./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3535476592
<...>
Warning: Permanently added '10.128.1.113' (ED25519) to the list of known hosts.
execve("./syz-executor3535476592", ["./syz-executor3535476592"], 0x7ffdc79c2370 /* 10 vars */) = 0
brk(NULL) = 0x55555622e000
brk(0x55555622ed00) = 0x55555622ed00
arch_prctl(ARCH_SET_FS, 0x55555622e380) = 0
set_tid_address(0x55555622e650) = 5048
set_robust_list(0x55555622e660, 24) = 0
rseq(0x55555622eca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor3535476592", 4096) = 28
getrandom("\xe3\x01\x3a\xde\xa3\xe0\x3b\x5b", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x55555622ed00
brk(0x55555624fd00) = 0x55555624fd00
brk(0x555556250000) = 0x555556250000
mprotect(0x7fd793727000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
memfd_create("syzkaller", 0) = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd78b200000
write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288
munmap(0x7fd78b200000, 138412032) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
ioctl(4, LOOP_SET_FD, 3) = 0
close(3) = 0
close(4) = 0
mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0
syzkaller login: [ 61.480060][ T5048] loop0: detected capacity change from 0 to 1024
[ 61.529849][ T5048] ==================================================================
[ 61.537961][ T5048] BUG: KASAN: out-of-bounds in hfsplus_bnode_move+0x5f3/0x910
[ 61.545455][ T5048] Read of size 18446744073709551602 at addr 000508800000104e by task syz-executor353/5048
[ 61.555439][ T5048]
[ 61.557748][ T5048] CPU: 0 PID: 5048 Comm: syz-executor353 Not tainted 6.7.0-syzkaller-12829-g125514880ddd #0
[ 61.567791][ T5048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023
[ 61.577831][ T5048] Call Trace:
[ 61.581094][ T5048]
[ 61.584009][ T5048] dump_stack_lvl+0x1e7/0x2d0
[ 61.588690][ T5048] ? tcp_gro_dev_warn+0x260/0x260
[ 61.593697][ T5048] ? panic+0x850/0x850
[ 61.597746][ T5048] ? _printk+0xd5/0x120
[ 61.601883][ T5048] print_report+0xe6/0x540
[ 61.606283][ T5048] ? __virt_addr_valid+0x58/0x480
[ 61.611292][ T5048] ? hfsplus_bnode_move+0x5f3/0x910
[ 61.616472][ T5048] kasan_report+0x142/0x170
[ 61.620968][ T5048] ? hfsplus_bnode_move+0x5f3/0x910
[ 61.626151][ T5048] ? hfsplus_bnode_move+0x5f3/0x910
[ 61.631358][ T5048] kasan_check_range+0x27e/0x290
[ 61.636281][ T5048] ? hfsplus_bnode_move+0x5f3/0x910
[ 61.641462][ T5048] __asan_memmove+0x29/0x70
[ 61.645951][ T5048] hfsplus_bnode_move+0x5f3/0x910
[ 61.650962][ T5048] hfsplus_brec_insert+0x61c/0xdd0
[ 61.656066][ T5048] ? hfsplus_brec_keylen+0x310/0x310
[ 61.661335][ T5048] ? hfsplus_create_attr+0x45e/0x630
[ 61.666602][ T5048] hfsplus_create_attr+0x49e/0x630
[ 61.671697][ T5048] ? hfsplus_attr_exists+0x1d0/0x1d0
[ 61.676971][ T5048] ? hfsplus_find_init+0x14a/0x1c0
[ 61.682066][ T5048] __hfsplus_setxattr+0x6fe/0x22d0
[ 61.687167][ T5048] ? print_irqtrace_events+0x220/0x220
[ 61.692611][ T5048] ? _raw_write_unlock_irqrestore+0x8f/0x140
[ 61.698625][ T5048] ? hfsplus_delete_all_attrs+0x3c0/0x3c0
[ 61.704327][ T5048] ? _raw_write_unlock_irqrestore+0xdd/0x140
[ 61.710290][ T5048] ? _raw_write_unlock+0x40/0x40
[ 61.715210][ T5048] ? stack_depot_save_flags+0x5da/0x650
[ 61.720753][ T5048] ? __kasan_kmalloc+0x98/0xb0
[ 61.725504][ T5048] ? hfsplus_initxattrs+0x5d/0x220
[ 61.730620][ T5048] ? kmalloc_trace+0x1d6/0x360
[ 61.735372][ T5048] hfsplus_initxattrs+0x158/0x220
[ 61.740380][ T5048] security_inode_init_security+0x2a7/0x470
