./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor685464653 <...> Warning: Permanently added '10.128.10.22' (ED25519) to the list of known hosts. execve("./syz-executor685464653", ["./syz-executor685464653"], 0x7ffeb874bf90 /* 10 vars */) = 0 brk(NULL) = 0x55558cb7e000 brk(0x55558cb7ed00) = 0x55558cb7ed00 arch_prctl(ARCH_SET_FS, 0x55558cb7e380) = 0 set_tid_address(0x55558cb7e650) = 5820 set_robust_list(0x55558cb7e660, 24) = 0 rseq(0x55558cb7eca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor685464653", 4096) = 27 getrandom("\x0c\x45\x11\x2d\xe2\xc0\x7b\xe2", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55558cb7ed00 brk(0x55558cb9fd00) = 0x55558cb9fd00 brk(0x55558cba0000) = 0x55558cba0000 mprotect(0x7fb75cdaa000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 write(1, "executing program\n", 18executing program ) = 18 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb754800000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 munmap(0x7fb754800000, 138412032) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 close(4) = 0 mkdir("./file0", 0777) = 0 mount("/dev/loop0", "./file0", "hfsplus", MS_RDONLY, "") = 0 openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 61.767870][ T5820] loop0: detected capacity change from 0 to 1024 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) mkdir("./file0", 0777) = -1 EEXIST (File exists) mount(NULL, "./file0", 0x200005c0, MS_REMOUNT, "\x78\x9c\xec\xdd\x4f\x6b\x1c\xe7\x1d\x07\xf0\xef\xac\x64\xd9\x72\xc1\x51\x12\x3b\x49\x4b\x4b\x85\x7d\x68\x89\xa9\xad\xd5\x26\x8e\x0e\x05\xbb\xa5\x14\x1d\x42\x09\xf4\x92\x4b\x0e\xc2\x5e\xc7\xc2\x6b\x25\x48\x9b\xa2\x84\x52\xe4\xfe\xbd\xf6\x1d\x24\x3d\xc8\xe7\x9e\x7a\x28\x3d\x18\xd2\x73\xdf\x82\xa0\x87\x1c\x0a\xbd\xeb\xe6\x32\xb3\xb3\xab\x8d\x25\xcb\x2b\xc7\xd1\xae\x9a\xcf\x07\x9e\x7d\x9e\xd9\x67\xe6"...) = 0 openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 4 chdir("./file0") = 0 [ 61.892169][ T5820] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] PREEMPT SMP KASAN PTI [ 61.904858][ T5820] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 61.913260][ T5820] CPU: 1 UID: 0 PID: 5820 Comm: syz-executor685 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 61.924348][ T5820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 61.934395][ T5820] RIP: 0010:hfsplus_rename_cat+0x4b3/0x1090 [ 61.940293][ T5820] Code: 60 42 80 3c 20 00 48 8b 5c 24 20 74 05 e8 d5 33 86 ff 48 8b 94 24 20 01 00 00 48 83 c3 40 48 89 d8 48 c1 e8 03 48 89 44 24 68 <42> 80 3c 20 00 48 89 54 24 08 74 0d 48 89 df e8 a9 33 86 ff 48 8b [ 61.959881][ T5820] RSP: 0018:ffffc90003e2f720 EFLAGS: 00010202 [ 61.965933][ T5820] RAX: 0000000000000008 RBX: 0000000000000040 RCX: ffff888030031e00 [ 61.973886][ T5820] RDX: ffff88814cb35000 RSI: 0000000000000000 RDI: ffffc90003e2f840 [ 61.981837][ T5820] RBP: ffffc90003e2fb90 R08: ffffffff827d75e4 R09: 0000000000000000 [ 61.989791][ T5820] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 61.997745][ T5820] R13: ffffc90003e2f80c R14: ffffc90003e2f8a0 R15: 1ffff920007c5ef8 [ 62.005914][ T5820] FS: 000055558cb7e380(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 62.014872][ T5820] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 62.021453][ T5820] CR2: 00007ffdacb48000 CR3: 000000007b8b8000 CR4: 00000000003526f0 [ 62.029412][ T5820] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 62.037368][ T5820] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 62.045321][ T5820] Call Trace: [ 62.048581][ T5820] [ 62.051504][ T5820] ? __die_body+0x5f/0xb0 [ 62.055826][ T5820] ? die_addr+0xb0/0xe0 [ 62.059961][ T5820] ? exc_general_protection+0x3dd/0x5d0 [ 62.065506][ T5820] ? asm_exc_general_protection+0x26/0x30 [ 62.071214][ T5820] ? hfsplus_bnode_read+0xf4/0x1e0 [ 62.076325][ T5820] ? hfsplus_rename_cat+0x4b3/0x1090 [ 62.081592][ T5820] ? mark_lock+0x9a/0x360 [ 62.085914][ T5820] ? __pfx_hfsplus_rename_cat+0x10/0x10 [ 62.091442][ T5820] ? number+0xb5e/0xf90 [ 62.095588][ T5820] ? __pfx_sprintf+0x10/0x10 [ 62.100163][ T5820] hfsplus_link+0x3ab/0x800 [ 62.104652][ T5820] ? __pfx_hfsplus_link+0x10/0x10 [ 62.109657][ T5820] ? __pfx_down_write+0x10/0x10 [ 62.114491][ T5820] ? bpf_lsm_inode_link+0x9/0x10 [ 62.119414][ T5820] ? security_inode_link+0xdb/0x350 [ 62.124606][ T5820] vfs_link+0x4f0/0x6e0 [ 62.128746][ T5820] do_linkat+0x555/0x6f0 [ 62.132968][ T5820] ? __pfx_do_linkat+0x10/0x10 [ 62.137715][ T5820] ? strncpy_from_user+0x152/0x270 [ 62.142902][ T5820] ? getname_flags+0x1e3/0x540 [ 62.147649][ T5820] __x64_sys_link+0x82/0x90 [ 62.152134][ T5820] do_syscall_64+0xf3/0x230 [ 62.156648][ T5820] ? clear_bhb_loop+0x35/0x90 [ 62.161309][ T5820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.167186][ T5820] RIP: 0033:0x7fb75cd37779 [ 62.171593][ T5820] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 62.191179][ T5820] RSP: 002b:00007ffdacb47678 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 62.199576][ T5820] RAX: ffffffffffffffda RBX: 0030656c69662f2e RCX: 00007fb75cd37779 [ 62.207549][ T5820] RDX: 00007fb75cd36af7 RSI: 0000000020000300 RDI: 0000000020000200 [ 62.215506][ T5820] RBP: 00007fb75cdaa610 R08: 0000000000000000 R09: 0000000000000000 [ 62.223463][ T5820] R10: 00007ffdacb47540 R11: 0000000000000246 R12: 0000000000000001 [ 62.231436][ T5820] R13: 00007ffdacb47848 R14: 0000000000000001 R15: 0000000000000001 [ 62.239399][ T5820] [ 62.242401][ T5820] Modules linked in: [ 62.246407][ T5820] ---[ end trace 0000000000000000 ]--- [ 62.253198][ T5820] RIP: 0010:hfsplus_rename_cat+0x4b3/0x1090 [ 62.259211][ T5820] Code: 60 42 80 3c 20 00 48 8b 5c 24 20 74 05 e8 d5 33 86 ff 48 8b 94 24 20 01 00 00 48 83 c3 40 48 89 d8 48 c1 e8 03 48 89 44 24 68 <42> 80 3c 20 00 48 89 54 24 08 74 0d 48 89 df e8 a9 33 86 ff 48 8b [ 62.278872][ T5820] RSP: 0018:ffffc90003e2f720 EFLAGS: 00010202 [ 62.284981][ T5820] RAX: 0000000000000008 RBX: 0000000000000040 RCX: ffff888030031e00 [ 62.292956][ T5820] RDX: ffff88814cb35000 RSI: 0000000000000000 RDI: ffffc90003e2f840 [ 62.300948][ T5820] RBP: ffffc90003e2fb90 R08: ffffffff827d75e4 R09: 0000000000000000 [ 62.308945][ T5820] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 62.316937][ T5820] R13: ffffc90003e2f80c R14: ffffc90003e2f8a0 R15: 1ffff920007c5ef8 [ 62.324931][ T5820] FS: 000055558cb7e380(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 62.333870][ T5820] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 62.340452][ T5820] CR2: 00007ffdacb48000 CR3: 000000007b8b8000 CR4: 00000000003526f0 [ 62.348445][ T5820] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 62.356468][ T5820] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 62.364503][ T5820] Kernel panic - not syncing: Fatal exception [ 62.370858][ T5820] Kernel Offset: disabled [ 62.375169][ T5820] Rebooting in 86400 seconds..