./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2361844896 <...> Warning: Permanently added '10.128.1.152' (ED25519) to the list of known hosts. execve("./syz-executor2361844896", ["./syz-executor2361844896"], 0x7ffebf0c8040 /* 10 vars */) = 0 brk(NULL) = 0x555556096000 brk(0x555556096d00) = 0x555556096d00 arch_prctl(ARCH_SET_FS, 0x555556096380) = 0 set_tid_address(0x555556096650) = 5027 set_robust_list(0x555556096660, 24) = 0 rseq(0x555556096ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2361844896", 4096) = 28 getrandom("\x93\xa3\x35\x20\x87\xa8\x93\xca", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556096d00 brk(0x5555560b7d00) = 0x5555560b7d00 brk(0x5555560b8000) = 0x5555560b8000 mprotect(0x7f05305c3000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0528113000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 munmap(0x7f0528113000, 138412032) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./bus", 0777) = 0 mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_NOATIME|MS_POSIXACL, "") = 0 openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 chdir("./bus") = 0 ioctl(4, LOOP_CLR_FD) = 0 close(4) = 0 [ 55.269577][ T5027] syz-executor236[5027]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 55.288984][ T5027] loop0: detected capacity change from 0 to 1024 [ 55.318845][ T5027] hfsplus: request for non-existent node 32768 in B*Tree [ 55.326081][ T5027] hfsplus: request for non-existent node 32768 in B*Tree [ 55.333939][ T5027] ================================================================== [ 55.342014][ T5027] BUG: KASAN: wild-memory-access in hfsplus_bnode_dump+0x403/0xba0 [ 55.349956][ T5027] Read of size 2 at addr 000508800000103e by task syz-executor236/5027 [ 55.358208][ T5027] [ 55.360540][ T5027] CPU: 0 PID: 5027 Comm: syz-executor236 Not tainted 6.6.0-rc5-syzkaller-00055-g1c8b86a3799f #0 [ 55.370955][ T5027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 55.380996][ T5027] Call Trace: [ 55.384261][ T5027] [ 55.387182][ T5027] dump_stack_lvl+0x1e7/0x2d0 [ 55.391845][ T5027] ? nf_tcp_handle_invalid+0x650/0x650 [ 55.397283][ T5027] ? panic+0x770/0x770 [ 55.401352][ T5027] ? _printk+0xd5/0x120 [ 55.405488][ T5027] print_report+0xe6/0x540 [ 55.409888][ T5027] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 55.415854][ T5027] ? __virt_addr_valid+0x58/0x2e0 [ 55.420859][ T5027] ? hfsplus_bnode_dump+0x403/0xba0 [ 55.426041][ T5027] kasan_report+0x175/0x1b0 [ 55.430528][ T5027] ? hfsplus_bnode_dump+0x403/0xba0 [ 55.435737][ T5027] ? hfsplus_bnode_dump+0x403/0xba0 [ 55.440923][ T5027] kasan_check_range+0x27e/0x290 [ 55.445842][ T5027] ? hfsplus_bnode_dump+0x403/0xba0 [ 55.451024][ T5027] __asan_memcpy+0x29/0x70 [ 55.455427][ T5027] hfsplus_bnode_dump+0x403/0xba0 [ 55.460457][ T5027] ? hfsplus_bnode_move+0x910/0x910 [ 55.465638][ T5027] ? hfsplus_bnode_write_u16+0x9b/0xf0 [ 55.471079][ T5027] ? hfsplus_bnode_write+0x220/0x220 [ 55.476350][ T5027] ? rcu_is_watching+0x15/0xb0 [ 55.481099][ T5027] ? hfsplus_bnode_move+0x2da/0x910 [ 55.486286][ T5027] ? __mark_inode_dirty+0x3e7/0xd90 [ 55.491487][ T5027] hfsplus_brec_remove+0x42c/0x4f0 [ 55.496585][ T5027] __hfsplus_delete_attr+0x275/0x450 [ 55.501856][ T5027] ? hfsplus_delete_attr+0x4a0/0x4a0 [ 55.507126][ T5027] ? __kmalloc+0xe6/0x230 [ 55.511461][ T5027] hfsplus_delete_all_attrs+0x26b/0x3c0 [ 55.516989][ T5027] ? __hfsplus_delete_attr+0x450/0x450 [ 55.522429][ T5027] ? do_raw_spin_unlock+0x13b/0x8b0 [ 55.527610][ T5027] ? rcu_is_watching+0x15/0xb0 [ 55.532355][ T5027] ? __mark_inode_dirty+0x7fb/0xd90 [ 55.537537][ T5027] hfsplus_delete_cat+0xb5c/0xf90 [ 55.542547][ T5027] ? hfsplus_mark_inode_dirty+0x30/0x30 [ 55.548080][ T5027] ? smk_access+0x4ab/0x4e0 [ 55.552563][ T5027] ? hfsplus_unlink+0x161/0x790 [ 55.557401][ T5027] hfsplus_unlink+0x363/0x790 [ 55.562060][ T5027] ? smack_inode_link+0x310/0x310 [ 55.567070][ T5027] ? hfsplus_link+0x800/0x800 [ 55.571730][ T5027] ? __down_write_common+0x161/0x200 [ 55.576998][ T5027] ? bpf_lsm_inode_unlink+0x9/0x10 [ 55.582089][ T5027] ? security_inode_unlink+0xce/0x110 [ 55.587445][ T5027] vfs_unlink+0x35d/0x5f0 [ 55.591760][ T5027] do_unlinkat+0x4a7/0x950 [ 55.596159][ T5027] ? fsnotify_link_count+0xf0/0xf0 [ 55.601353][ T5027] ? strncpy_from_user+0x1a5/0x2e0 [ 55.606455][ T5027] __x64_sys_unlink+0x49/0x50 [ 55.611114][ T5027] do_syscall_64+0x41/0xc0 [ 55.615509][ T5027] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 55.621383][ T5027] RIP: 0033:0x7f05305505f9 [ 55.625779][ T5027] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 55.645365][ T5027] RSP: 002b:00007fffd74fe128 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 55.653761][ T5027] RAX: ffffffffffffffda RBX: 00007fffd74fe308 RCX: 00007f05305505f9 [ 55.661716][ T5027] RDX: 00007f053054f8f0 RSI: 0000000000000000 RDI: 0000000020000140 [ 55.669715][ T5027] RBP: 00007f05305c3610 R08: 0000000000000640 R09: 0000000000000000 [ 55.677686][ T5027] R10: 00007fffd74fdff0 R11: 0000000000000246 R12: 0000000000000001 [ 55.685643][ T5027] R13: 00007fffd74fe2f8 R14: 0000000000000001 R15: 0000000000000001 [ 55.693603][ T5027] [ 55.696690][ T5027] ================================================================== [ 55.705095][ T5027] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 55.712294][ T5027] CPU: 0 PID: 5027 Comm: syz-executor236 Not tainted 6.6.0-rc5-syzkaller-00055-g1c8b86a3799f #0 [ 55.722691][ T5027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 55.732731][ T5027] Call Trace: [ 55.735997][ T5027] [ 55.738916][ T5027] dump_stack_lvl+0x1e7/0x2d0 [ 55.743587][ T5027] ? nf_tcp_handle_invalid+0x650/0x650 [ 55.749052][ T5027] ? panic+0x770/0x770 [ 55.753143][ T5027] ? preempt_schedule_common+0x83/0xc0 [ 55.758607][ T5027] ? vscnprintf+0x5d/0x80 [ 55.762930][ T5027] panic+0x30f/0x770 [ 55.766819][ T5027] ? check_panic_on_warn+0x21/0xa0 [ 55.771918][ T5027] ? __memcpy_flushcache+0x2b0/0x2b0 [ 55.777191][ T5027] ? _raw_spin_unlock_irqrestore+0x12c/0x140 [ 55.783160][ T5027] ? _raw_spin_unlock+0x40/0x40 [ 55.788004][ T5027] ? print_report+0xe6/0x540 [ 55.792581][ T5027] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 55.798549][ T5027] check_panic_on_warn+0x82/0xa0 [ 55.803474][ T5027] ? hfsplus_bnode_dump+0x403/0xba0 [ 55.808666][ T5027] end_report+0x6e/0x130 [ 55.812895][ T5027] kasan_report+0x186/0x1b0 [ 55.817386][ T5027] ? hfsplus_bnode_dump+0x403/0xba0 [ 55.822578][ T5027] ? hfsplus_bnode_dump+0x403/0xba0 [ 55.827766][ T5027] kasan_check_range+0x27e/0x290 [ 55.832696][ T5027] ? hfsplus_bnode_dump+0x403/0xba0 [ 55.837884][ T5027] __asan_memcpy+0x29/0x70 [ 55.842290][ T5027] hfsplus_bnode_dump+0x403/0xba0 [ 55.847311][ T5027] ? hfsplus_bnode_move+0x910/0x910 [ 55.852499][ T5027] ? hfsplus_bnode_write_u16+0x9b/0xf0 [ 55.857947][ T5027] ? hfsplus_bnode_write+0x220/0x220 [ 55.863224][ T5027] ? rcu_is_watching+0x15/0xb0 [ 55.867979][ T5027] ? hfsplus_bnode_move+0x2da/0x910 [ 55.873167][ T5027] ? __mark_inode_dirty+0x3e7/0xd90 [ 55.878359][ T5027] hfsplus_brec_remove+0x42c/0x4f0 [ 55.883466][ T5027] __hfsplus_delete_attr+0x275/0x450 [ 55.888747][ T5027] ? hfsplus_delete_attr+0x4a0/0x4a0 [ 55.894019][ T5027] ? __kmalloc+0xe6/0x230 [ 55.898338][ T5027] hfsplus_delete_all_attrs+0x26b/0x3c0 [ 55.903871][ T5027] ? __hfsplus_delete_attr+0x450/0x450 [ 55.909342][ T5027] ? do_raw_spin_unlock+0x13b/0x8b0 [ 55.914652][ T5027] ? rcu_is_watching+0x15/0xb0 [ 55.919422][ T5027] ? __mark_inode_dirty+0x7fb/0xd90 [ 55.924620][ T5027] hfsplus_delete_cat+0xb5c/0xf90 [ 55.929646][ T5027] ? hfsplus_mark_inode_dirty+0x30/0x30 [ 55.935186][ T5027] ? smk_access+0x4ab/0x4e0 [ 55.939681][ T5027] ? hfsplus_unlink+0x161/0x790 [ 55.944529][ T5027] hfsplus_unlink+0x363/0x790 [ 55.949226][ T5027] ? smack_inode_link+0x310/0x310 [ 55.954697][ T5027] ? hfsplus_link+0x800/0x800 [ 55.959556][ T5027] ? __down_write_common+0x161/0x200 [ 55.964857][ T5027] ? bpf_lsm_inode_unlink+0x9/0x10 [ 55.969961][ T5027] ? security_inode_unlink+0xce/0x110 [ 55.975328][ T5027] vfs_unlink+0x35d/0x5f0 [ 55.979661][ T5027] do_unlinkat+0x4a7/0x950 [ 55.984069][ T5027] ? fsnotify_link_count+0xf0/0xf0 [ 55.989258][ T5027] ? strncpy_from_user+0x1a5/0x2e0 [ 55.994364][ T5027] __x64_sys_unlink+0x49/0x50 [ 55.999030][ T5027] do_syscall_64+0x41/0xc0 [ 56.003608][ T5027] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 56.009754][ T5027] RIP: 0033:0x7f05305505f9 [ 56.014172][ T5027] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 56.033769][ T5027] RSP: 002b:00007fffd74fe128 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 56.042170][ T5027] RAX: ffffffffffffffda RBX: 00007fffd74fe308 RCX: 00007f05305505f9 [ 56.050129][ T5027] RDX: 00007f053054f8f0 RSI: 0000000000000000 RDI: 0000000020000140 [ 56.058089][ T5027] RBP: 00007f05305c3610 R08: 0000000000000640 R09: 0000000000000000 [ 56.066053][ T5027] R10: 00007fffd74fdff0 R11: 0000000000000246 R12: 0000000000000001 [ 56.074011][ T5027] R13: 00007fffd74fe2f8 R14: 0000000000000001 R15: 0000000000000001 [ 56.081997][ T5027] [ 56.085215][ T5027] Kernel Offset: disabled [ 56.089533][ T5027] Rebooting in 86400 seconds..