./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor685464653
<...>
Warning: Permanently added '10.128.10.22' (ED25519) to the list of known hosts.
execve("./syz-executor685464653", ["./syz-executor685464653"], 0x7ffeb874bf90 /* 10 vars */) = 0
brk(NULL) = 0x55558cb7e000
brk(0x55558cb7ed00) = 0x55558cb7ed00
arch_prctl(ARCH_SET_FS, 0x55558cb7e380) = 0
set_tid_address(0x55558cb7e650) = 5820
set_robust_list(0x55558cb7e660, 24) = 0
rseq(0x55558cb7eca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor685464653", 4096) = 27
getrandom("\x0c\x45\x11\x2d\xe2\xc0\x7b\xe2", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x55558cb7ed00
brk(0x55558cb9fd00) = 0x55558cb9fd00
brk(0x55558cba0000) = 0x55558cba0000
mprotect(0x7fb75cdaa000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
write(1, "executing program\n", 18executing program
) = 18
memfd_create("syzkaller", 0) = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb754800000
write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288
munmap(0x7fb754800000, 138412032) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
ioctl(4, LOOP_SET_FD, 3) = 0
close(3) = 0
close(4) = 0
mkdir("./file0", 0777) = 0
mount("/dev/loop0", "./file0", "hfsplus", MS_RDONLY, "") = 0
openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[ 61.767870][ T5820] loop0: detected capacity change from 0 to 1024
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
mkdir("./file0", 0777) = -1 EEXIST (File exists)
mount(NULL, "./file0", 0x200005c0, MS_REMOUNT, "\x78\x9c\xec\xdd\x4f\x6b\x1c\xe7\x1d\x07\xf0\xef\xac\x64\xd9\x72\xc1\x51\x12\x3b\x49\x4b\x4b\x85\x7d\x68\x89\xa9\xad\xd5\x26\x8e\x0e\x05\xbb\xa5\x14\x1d\x42\x09\xf4\x92\x4b\x0e\xc2\x5e\xc7\xc2\x6b\x25\x48\x9b\xa2\x84\x52\xe4\xfe\xbd\xf6\x1d\x24\x3d\xc8\xe7\x9e\x7a\x28\x3d\x18\xd2\x73\xdf\x82\xa0\x87\x1c\x0a\xbd\xeb\xe6\x32\xb3\xb3\xab\x8d\x25\xcb\x2b\xc7\xd1\xae\x9a\xcf\x07\x9e\x7d\x9e\xd9\x67\xe6"...) = 0
openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 4
chdir("./file0") = 0
[ 61.892169][ T5820] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] PREEMPT SMP KASAN PTI
[ 61.904858][ T5820] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047]
[ 61.913260][ T5820] CPU: 1 UID: 0 PID: 5820 Comm: syz-executor685 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0
[ 61.924348][ T5820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[ 61.934395][ T5820] RIP: 0010:hfsplus_rename_cat+0x4b3/0x1090
[ 61.940293][ T5820] Code: 60 42 80 3c 20 00 48 8b 5c 24 20 74 05 e8 d5 33 86 ff 48 8b 94 24 20 01 00 00 48 83 c3 40 48 89 d8 48 c1 e8 03 48 89 44 24 68 <42> 80 3c 20 00 48 89 54 24 08 74 0d 48 89 df e8 a9 33 86 ff 48 8b
[ 61.959881][ T5820] RSP: 0018:ffffc90003e2f720 EFLAGS: 00010202
[ 61.965933][ T5820] RAX: 0000000000000008 RBX: 0000000000000040 RCX: ffff888030031e00
[ 61.973886][ T5820] RDX: ffff88814cb35000 RSI: 0000000000000000 RDI: ffffc90003e2f840
[ 61.981837][ T5820] RBP: ffffc90003e2fb90 R08: ffffffff827d75e4 R09: 0000000000000000
[ 61.989791][ T5820] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
[ 61.997745][ T5820] R13: ffffc90003e2f80c R14: ffffc90003e2f8a0 R15: 1ffff920007c5ef8
[ 62.005914][ T5820] FS: 000055558cb7e380(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[ 62.014872][ T5820] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 62.021453][ T5820] CR2: 00007ffdacb48000 CR3: 000000007b8b8000 CR4: 00000000003526f0
