./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3486031629 <...> Warning: Permanently added '10.128.0.92' (ED25519) to the list of known hosts. execve("./syz-executor3486031629", ["./syz-executor3486031629"], 0x7ffdd2ecb240 /* 10 vars */) = 0 brk(NULL) = 0x555556f20000 brk(0x555556f20d00) = 0x555556f20d00 arch_prctl(ARCH_SET_FS, 0x555556f20380) = 0 set_tid_address(0x555556f20650) = 5062 set_robust_list(0x555556f20660, 24) = 0 rseq(0x555556f20ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3486031629", 4096) = 28 getrandom("\x9b\x0f\x36\xdd\x1d\xa5\xed\x73", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556f20d00 brk(0x555556f41d00) = 0x555556f41d00 brk(0x555556f42000) = 0x555556f42000 mprotect(0x7f3776252000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376dc00000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 munmap(0x7f376dc00000, 138412032) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 close(4) = 0 mkdir("./bus", 0777) = 0 [ 72.317782][ T5062] loop0: detected capacity change from 0 to 1024 mount("/dev/loop0", "./bus", "hfsplus", 0, "") = 0 openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 chdir("./bus") = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) openat(AT_FDCWD, ".", O_RDONLY) = 4 openat(AT_FDCWD, ".", O_RDONLY) = 5 [ 72.430813][ T5062] hfsplus: request for non-existent node 65030 in B*Tree [ 72.438091][ T5062] hfsplus: request for non-existent node 65030 in B*Tree [ 72.445621][ T5062] ================================================================== [ 72.453673][ T5062] BUG: KASAN: wild-memory-access in hfsplus_bnode_dump+0x403/0xbb0 [ 72.461746][ T5062] Read of size 2 at addr 000508800000103e by task syz-executor348/5062 [ 72.469972][ T5062] [ 72.472285][ T5062] CPU: 1 PID: 5062 Comm: syz-executor348 Not tainted 6.8.0-rc3-syzkaller-00010-g6d280f4d760e #0 [ 72.482683][ T5062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 72.492727][ T5062] Call Trace: [ 72.496009][ T5062] [ 72.498943][ T5062] dump_stack_lvl+0x1e7/0x2e0 [ 72.503640][ T5062] ? __pfx_dump_stack_lvl+0x10/0x10 [ 72.508853][ T5062] ? __pfx__printk+0x10/0x10 [ 72.513449][ T5062] ? _printk+0xd5/0x120 [ 72.517613][ T5062] print_report+0xe6/0x540 [ 72.522034][ T5062] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 72.528022][ T5062] ? __virt_addr_valid+0x58/0x520 [ 72.533053][ T5062] ? hfsplus_bnode_dump+0x403/0xbb0 [ 72.538248][ T5062] kasan_report+0x142/0x180 [ 72.542762][ T5062] ? hfsplus_bnode_dump+0x403/0xbb0 [ 72.547960][ T5062] ? hfsplus_bnode_dump+0x403/0xbb0 [ 72.553177][ T5062] kasan_check_range+0x282/0x290 [ 72.558130][ T5062] ? hfsplus_bnode_dump+0x403/0xbb0 [ 72.563453][ T5062] __asan_memcpy+0x29/0x70 [ 72.567880][ T5062] hfsplus_bnode_dump+0x403/0xbb0 [ 72.572915][ T5062] ? __pfx_hfsplus_bnode_dump+0x10/0x10 [ 72.578460][ T5062] ? hfsplus_bnode_write_u16+0x9b/0xf0 [ 72.583921][ T5062] ? __pfx_hfsplus_bnode_write_u16+0x10/0x10 [ 72.589911][ T5062] ? rcu_is_watching+0x15/0xb0 [ 72.594701][ T5062] ? hfsplus_bnode_move+0x2da/0x910 [ 72.599899][ T5062] ? __mark_inode_dirty+0x3ed/0xdb0 [ 72.605119][ T5062] hfsplus_brec_remove+0x42c/0x4f0 [ 72.610239][ T5062] __hfsplus_delete_attr+0x275/0x450 [ 72.615529][ T5062] ? __pfx___hfsplus_delete_attr+0x10/0x10 [ 72.621344][ T5062] hfsplus_delete_all_attrs+0x26b/0x3d0 [ 72.626905][ T5062] ? __pfx_hfsplus_delete_all_attrs+0x10/0x10 [ 72.632970][ T5062] ? do_raw_spin_unlock+0x13b/0x8b0 [ 72.638173][ T5062] ? rcu_is_watching+0x15/0xb0 [ 72.642942][ T5062] ? __mark_inode_dirty+0x805/0xdb0 [ 72.648145][ T5062] hfsplus_delete_cat+0xb37/0xf70 [ 72.653179][ T5062] ? __pfx_hfsplus_delete_cat+0x10/0x10 [ 72.658731][ T5062] ? hfsplus_unlink+0x161/0x790 [ 72.663594][ T5062] hfsplus_unlink+0x363/0x790 [ 72.668282][ T5062] ? __pfx_hfsplus_unlink+0x10/0x10 [ 72.673489][ T5062] ? __pfx___down_write_common+0x10/0x10 [ 72.679122][ T5062] ? __pfx___down_write_common+0x10/0x10 [ 72.684758][ T5062] hfsplus_rename+0xc8/0x1c0 [ 72.689356][ T5062] ? __pfx_hfsplus_rename+0x10/0x10 [ 72.694568][ T5062] vfs_rename+0xbdb/0xf00 [ 72.698914][ T5062] ? __pfx_vfs_rename+0x10/0x10 [ 72.703775][ T5062] ? security_path_rename+0x18b/0x220 [ 72.709162][ T5062] do_renameat2+0xd94/0x13f0 [ 72.713756][ T5062] ? __virt_addr_valid+0x183/0x520 [ 72.718886][ T5062] ? __pfx_do_renameat2+0x10/0x10 [ 72.723923][ T5062] ? __virt_addr_valid+0x183/0x520 [ 72.729037][ T5062] ? __virt_addr_valid+0x44e/0x520 [ 72.734155][ T5062] ? __check_object_size+0x4bb/0xa00 [ 72.739451][ T5062] ? getname_flags+0x1fd/0x4f0 [ 72.744222][ T5062] __x64_sys_renameat2+0xd2/0xf0 [ 72.749170][ T5062] do_syscall_64+0xf9/0x240 [ 72.753684][ T5062] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 72.759587][ T5062] RIP: 0033:0x7f37761df679 [ 72.764016][ T5062] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 72.783629][ T5062] RSP: 002b:00007fff93de14b8 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 72.792046][ T5062] RAX: ffffffffffffffda RBX: 00007fff93de1688 RCX: 00007f37761df679 [ 72.800021][ T5062] RDX: 0000000000000004 RSI: 00000000200000c0 RDI: 0000000000000005 [ 72.807996][ T5062] RBP: 00007f3776252610 R08: 0000000000000000 R09: 00007fff93de1688 [ 72.815970][ T5062] R10: 0000000020000180 R11: 0000000000000246 R12: 0000000000000001 [ 72.824033][ T5062] R13: 00007fff93de1678 R14: 0000000000000001 R15: 0000000000000001 [ 72.832015][ T5062] [ 72.835035][ T5062] ================================================================== [ 72.843235][ T5062] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 72.850431][ T5062] CPU: 1 PID: 5062 Comm: syz-executor348 Not tainted 6.8.0-rc3-syzkaller-00010-g6d280f4d760e #0 [ 72.860841][ T5062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 72.870890][ T5062] Call Trace: [ 72.874168][ T5062] [ 72.877096][ T5062] dump_stack_lvl+0x1e7/0x2e0 [ 72.881782][ T5062] ? __pfx_dump_stack_lvl+0x10/0x10 [ 72.886984][ T5062] ? __pfx__printk+0x10/0x10 [ 72.891575][ T5062] ? lock_release+0xbf/0x9d0 [ 72.896173][ T5062] ? vscnprintf+0x5d/0x90 [ 72.900516][ T5062] panic+0x349/0x860 [ 72.904415][ T5062] ? check_panic_on_warn+0x21/0xb0 [ 72.909531][ T5062] ? __pfx_panic+0x10/0x10 [ 72.913956][ T5062] ? mark_lock+0x9a/0x350 [ 72.918288][ T5062] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 72.924184][ T5062] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 72.930076][ T5062] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 72.936405][ T5062] ? print_report+0xe6/0x540 [ 72.940996][ T5062] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 72.946984][ T5062] check_panic_on_warn+0x86/0xb0 [ 72.951930][ T5062] ? hfsplus_bnode_dump+0x403/0xbb0 [ 72.957124][ T5062] end_report+0x6e/0x140 [ 72.961370][ T5062] kasan_report+0x153/0x180 [ 72.965878][ T5062] ? hfsplus_bnode_dump+0x403/0xbb0 [ 72.971078][ T5062] ? hfsplus_bnode_dump+0x403/0xbb0 [ 72.976269][ T5062] kasan_check_range+0x282/0x290 [ 72.981207][ T5062] ? hfsplus_bnode_dump+0x403/0xbb0 [ 72.986404][ T5062] __asan_memcpy+0x29/0x70 [ 72.990819][ T5062] hfsplus_bnode_dump+0x403/0xbb0 [ 72.995851][ T5062] ? __pfx_hfsplus_bnode_dump+0x10/0x10 [ 73.001425][ T5062] ? hfsplus_bnode_write_u16+0x9b/0xf0 [ 73.006907][ T5062] ? __pfx_hfsplus_bnode_write_u16+0x10/0x10 [ 73.012902][ T5062] ? rcu_is_watching+0x15/0xb0 [ 73.017679][ T5062] ? hfsplus_bnode_move+0x2da/0x910 [ 73.022913][ T5062] ? __mark_inode_dirty+0x3ed/0xdb0 [ 73.028124][ T5062] hfsplus_brec_remove+0x42c/0x4f0 [ 73.033258][ T5062] __hfsplus_delete_attr+0x275/0x450 [ 73.038556][ T5062] ? __pfx___hfsplus_delete_attr+0x10/0x10 [ 73.044367][ T5062] hfsplus_delete_all_attrs+0x26b/0x3d0 [ 73.049933][ T5062] ? __pfx_hfsplus_delete_all_attrs+0x10/0x10 [ 73.056027][ T5062] ? do_raw_spin_unlock+0x13b/0x8b0 [ 73.061235][ T5062] ? rcu_is_watching+0x15/0xb0 [ 73.066013][ T5062] ? __mark_inode_dirty+0x805/0xdb0 [ 73.071229][ T5062] hfsplus_delete_cat+0xb37/0xf70 [ 73.076273][ T5062] ? __pfx_hfsplus_delete_cat+0x10/0x10 [ 73.081838][ T5062] ? hfsplus_unlink+0x161/0x790 [ 73.086708][ T5062] hfsplus_unlink+0x363/0x790 [ 73.091395][ T5062] ? __pfx_hfsplus_unlink+0x10/0x10 [ 73.096602][ T5062] ? __pfx___down_write_common+0x10/0x10 [ 73.102245][ T5062] ? __pfx___down_write_common+0x10/0x10 [ 73.107889][ T5062] hfsplus_rename+0xc8/0x1c0 [ 73.112493][ T5062] ? __pfx_hfsplus_rename+0x10/0x10 [ 73.117707][ T5062] vfs_rename+0xbdb/0xf00 [ 73.122047][ T5062] ? __pfx_vfs_rename+0x10/0x10 [ 73.126904][ T5062] ? security_path_rename+0x18b/0x220 [ 73.132291][ T5062] do_renameat2+0xd94/0x13f0 [ 73.136885][ T5062] ? __virt_addr_valid+0x183/0x520 [ 73.142015][ T5062] ? __pfx_do_renameat2+0x10/0x10 [ 73.147047][ T5062] ? __virt_addr_valid+0x183/0x520 [ 73.152164][ T5062] ? __virt_addr_valid+0x44e/0x520 [ 73.157279][ T5062] ? __check_object_size+0x4bb/0xa00 [ 73.162574][ T5062] ? getname_flags+0x1fd/0x4f0 [ 73.167361][ T5062] __x64_sys_renameat2+0xd2/0xf0 [ 73.172304][ T5062] do_syscall_64+0xf9/0x240 [ 73.176828][ T5062] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 73.182743][ T5062] RIP: 0033:0x7f37761df679 [ 73.187161][ T5062] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 73.206769][ T5062] RSP: 002b:00007fff93de14b8 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 73.215188][ T5062] RAX: ffffffffffffffda RBX: 00007fff93de1688 RCX: 00007f37761df679 [ 73.223159][ T5062] RDX: 0000000000000004 RSI: 00000000200000c0 RDI: 0000000000000005 [ 73.231125][ T5062] RBP: 00007f3776252610 R08: 0000000000000000 R09: 00007fff93de1688 [ 73.239093][ T5062] R10: 0000000020000180 R11: 0000000000000246 R12: 0000000000000001 [ 73.247066][ T5062] R13: 00007fff93de1678 R14: 0000000000000001 R15: 0000000000000001 [ 73.255044][ T5062] [ 73.258395][ T5062] Kernel Offset: disabled [ 73.262708][ T5062] Rebooting in 86400 seconds..