./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1729260384 <...> Warning: Permanently added '10.128.0.150' (ED25519) to the list of known hosts. execve("./syz-executor1729260384", ["./syz-executor1729260384"], 0x7ffe4ff219c0 /* 10 vars */) = 0 brk(NULL) = 0x555592b6d000 brk(0x555592b6dd00) = 0x555592b6dd00 arch_prctl(ARCH_SET_FS, 0x555592b6d380) = 0 set_tid_address(0x555592b6d650) = 5078 set_robust_list(0x555592b6d660, 24) = 0 rseq(0x555592b6dca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1729260384", 4096) = 28 getrandom("\x4c\xae\x0a\x8e\xdc\x88\x19\x9e", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555592b6dd00 brk(0x555592b8ed00) = 0x555592b8ed00 brk(0x555592b8f000) = 0x555592b8f000 mprotect(0x7fa99b705000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5080 attached [pid 5080] set_robust_list(0x555592b6d660, 24) = 0 [pid 5080] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5078] <... clone resumed>, child_tidptr=0x555592b6d650) = 5080 [pid 5080] <... prctl resumed>) = 0 [pid 5080] setpgid(0, 0) = 0 [pid 5080] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5080] write(3, "1000", 4) = 4 [pid 5080] close(3) = 0 [pid 5080] write(1, "executing program\n", 18executing program ) = 18 [pid 5080] memfd_create("syzkaller", 0) = 3 [pid 5080] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa993200000 [pid 5080] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5080] munmap(0x7fa993200000, 138412032) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5080] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5080] close(3) = 0 [pid 5080] close(4) = 0 [pid 5080] mkdir("./file1", 0777) = 0 [pid 5080] mount("/dev/loop0", "./file1", "hfsplus", MS_NOATIME|MS_SILENT|MS_STRICTATIME, "") = 0 [pid 5080] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [ 56.915358][ T5080] loop0: detected capacity change from 0 to 1024 [pid 5080] chdir("./file1") = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5080] openat(AT_FDCWD, ".", O_RDONLY) = 4 [ 56.993072][ T5080] hfsplus: request for non-existent node 128 in B*Tree [ 57.000259][ T5080] hfsplus: request for non-existent node 128 in B*Tree [ 57.007641][ T5080] ================================================================== [ 57.015792][ T5080] BUG: KASAN: wild-memory-access in hfsplus_bnode_dump+0x403/0xbb0 [ 57.023710][ T5080] Read of size 2 at addr 000508800000103e by task syz-executor172/5080 [ 57.031973][ T5080] [ 57.034292][ T5080] CPU: 0 PID: 5080 Comm: syz-executor172 Not tainted 6.9.0-syzkaller-09880-gdaa121128a2d #0 [ 57.044353][ T5080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 57.054414][ T5080] Call Trace: [ 57.057690][ T5080] [ 57.060626][ T5080] dump_stack_lvl+0x241/0x360 [ 57.065339][ T5080] ? __pfx_dump_stack_lvl+0x10/0x10 [ 57.070542][ T5080] ? __pfx__printk+0x10/0x10 [ 57.075145][ T5080] ? _printk+0xd5/0x120 [ 57.079307][ T5080] print_report+0xe8/0x550 [ 57.083724][ T5080] ? __virt_addr_valid+0x58/0x520 [ 57.088761][ T5080] ? hfsplus_bnode_dump+0x403/0xbb0 [ 57.093977][ T5080] kasan_report+0x143/0x180 [ 57.098485][ T5080] ? hfsplus_bnode_dump+0x403/0xbb0 [ 57.103692][ T5080] ? hfsplus_bnode_dump+0x403/0xbb0 [ 57.109079][ T5080] kasan_check_range+0x282/0x290 [ 57.114126][ T5080] ? hfsplus_bnode_dump+0x403/0xbb0 [ 57.119328][ T5080] __asan_memcpy+0x29/0x70 [ 57.123764][ T5080] hfsplus_bnode_dump+0x403/0xbb0 [ 57.128800][ T5080] ? __pfx_hfsplus_bnode_dump+0x10/0x10 [ 57.134453][ T5080] ? hfsplus_bnode_write_u16+0x9b/0xf0 [ 57.139912][ T5080] ? __pfx_hfsplus_bnode_write_u16+0x10/0x10 [ 57.145896][ T5080] ? rcu_is_watching+0x15/0xb0 [ 57.150677][ T5080] ? hfsplus_bnode_move+0x2da/0x910 [ 57.155895][ T5080] ? __mark_inode_dirty+0x41c/0xe20 [ 57.161088][ T5080] hfsplus_brec_remove+0x42c/0x4f0 [ 57.166215][ T5080] __hfsplus_delete_attr+0x275/0x450 [ 57.171496][ T5080] ? __pfx___hfsplus_delete_attr+0x10/0x10 [ 57.177297][ T5080] hfsplus_delete_all_attrs+0x26b/0x3d0 [ 57.182845][ T5080] ? __pfx_hfsplus_delete_all_attrs+0x10/0x10 [ 57.188904][ T5080] ? do_raw_spin_unlock+0x13c/0x8b0 [ 57.194098][ T5080] ? rcu_is_watching+0x15/0xb0 [ 57.198853][ T5080] ? __mark_inode_dirty+0x82d/0xe20 [ 57.204065][ T5080] hfsplus_delete_cat+0xb37/0xf70 [ 57.209107][ T5080] ? __pfx_hfsplus_delete_cat+0x10/0x10 [ 57.214674][ T5080] ? smk_access+0x4ab/0x4e0 [ 57.219188][ T5080] ? hfsplus_unlink+0x161/0x790 [ 57.224048][ T5080] hfsplus_unlink+0x363/0x790 [ 57.228742][ T5080] ? __pfx_smack_inode_unlink+0x10/0x10 [ 57.234303][ T5080] ? __pfx_hfsplus_unlink+0x10/0x10 [ 57.239502][ T5080] ? __down_write_common+0x162/0x200 [ 57.244790][ T5080] ? bpf_lsm_inode_unlink+0x9/0x10 [ 57.249899][ T5080] ? security_inode_unlink+0xd5/0x120 [ 57.255291][ T5080] vfs_unlink+0x365/0x600 [ 57.259637][ T5080] do_unlinkat+0x4ae/0x830 [ 57.264062][ T5080] ? __pfx_do_unlinkat+0x10/0x10 [ 57.269004][ T5080] ? __might_fault+0xc6/0x120 [ 57.273682][ T5080] ? strncpy_from_user+0x1a4/0x2f0 [ 57.278804][ T5080] __x64_sys_unlinkat+0xce/0xf0 [ 57.283672][ T5080] do_syscall_64+0xf5/0x240 [ 57.288190][ T5080] ? clear_bhb_loop+0x35/0x90 [ 57.292867][ T5080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.298762][ T5080] RIP: 0033:0x7fa99b691a99 [ 57.303175][ T5080] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 57.322787][ T5080] RSP: 002b:00007ffc953021e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 57.331197][ T5080] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa99b691a99 [ 57.339160][ T5080] RDX: 0000000000000000 RSI: 0000000020002780 RDI: 0000000000000004 [ 57.347121][ T5080] RBP: 00007fa99b7055f0 R08: 0000555592b6e4c0 R09: 0000555592b6e4c0 [ 57.355339][ T5080] R10: 000000000000067a R11: 0000000000000246 R12: 00007ffc95302210 [ 57.363300][ T5080] R13: 00007ffc95302438 R14: 431bde82d7b634db R15: 00007fa99b6da03b [ 57.371268][ T5080] [ 57.374274][ T5080] ================================================================== [ 57.382814][ T5080] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 57.390025][ T5080] CPU: 0 PID: 5080 Comm: syz-executor172 Not tainted 6.9.0-syzkaller-09880-gdaa121128a2d #0 [ 57.400081][ T5080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 57.410130][ T5080] Call Trace: [ 57.413494][ T5080] [ 57.416416][ T5080] dump_stack_lvl+0x241/0x360 [ 57.421094][ T5080] ? __pfx_dump_stack_lvl+0x10/0x10 [ 57.426281][ T5080] ? __pfx__printk+0x10/0x10 [ 57.430864][ T5080] ? preempt_schedule+0xe1/0xf0 [ 57.435711][ T5080] ? vscnprintf+0x5d/0x90 [ 57.440034][ T5080] panic+0x349/0x860 [ 57.443920][ T5080] ? check_panic_on_warn+0x21/0xb0 [ 57.449022][ T5080] ? __pfx_panic+0x10/0x10 [ 57.453433][ T5080] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 57.459413][ T5080] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 57.465746][ T5080] ? print_report+0xe8/0x550 [ 57.470324][ T5080] check_panic_on_warn+0x86/0xb0 [ 57.475253][ T5080] ? hfsplus_bnode_dump+0x403/0xbb0 [ 57.480440][ T5080] end_report+0x77/0x160 [ 57.484679][ T5080] kasan_report+0x154/0x180 [ 57.489175][ T5080] ? hfsplus_bnode_dump+0x403/0xbb0 [ 57.494364][ T5080] ? hfsplus_bnode_dump+0x403/0xbb0 [ 57.499637][ T5080] kasan_check_range+0x282/0x290 [ 57.504560][ T5080] ? hfsplus_bnode_dump+0x403/0xbb0 [ 57.509750][ T5080] __asan_memcpy+0x29/0x70 [ 57.514160][ T5080] hfsplus_bnode_dump+0x403/0xbb0 [ 57.519179][ T5080] ? __pfx_hfsplus_bnode_dump+0x10/0x10 [ 57.524802][ T5080] ? hfsplus_bnode_write_u16+0x9b/0xf0 [ 57.530339][ T5080] ? __pfx_hfsplus_bnode_write_u16+0x10/0x10 [ 57.536310][ T5080] ? rcu_is_watching+0x15/0xb0 [ 57.541064][ T5080] ? hfsplus_bnode_move+0x2da/0x910 [ 57.546253][ T5080] ? __mark_inode_dirty+0x41c/0xe20 [ 57.551445][ T5080] hfsplus_brec_remove+0x42c/0x4f0 [ 57.556585][ T5080] __hfsplus_delete_attr+0x275/0x450 [ 57.561951][ T5080] ? __pfx___hfsplus_delete_attr+0x10/0x10 [ 57.567841][ T5080] hfsplus_delete_all_attrs+0x26b/0x3d0 [ 57.573386][ T5080] ? __pfx_hfsplus_delete_all_attrs+0x10/0x10 [ 57.579445][ T5080] ? do_raw_spin_unlock+0x13c/0x8b0 [ 57.584651][ T5080] ? rcu_is_watching+0x15/0xb0 [ 57.589410][ T5080] ? __mark_inode_dirty+0x82d/0xe20 [ 57.594597][ T5080] hfsplus_delete_cat+0xb37/0xf70 [ 57.599611][ T5080] ? __pfx_hfsplus_delete_cat+0x10/0x10 [ 57.605152][ T5080] ? smk_access+0x4ab/0x4e0 [ 57.609644][ T5080] ? hfsplus_unlink+0x161/0x790 [ 57.614583][ T5080] hfsplus_unlink+0x363/0x790 [ 57.619254][ T5080] ? __pfx_smack_inode_unlink+0x10/0x10 [ 57.624793][ T5080] ? __pfx_hfsplus_unlink+0x10/0x10 [ 57.629979][ T5080] ? __down_write_common+0x162/0x200 [ 57.635257][ T5080] ? bpf_lsm_inode_unlink+0x9/0x10 [ 57.640355][ T5080] ? security_inode_unlink+0xd5/0x120 [ 57.645718][ T5080] vfs_unlink+0x365/0x600 [ 57.650045][ T5080] do_unlinkat+0x4ae/0x830 [ 57.654456][ T5080] ? __pfx_do_unlinkat+0x10/0x10 [ 57.659383][ T5080] ? __might_fault+0xc6/0x120 [ 57.664051][ T5080] ? strncpy_from_user+0x1a4/0x2f0 [ 57.669157][ T5080] __x64_sys_unlinkat+0xce/0xf0 [ 57.674003][ T5080] do_syscall_64+0xf5/0x240 [ 57.678594][ T5080] ? clear_bhb_loop+0x35/0x90 [ 57.683284][ T5080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.689216][ T5080] RIP: 0033:0x7fa99b691a99 [ 57.693631][ T5080] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 57.713248][ T5080] RSP: 002b:00007ffc953021e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 57.721686][ T5080] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa99b691a99 [ 57.729663][ T5080] RDX: 0000000000000000 RSI: 0000000020002780 RDI: 0000000000000004 [ 57.737639][ T5080] RBP: 00007fa99b7055f0 R08: 0000555592b6e4c0 R09: 0000555592b6e4c0 [ 57.745608][ T5080] R10: 000000000000067a R11: 0000000000000246 R12: 00007ffc95302210 [ 57.753583][ T5080] R13: 00007ffc95302438 R14: 431bde82d7b634db R15: 00007fa99b6da03b [ 57.761554][ T5080] [ 57.764911][ T5080] Kernel Offset: disabled [ 57.769245][ T5080] Rebooting in 86400 seconds..