[ 61.746256][ T5048] ? do_raw_spin_unlock+0x13b/0x8b0
[ 61.751438][ T5048] ? hfsplus_init_security+0x40/0x40
[ 61.756708][ T5048] ? security_dentry_create_files_as+0xc0/0xc0
[ 61.762846][ T5048] ? hfsplus_new_inode+0x53e/0x6b0
[ 61.767942][ T5048] hfsplus_fill_super+0x14d3/0x1c90
[ 61.773126][ T5048] ? hfsplus_mount+0x40/0x40
[ 61.777711][ T5048] ? snprintf+0xda/0x120
[ 61.781935][ T5048] ? __lock_acquire+0x1fd0/0x1fd0
[ 61.786938][ T5048] ? do_raw_spin_lock+0x14e/0x370
[ 61.791949][ T5048] ? sb_set_blocksize+0x99/0x100
[ 61.796869][ T5048] ? setup_bdev_super+0x4c8/0x5c0
[ 61.801879][ T5048] mount_bdev+0x206/0x2d0
[ 61.806193][ T5048] ? lockdep_hardirqs_on+0x98/0x140
[ 61.811369][ T5048] ? hfsplus_mount+0x40/0x40
[ 61.815940][ T5048] ? get_tree_bdev+0x560/0x560
[ 61.820712][ T5048] ? smack_sb_eat_lsm_opts+0x4b6/0x6a0
[ 61.826153][ T5048] ? kfree+0x14a/0x380
[ 61.830200][ T5048] ? cap_capable+0x1b4/0x240
[ 61.834772][ T5048] legacy_get_tree+0xef/0x190
[ 61.839438][ T5048] ? hfsplus_mark_mdb_dirty+0x1c0/0x1c0
[ 61.844970][ T5048] vfs_get_tree+0x8c/0x2a0
[ 61.849374][ T5048] do_new_mount+0x2be/0xb40
[ 61.853898][ T5048] ? ns_capable+0x89/0xe0
[ 61.858213][ T5048] ? do_move_mount_old+0x170/0x170
[ 61.863307][ T5048] __se_sys_mount+0x2d9/0x3c0
[ 61.867971][ T5048] ? __x64_sys_mount+0xc0/0xc0
[ 61.872723][ T5048] ? do_syscall_64+0x102/0x230
[ 61.877477][ T5048] ? __x64_sys_mount+0x20/0xc0
[ 61.882225][ T5048] do_syscall_64+0xf5/0x230
[ 61.886713][ T5048] entry_SYSCALL_64_after_hwframe+0x63/0x6b
[ 61.892592][ T5048] RIP: 0033:0x7fd7936b4d3a
[ 61.896988][ T5048] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 61.916595][ T5048] RSP: 002b:00007fff572a70a8 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5
[ 61.925001][ T5048] RAX: ffffffffffffffda RBX: 00007fff572a70c0 RCX: 00007fd7936b4d3a
[ 61.932967][ T5048] RDX: 0000000020000040 RSI: 0000000020000240 RDI: 00007fff572a70c0
[ 61.940925][ T5048] RBP: 0000000000000004 R08: 00007fff572a7100 R09: 00000000000006c8
[ 61.948896][ T5048] R10: 0000000000800000 R11: 0000000000000286 R12: 0000000000800000
[ 61.956862][ T5048] R13: 00007fff572a7100 R14: 0000000000000003 R15: 0000000000080000
[ 61.964826][ T5048]
[ 61.967857][ T5048] ==================================================================
[ 61.976474][ T5048] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 61.983692][ T5048] CPU: 1 PID: 5048 Comm: syz-executor353 Not tainted 6.7.0-syzkaller-12829-g125514880ddd #0
[ 61.993766][ T5048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023
[ 62.003811][ T5048] Call Trace:
[ 62.007091][ T5048]
[ 62.010020][ T5048] dump_stack_lvl+0x1e7/0x2d0
[ 62.014696][ T5048] ? tcp_gro_dev_warn+0x260/0x260
[ 62.019721][ T5048] ? panic+0x850/0x850
[ 62.023781][ T5048] ? vscnprintf+0x5d/0x80
[ 62.028100][ T5048] panic+0x349/0x850
[ 62.031985][ T5048] ? check_panic_on_warn+0x21/0xa0
[ 62.037101][ T5048] ? __memcpy_flushcache+0x2b0/0x2b0
[ 62.042500][ T5048] ? _raw_spin_unlock_irqrestore+0x12c/0x140
[ 62.048498][ T5048] ? _raw_spin_unlock+0x40/0x40
[ 62.053351][ T5048] ? print_report+0xe6/0x540
[ 62.057944][ T5048] check_panic_on_warn+0x82/0xa0
[ 62.062917][ T5048] ? hfsplus_bnode_move+0x5f3/0x910
[ 62.068115][ T5048] end_report+0x6e/0x140
[ 62.072438][ T5048] kasan_report+0x153/0x170
[ 62.076938][ T5048] ? hfsplus_bnode_move+0x5f3/0x910
[ 62.082215][ T5048] ? hfsplus_bnode_move+0x5f3/0x910
[ 62.087404][ T5048] kasan_check_range+0x27e/0x290
