28/0x50
[ 81.547008][ T5318] ? hfs_new_inode+0x86e/0xaf0
[ 81.547016][ T5318] hfs_create+0x66/0xe0
[ 81.547028][ T5318] ? __pfx_hfs_create+0x10/0x10
[ 81.547044][ T5318] path_openat+0x193c/0x3590
[ 81.547062][ T5318] ? __pfx_path_openat+0x10/0x10
[ 81.547077][ T5318] do_filp_open+0x27f/0x4e0
[ 81.547090][ T5318] ? __pfx_do_filp_open+0x10/0x10
[ 81.547101][ T5318] ? do_raw_spin_lock+0x14f/0x370
[ 81.547121][ T5318] do_sys_openat2+0x13e/0x1d0
[ 81.547129][ T5318] ? __might_fault+0xaa/0x120
[ 81.547137][ T5318] ? __pfx_do_sys_openat2+0x10/0x10
[ 81.547143][ T5318] ? rcu_is_watching+0x15/0xb0
[ 81.547149][ T5318] ? __rseq_handle_notify_resume+0x34d/0x14e0
[ 81.547160][ T5318] __x64_sys_openat+0x247/0x2a0
[ 81.547166][ T5318] ? __pfx___x64_sys_openat+0x10/0x10
[ 81.547173][ T5318] ? do_syscall_64+0x100/0x230
[ 81.547183][ T5318] ? do_syscall_64+0xb6/0x230
[ 81.547190][ T5318] do_syscall_64+0xf3/0x230
[ 81.547199][ T5318] ? clear_bhb_loop+0x35/0x90
[ 81.547209][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 81.547218][ T5318] RIP: 0033:0x7f496638cde9
[ 81.547226][ T5318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 81.547231][ T5318] RSP: 002b:00007f4967136038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 81.547250][ T5318] RAX: ffffffffffffffda RBX: 00007f49665a5fa0 RCX: 00007f496638cde9
[ 81.547261][ T5318] RDX: 000000000000275a RSI: 0000400000000140 RDI: ffffffffffffff9c
[ 81.547269][ T5318] RBP: 00007f496640e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 81.547278][ T5318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 81.547286][ T5318] R13: 0000000000000000 R14: 00007f49665a5fa0 R15: 00007ffdb7a6a968
[ 81.547299][ T5318]
[ 81.547304][ T5318]
[ 81.677126][ T5318] Allocated by task 5318:
[ 81.679069][ T5318] kasan_save_track+0x3f/0x80
[ 81.681219][ T5318] __kasan_kmalloc+0x98/0xb0
[ 81.683200][ T5318] __kmalloc_noprof+0x285/0x4c0
[ 81.685071][ T5318] hfs_find_init+0x90/0x1f0
[ 81.686849][ T5318] hfs_cat_create+0x182/0xa50
[ 81.688646][ T5318] hfs_create+0x66/0xe0
[ 81.690387][ T5318] path_openat+0x193c/0x3590
[ 81.692359][ T5318] do_filp_open+0x27f/0x4e0
[ 81.694657][ T5318] do_sys_openat2+0x13e/0x1d0
[ 81.696900][ T5318] __x64_sys_openat+0x247/0x2a0
[ 81.698872][ T5318] do_syscall_64+0xf3/0x230
[ 81.700448][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 81.702656][ T5318]
[ 81.703759][ T5318] The buggy address belongs to the object at ffff888043b6d200
[ 81.703759][ T5318] which belongs to the cache kmalloc-96 of size 96
[ 81.710542][ T5318] The buggy address is located 0 bytes inside of
[ 81.710542][ T5318] allocated 78-byte region [ffff888043b6d200, ffff888043b6d24e)
[ 81.716198][ T5318]
[ 81.717212][ T5318] The buggy address belongs to the physical page:
[ 81.719784][ T5318] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x43b6d
[ 81.723157][ T5318] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff)
[ 81.726039][ T5318] page_type: f5(slab)
[ 81.727762][ T5318] raw: 04fff00000000000 ffff88801ac41280 dead000000000122 0000000000000000
[ 81.731249][ T5318] raw: 0000000000000000 0000000080200020 00000000f5000000 0000000000000000
[ 81.735173][ T5318] page dumped because: kasan: bad access detected
[ 81.737706][ T5318] page_owner tracks the page as allocated
[ 81.740043][ T5318] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 57, tgid 57 (kworker/0:2), ts 81531757324, free_ts 81490897640
[ 81.746685][ T5318] post_alloc_hook+0x1f4/0x240
[ 81.748391][ T5318] get_page_from_freelist+0x365c/0x37a0
[ 81.750932][ T5318] __alloc_frozen_pages_noprof+0x292/0x710
[ 81.753694][ T5318] alloc_pages_mpol+0x311/0x660
[ 81.755738][ T5318] allocate_slab+0x8f/0x3a0
[ 81.757490][ T5318] ___slab_alloc+0xc27/0x14a0
[ 81.759113][ T5318] __slab_alloc+0x58/0xa0
[ 81.760711][ T5318] __kmalloc_cache_noprof+0x27b/0x390
[ 81.763273][ T5318] nsim_fib_event_work+0x19c5/0x4130
[ 81.766294][ T5318] process_scheduled_works+0xa66/0x1840
[ 81.768782][ T5318] worker_thread+0x870/0xd30
[ 81.770630][ T5318] kthread+0x7a9/0x920
[ 81.772186][ T5318] ret_from_fork+0x4b/0x80
[ 81.773961][ T5318] ret_from_fork_asm+0x1a/0x30
[ 81.775801][ T5318] page last free pid 5318 tgid 5317 stack trace:
[ 81.778169][ T5318] free_frozen_pages+0xe0d/0x10e0
[ 81.780141][ T5318] rcu_core+0xaaa/0x17a0