[ 62.029412][ T5820] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 62.037368][ T5820] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 62.045321][ T5820] Call Trace:
[ 62.048581][ T5820] <TASK>
[ 62.051504][ T5820] ? __die_body+0x5f/0xb0
[ 62.055826][ T5820] ? die_addr+0xb0/0xe0
[ 62.059961][ T5820] ? exc_general_protection+0x3dd/0x5d0
[ 62.065506][ T5820] ? asm_exc_general_protection+0x26/0x30
[ 62.071214][ T5820] ? hfsplus_bnode_read+0xf4/0x1e0
[ 62.076325][ T5820] ? hfsplus_rename_cat+0x4b3/0x1090
[ 62.081592][ T5820] ? mark_lock+0x9a/0x360
[ 62.085914][ T5820] ? __pfx_hfsplus_rename_cat+0x10/0x10
[ 62.091442][ T5820] ? number+0xb5e/0xf90
[ 62.095588][ T5820] ? __pfx_sprintf+0x10/0x10
[ 62.100163][ T5820] hfsplus_link+0x3ab/0x800
[ 62.104652][ T5820] ? __pfx_hfsplus_link+0x10/0x10
[ 62.109657][ T5820] ? __pfx_down_write+0x10/0x10
[ 62.114491][ T5820] ? bpf_lsm_inode_link+0x9/0x10
[ 62.119414][ T5820] ? security_inode_link+0xdb/0x350
[ 62.124606][ T5820] vfs_link+0x4f0/0x6e0
[ 62.128746][ T5820] do_linkat+0x555/0x6f0
[ 62.132968][ T5820] ? __pfx_do_linkat+0x10/0x10
[ 62.137715][ T5820] ? strncpy_from_user+0x152/0x270
[ 62.142902][ T5820] ? getname_flags+0x1e3/0x540
[ 62.147649][ T5820] __x64_sys_link+0x82/0x90
[ 62.152134][ T5820] do_syscall_64+0xf3/0x230
[ 62.156648][ T5820] ? clear_bhb_loop+0x35/0x90
[ 62.161309][ T5820] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 62.167186][ T5820] RIP: 0033:0x7fb75cd37779
[ 62.171593][ T5820] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 62.191179][ T5820] RSP: 002b:00007ffdacb47678 EFLAGS: 00000246 ORIG_RAX: 0000000000000056
[ 62.199576][ T5820] RAX: ffffffffffffffda RBX: 0030656c69662f2e RCX: 00007fb75cd37779
[ 62.207549][ T5820] RDX: 00007fb75cd36af7 RSI: 0000000020000300 RDI: 0000000020000200
[ 62.215506][ T5820] RBP: 00007fb75cdaa610 R08: 0000000000000000 R09: 0000000000000000
[ 62.223463][ T5820] R10: 00007ffdacb47540 R11: 0000000000000246 R12: 0000000000000001
[ 62.231436][ T5820] R13: 00007ffdacb47848 R14: 0000000000000001 R15: 0000000000000001
[ 62.239399][ T5820] </TASK>
[ 62.242401][ T5820] Modules linked in:
[ 62.246407][ T5820] ---[ end trace 0000000000000000 ]---
[ 62.253198][ T5820] RIP: 0010:hfsplus_rename_cat+0x4b3/0x1090
[ 62.259211][ T5820] Code: 60 42 80 3c 20 00 48 8b 5c 24 20 74 05 e8 d5 33 86 ff 48 8b 94 24 20 01 00 00 48 83 c3 40 48 89 d8 48 c1 e8 03 48 89 44 24 68 <42> 80 3c 20 00 48 89 54 24 08 74 0d 48 89 df e8 a9 33 86 ff 48 8b
[ 62.278872][ T5820] RSP: 0018:ffffc90003e2f720 EFLAGS: 00010202
[ 62.284981][ T5820] RAX: 0000000000000008 RBX: 0000000000000040 RCX: ffff888030031e00
[ 62.292956][ T5820] RDX: ffff88814cb35000 RSI: 0000000000000000 RDI: ffffc90003e2f840
[ 62.300948][ T5820] RBP: ffffc90003e2fb90 R08: ffffffff827d75e4 R09: 0000000000000000
[ 62.308945][ T5820] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
[ 62.316937][ T5820] R13: ffffc90003e2f80c R14: ffffc90003e2f8a0 R15: 1ffff920007c5ef8
[ 62.324931][ T5820] FS: 000055558cb7e380(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[ 62.333870][ T5820] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 62.340452][ T5820] CR2: 00007ffdacb48000 CR3: 000000007b8b8000 CR4: 00000000003526f0
[ 62.348445][ T5820] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 62.356468][ T5820] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 62.364503][ T5820] Kernel panic - not syncing: Fatal exception
[ 62.370858][ T5820] Kernel Offset: disabled
[ 62.375169][ T5820] Rebooting in 86400 seconds..