[ 62.092368][ T5048] ? hfsplus_bnode_move+0x5f3/0x910
[ 62.097649][ T5048] __asan_memmove+0x29/0x70
[ 62.102314][ T5048] hfsplus_bnode_move+0x5f3/0x910
[ 62.107338][ T5048] hfsplus_brec_insert+0x61c/0xdd0
[ 62.112448][ T5048] ? hfsplus_brec_keylen+0x310/0x310
[ 62.117736][ T5048] ? hfsplus_create_attr+0x45e/0x630
[ 62.123276][ T5048] hfsplus_create_attr+0x49e/0x630
[ 62.128379][ T5048] ? hfsplus_attr_exists+0x1d0/0x1d0
[ 62.133666][ T5048] ? hfsplus_find_init+0x14a/0x1c0
[ 62.139041][ T5048] __hfsplus_setxattr+0x6fe/0x22d0
[ 62.144148][ T5048] ? print_irqtrace_events+0x220/0x220
[ 62.149599][ T5048] ? _raw_write_unlock_irqrestore+0x8f/0x140
[ 62.155656][ T5048] ? hfsplus_delete_all_attrs+0x3c0/0x3c0
[ 62.161384][ T5048] ? _raw_write_unlock_irqrestore+0xdd/0x140
[ 62.167353][ T5048] ? _raw_write_unlock+0x40/0x40
[ 62.172286][ T5048] ? stack_depot_save_flags+0x5da/0x650
[ 62.177948][ T5048] ? __kasan_kmalloc+0x98/0xb0
[ 62.182896][ T5048] ? hfsplus_initxattrs+0x5d/0x220
[ 62.187998][ T5048] ? kmalloc_trace+0x1d6/0x360
[ 62.193129][ T5048] hfsplus_initxattrs+0x158/0x220
[ 62.198248][ T5048] security_inode_init_security+0x2a7/0x470
[ 62.204134][ T5048] ? do_raw_spin_unlock+0x13b/0x8b0
[ 62.209333][ T5048] ? hfsplus_init_security+0x40/0x40
[ 62.214610][ T5048] ? security_dentry_create_files_as+0xc0/0xc0
[ 62.220756][ T5048] ? hfsplus_new_inode+0x53e/0x6b0
[ 62.225876][ T5048] hfsplus_fill_super+0x14d3/0x1c90
[ 62.231070][ T5048] ? hfsplus_mount+0x40/0x40
[ 62.235665][ T5048] ? snprintf+0xda/0x120
[ 62.239899][ T5048] ? __lock_acquire+0x1fd0/0x1fd0
[ 62.245008][ T5048] ? do_raw_spin_lock+0x14e/0x370
[ 62.250118][ T5048] ? sb_set_blocksize+0x99/0x100
[ 62.255048][ T5048] ? setup_bdev_super+0x4c8/0x5c0
[ 62.260066][ T5048] mount_bdev+0x206/0x2d0
[ 62.264389][ T5048] ? lockdep_hardirqs_on+0x98/0x140
[ 62.269583][ T5048] ? hfsplus_mount+0x40/0x40
[ 62.274361][ T5048] ? get_tree_bdev+0x560/0x560
[ 62.279120][ T5048] ? smack_sb_eat_lsm_opts+0x4b6/0x6a0
[ 62.284567][ T5048] ? kfree+0x14a/0x380
[ 62.288630][ T5048] ? cap_capable+0x1b4/0x240
[ 62.293216][ T5048] legacy_get_tree+0xef/0x190
[ 62.297884][ T5048] ? hfsplus_mark_mdb_dirty+0x1c0/0x1c0
[ 62.303420][ T5048] vfs_get_tree+0x8c/0x2a0
[ 62.307827][ T5048] do_new_mount+0x2be/0xb40
[ 62.312355][ T5048] ? ns_capable+0x89/0xe0
[ 62.316854][ T5048] ? do_move_mount_old+0x170/0x170
[ 62.321962][ T5048] __se_sys_mount+0x2d9/0x3c0
[ 62.326636][ T5048] ? __x64_sys_mount+0xc0/0xc0
[ 62.331395][ T5048] ? do_syscall_64+0x102/0x230
[ 62.336150][ T5048] ? __x64_sys_mount+0x20/0xc0
[ 62.340905][ T5048] do_syscall_64+0xf5/0x230
[ 62.345487][ T5048] entry_SYSCALL_64_after_hwframe+0x63/0x6b
[ 62.351376][ T5048] RIP: 0033:0x7fd7936b4d3a
[ 62.355778][ T5048] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 62.375377][ T5048] RSP: 002b:00007fff572a70a8 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5
[ 62.383776][ T5048] RAX: ffffffffffffffda RBX: 00007fff572a70c0 RCX: 00007fd7936b4d3a
[ 62.391734][ T5048] RDX: 0000000020000040 RSI: 0000000020000240 RDI: 00007fff572a70c0
[ 62.399693][ T5048] RBP: 0000000000000004 R08: 00007fff572a7100 R09: 00000000000006c8
[ 62.407647][ T5048] R10: 0000000000800000 R11: 0000000000000286 R12: 0000000000800000
[ 62.415605][ T5048] R13: 00007fff572a7100 R14: 0000000000000003 R15: 0000000000080000
[ 62.423573][ T5048]
[ 62.426659][ T5048] Kernel Offset: disabled
[ 62.430966][ T5048] Rebooting in 86400 seconds..