[ 81.782178][ T5318] handle_softirqs+0x2d4/0x9b0
[ 81.784231][ T5318] __irq_exit_rcu+0xf7/0x220
[ 81.786662][ T5318] irq_exit_rcu+0x9/0x30
[ 81.788559][ T5318] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 81.790951][ T5318] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 81.793215][ T5318]
[ 81.794233][ T5318] Memory state around the buggy address:
[ 81.796312][ T5318] ffff888043b6d100: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[ 81.799396][ T5318] ffff888043b6d180: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[ 81.802632][ T5318] >ffff888043b6d200: 00 00 00 00 00 00 00 00 00 06 fc fc fc fc fc fc
[ 81.806288][ T5318] ^
[ 81.809436][ T5318] ffff888043b6d280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 81.812739][ T5318] ffff888043b6d300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 81.815919][ T5318] ==================================================================
[ 81.838030][ T5318] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 81.841254][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz.0.0 Not tainted 6.14.0-rc1-syzkaller-00235-g9946eaf552b1 #0
[ 81.846325][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 81.850808][ T5318] Call Trace:
[ 81.852274][ T5318]
[ 81.853605][ T5318] dump_stack_lvl+0x241/0x360
[ 81.855670][ T5318] ? __pfx_dump_stack_lvl+0x10/0x10
[ 81.858085][ T5318] ? __pfx__printk+0x10/0x10
[ 81.860309][ T5318] ? preempt_schedule+0xe1/0xf0
[ 81.862633][ T5318] ? vscnprintf+0x5d/0x90
[ 81.864457][ T5318] panic+0x349/0x880
[ 81.866120][ T5318] ? check_panic_on_warn+0x21/0xb0
[ 81.868175][ T5318] ? __pfx_panic+0x10/0x10
[ 81.870024][ T5318] ? _raw_spin_unlock_irqrestore+0x130/0x140
[ 81.872377][ T5318] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 81.875326][ T5318] ? print_report+0x502/0x550
[ 81.877831][ T5318] check_panic_on_warn+0x86/0xb0
[ 81.880593][ T5318] ? hfs_bnode_read_key+0x314/0x450
[ 81.882641][ T5318] end_report+0x77/0x160
[ 81.884300][ T5318] kasan_report+0x154/0x180
[ 81.886098][ T5318] ? hfs_bnode_read_key+0x314/0x450
[ 81.888098][ T5318] kasan_check_range+0x282/0x290
[ 81.890211][ T5318] ? hfs_bnode_read_key+0x314/0x450
[ 81.892460][ T5318] __asan_memcpy+0x40/0x70
[ 81.894917][ T5318] hfs_bnode_read_key+0x314/0x450
[ 81.897347][ T5318] hfs_brec_insert+0x7f3/0xbd0
[ 81.899358][ T5318] ? __pfx_hfs_brec_insert+0x10/0x10
[ 81.901843][ T5318] hfs_cat_create+0x41d/0xa50
[ 81.904038][ T5318] ? __pfx_hfs_cat_create+0x10/0x10
[ 81.906586][ T5318] ? _raw_spin_unlock+0x28/0x50
[ 81.909263][ T5318] ? hfs_new_inode+0x86e/0xaf0
[ 81.911906][ T5318] hfs_create+0x66/0xe0
[ 81.914330][ T5318] ? __pfx_hfs_create+0x10/0x10
[ 81.916718][ T5318] path_openat+0x193c/0x3590
[ 81.919068][ T5318] ? __pfx_path_openat+0x10/0x10
[ 81.921720][ T5318] do_filp_open+0x27f/0x4e0
[ 81.923852][ T5318] ? __pfx_do_filp_open+0x10/0x10
[ 81.926410][ T5318] ? do_raw_spin_lock+0x14f/0x370
[ 81.928935][ T5318] do_sys_openat2+0x13e/0x1d0
[ 81.931182][ T5318] ? __might_fault+0xaa/0x120
[ 81.933025][ T5318] ? __pfx_do_sys_openat2+0x10/0x10
[ 81.935113][ T5318] ? rcu_is_watching+0x15/0xb0
[ 81.936930][ T5318] ? __rseq_handle_notify_resume+0x34d/0x14e0
[ 81.939340][ T5318] __x64_sys_openat+0x247/0x2a0
[ 81.941408][ T5318] ? __pfx___x64_sys_openat+0x10/0x10
[ 81.943557][ T5318] ? do_syscall_64+0x100/0x230
[ 81.945717][ T5318] ? do_syscall_64+0xb6/0x230
[ 81.947870][ T5318] do_syscall_64+0xf3/0x230
[ 81.949969][ T5318] ? clear_bhb_loop+0x35/0x90
[ 81.952069][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 81.954350][ T5318] RIP: 0033:0x7f496638cde9
[ 81.956166][ T5318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 81.964302][ T5318] RSP: 002b:00007f4967136038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 81.967972][ T5318] RAX: ffffffffffffffda RBX: 00007f49665a5fa0 RCX: 00007f496638cde9
[ 81.971147][ T5318] RDX: 000000000000275a RSI: 0000400000000140 RDI: ffffffffffffff9c
[ 81.974265][ T5318] RBP: 00007f496640e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 81.977451][ T5318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 81.980833][ T5318] R13: 0000000000000000 R14: 00007f49665a5fa0 R15: 00007ffdb7a6a968
[ 81.984444][ T5318]
[ 81.986380][ T5318] Kernel Offset: disabled
[ 81.988278][ T5318] Rebooting in 86400 seconds..