./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1065886460 <...> Warning: Permanently added '10.128.0.236' (ECDSA) to the list of known hosts. execve("./syz-executor1065886460", ["./syz-executor1065886460"], 0x7ffcd345e860 /* 10 vars */) = 0 brk(NULL) = 0x5555561a0000 brk(0x5555561a0c40) = 0x5555561a0c40 arch_prctl(ARCH_SET_FS, 0x5555561a0300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1065886460", 4096) = 28 brk(0x5555561c1c40) = 0x5555561c1c40 brk(0x5555561c2000) = 0x5555561c2000 mprotect(0x7f51969e2000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f518e529000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 munmap(0x7f518e529000, 524288) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./bus", 0777) = 0 mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_NOATIME|MS_POSIXACL, "") = 0 openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 chdir("./bus") = 0 ioctl(4, LOOP_CLR_FD) = 0 close(4) = 0 [ 70.216295][ T4993] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=4993 'syz-executor106' [ 70.237317][ T4993] loop0: detected capacity change from 0 to 1024 [ 70.268934][ T4993] hfsplus: request for non-existent node 32768 in B*Tree [ 70.276289][ T4993] hfsplus: request for non-existent node 32768 in B*Tree [ 70.284603][ T4993] ================================================================== [ 70.292690][ T4993] BUG: KASAN: wild-memory-access in hfsplus_bnode_dump+0x403/0xba0 [ 70.300598][ T4993] Read of size 2 at addr 000508800000103e by task syz-executor106/4993 [ 70.308841][ T4993] [ 70.311188][ T4993] CPU: 0 PID: 4993 Comm: syz-executor106 Not tainted 6.4.0-rc3-syzkaller-00032-g933174ae28ba #0 [ 70.321624][ T4993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/16/2023 [ 70.331779][ T4993] Call Trace: [ 70.335056][ T4993] [ 70.337980][ T4993] dump_stack_lvl+0x1e7/0x2d0 [ 70.342682][ T4993] ? nf_tcp_handle_invalid+0x650/0x650 [ 70.348154][ T4993] ? panic+0x770/0x770 [ 70.352225][ T4993] ? _printk+0xd5/0x120 [ 70.356386][ T4993] print_report+0xe6/0x540 [ 70.360805][ T4993] ? __virt_addr_valid+0x58/0x2e0 [ 70.365844][ T4993] ? hfsplus_bnode_dump+0x403/0xba0 [ 70.371068][ T4993] kasan_report+0x176/0x1b0 [ 70.375600][ T4993] ? hfsplus_bnode_dump+0x403/0xba0 [ 70.380805][ T4993] ? hfsplus_bnode_dump+0x403/0xba0 [ 70.386005][ T4993] kasan_check_range+0x283/0x290 [ 70.390945][ T4993] ? hfsplus_bnode_dump+0x403/0xba0 [ 70.396141][ T4993] __asan_memcpy+0x29/0x70 [ 70.400559][ T4993] hfsplus_bnode_dump+0x403/0xba0 [ 70.405585][ T4993] ? hfsplus_bnode_move+0x910/0x910 [ 70.410783][ T4993] ? hfsplus_bnode_write_u16+0x9b/0xf0 [ 70.416239][ T4993] ? hfsplus_bnode_write+0x220/0x220 [ 70.421543][ T4993] ? rcu_is_watching+0x15/0xb0 [ 70.426298][ T4993] ? hfsplus_bnode_move+0x2da/0x910 [ 70.431490][ T4993] ? __mark_inode_dirty+0x3e7/0xd90 [ 70.436689][ T4993] hfsplus_brec_remove+0x42c/0x4f0 [ 70.441798][ T4993] __hfsplus_delete_attr+0x275/0x450 [ 70.447105][ T4993] ? hfsplus_delete_attr+0x4a0/0x4a0 [ 70.452388][ T4993] ? __kmalloc+0xe6/0x230 [ 70.456715][ T4993] ? mutex_lock_nested+0x1b/0x20 [ 70.461652][ T4993] hfsplus_delete_all_attrs+0x26b/0x3c0 [ 70.467197][ T4993] ? __hfsplus_delete_attr+0x450/0x450 [ 70.472653][ T4993] ? do_raw_spin_unlock+0x13b/0x8b0 [ 70.477852][ T4993] ? rcu_is_watching+0x15/0xb0 [ 70.482611][ T4993] ? __mark_inode_dirty+0x7fb/0xd90 [ 70.487826][ T4993] hfsplus_delete_cat+0xb87/0xfc0 [ 70.492847][ T4993] ? hfsplus_mark_inode_dirty+0x30/0x30 [ 70.498655][ T4993] ? smk_access+0x477/0x4b0 [ 70.503160][ T4993] ? mutex_lock_io_nested+0x60/0x60 [ 70.508374][ T4993] hfsplus_unlink+0x363/0x7f0 [ 70.513045][ T4993] ? smack_inode_link+0x310/0x310 [ 70.518067][ T4993] ? hfsplus_link+0x840/0x840 [ 70.522756][ T4993] ? __down_write_common+0x161/0x200 [ 70.528053][ T4993] ? bpf_lsm_inode_unlink+0x9/0x10 [ 70.533169][ T4993] ? security_inode_unlink+0xce/0x110 [ 70.538551][ T4993] vfs_unlink+0x35d/0x5f0 [ 70.542891][ T4993] do_unlinkat+0x4a7/0x950 [ 70.547308][ T4993] ? fsnotify_link_count+0xf0/0xf0 [ 70.552420][ T4993] ? strncpy_from_user+0x1a5/0x2e0 [ 70.557625][ T4993] __x64_sys_unlink+0x49/0x50 [ 70.562305][ T4993] do_syscall_64+0x41/0xc0 [ 70.566725][ T4993] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 70.572619][ T4993] RIP: 0033:0x7f5196975789 [ 70.577030][ T4993] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 70.596720][ T4993] RSP: 002b:00007ffc9b401ce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 70.605180][ T4993] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5196975789 [ 70.613148][ T4993] RDX: 00007f5196933e03 RSI: 0000000000000000 RDI: 0000000020000140 [ 70.621119][ T4993] RBP: 00007f5196935020 R08: 0000000000000640 R09: 0000000000000000 [ 70.629083][ T4993] R10: 00007ffc9b401bb0 R11: 0000000000000246 R12: 00007f51969350b0 [ 70.637049][ T4993] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 70.645020][ T4993] [ 70.648033][ T4993] ================================================================== [ 70.657020][ T4993] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 70.664233][ T4993] CPU: 0 PID: 4993 Comm: syz-executor106 Not tainted 6.4.0-rc3-syzkaller-00032-g933174ae28ba #0 [ 70.674651][ T4993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/16/2023 [ 70.684706][ T4993] Call Trace: [ 70.687989][ T4993] [ 70.690928][ T4993] dump_stack_lvl+0x1e7/0x2d0 [ 70.695622][ T4993] ? nf_tcp_handle_invalid+0x650/0x650 [ 70.701094][ T4993] ? panic+0x770/0x770 [ 70.705171][ T4993] ? vscnprintf+0x5d/0x80 [ 70.709506][ T4993] panic+0x30f/0x770 [ 70.713416][ T4993] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 70.719576][ T4993] ? check_panic_on_warn+0x21/0xa0 [ 70.724717][ T4993] ? __memcpy_flushcache+0x2b0/0x2b0 [ 70.730008][ T4993] ? _raw_spin_unlock_irqrestore+0x12c/0x140 [ 70.735988][ T4993] ? _raw_spin_unlock+0x40/0x40 [ 70.740839][ T4993] ? print_report+0xe6/0x540 [ 70.745435][ T4993] check_panic_on_warn+0x82/0xa0 [ 70.750379][ T4993] ? hfsplus_bnode_dump+0x403/0xba0 [ 70.755579][ T4993] end_report+0x63/0x110 [ 70.759829][ T4993] kasan_report+0x183/0x1b0 [ 70.764340][ T4993] ? hfsplus_bnode_dump+0x403/0xba0 [ 70.769540][ T4993] ? hfsplus_bnode_dump+0x403/0xba0 [ 70.774743][ T4993] kasan_check_range+0x283/0x290 [ 70.779695][ T4993] ? hfsplus_bnode_dump+0x403/0xba0 [ 70.784899][ T4993] __asan_memcpy+0x29/0x70 [ 70.789415][ T4993] hfsplus_bnode_dump+0x403/0xba0 [ 70.794447][ T4993] ? hfsplus_bnode_move+0x910/0x910 [ 70.799653][ T4993] ? hfsplus_bnode_write_u16+0x9b/0xf0 [ 70.805118][ T4993] ? hfsplus_bnode_write+0x220/0x220 [ 70.810413][ T4993] ? rcu_is_watching+0x15/0xb0 [ 70.815176][ T4993] ? hfsplus_bnode_move+0x2da/0x910 [ 70.820376][ T4993] ? __mark_inode_dirty+0x3e7/0xd90 [ 70.825584][ T4993] hfsplus_brec_remove+0x42c/0x4f0 [ 70.830703][ T4993] __hfsplus_delete_attr+0x275/0x450 [ 70.835994][ T4993] ? hfsplus_delete_attr+0x4a0/0x4a0 [ 70.841286][ T4993] ? __kmalloc+0xe6/0x230 [ 70.845621][ T4993] ? mutex_lock_nested+0x1b/0x20 [ 70.850569][ T4993] hfsplus_delete_all_attrs+0x26b/0x3c0 [ 70.856121][ T4993] ? __hfsplus_delete_attr+0x450/0x450 [ 70.861587][ T4993] ? do_raw_spin_unlock+0x13b/0x8b0 [ 70.866799][ T4993] ? rcu_is_watching+0x15/0xb0 [ 70.871566][ T4993] ? __mark_inode_dirty+0x7fb/0xd90 [ 70.876774][ T4993] hfsplus_delete_cat+0xb87/0xfc0 [ 70.881817][ T4993] ? hfsplus_mark_inode_dirty+0x30/0x30 [ 70.887362][ T4993] ? smk_access+0x477/0x4b0 [ 70.891883][ T4993] ? mutex_lock_io_nested+0x60/0x60 [ 70.897097][ T4993] hfsplus_unlink+0x363/0x7f0 [ 70.901776][ T4993] ? smack_inode_link+0x310/0x310 [ 70.906803][ T4993] ? hfsplus_link+0x840/0x840 [ 70.911478][ T4993] ? __down_write_common+0x161/0x200 [ 70.916769][ T4993] ? bpf_lsm_inode_unlink+0x9/0x10 [ 70.921882][ T4993] ? security_inode_unlink+0xce/0x110 [ 70.927351][ T4993] vfs_unlink+0x35d/0x5f0 [ 70.931689][ T4993] do_unlinkat+0x4a7/0x950 [ 70.936112][ T4993] ? fsnotify_link_count+0xf0/0xf0 [ 70.941253][ T4993] ? strncpy_from_user+0x1a5/0x2e0 [ 70.946372][ T4993] __x64_sys_unlink+0x49/0x50 [ 70.951054][ T4993] do_syscall_64+0x41/0xc0 [ 70.955485][ T4993] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 70.961378][ T4993] RIP: 0033:0x7f5196975789 [ 70.965792][ T4993] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 70.985396][ T4993] RSP: 002b:00007ffc9b401ce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 70.993827][ T4993] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5196975789 [ 71.001796][ T4993] RDX: 00007f5196933e03 RSI: 0000000000000000 RDI: 0000000020000140 [ 71.009764][ T4993] RBP: 00007f5196935020 R08: 0000000000000640 R09: 0000000000000000 [ 71.017731][ T4993] R10: 00007ffc9b401bb0 R11: 0000000000000246 R12: 00007f51969350b0 [ 71.025729][ T4993] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 71.033709][ T4993] [ 71.037040][ T4993] Kernel Offset: disabled [ 71.041369][ T4993] Rebooting in 86400 seconds..