./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1729260384
<...>
Warning: Permanently added '10.128.0.150' (ED25519) to the list of known hosts.
execve("./syz-executor1729260384", ["./syz-executor1729260384"], 0x7ffe4ff219c0 /* 10 vars */) = 0
brk(NULL) = 0x555592b6d000
brk(0x555592b6dd00) = 0x555592b6dd00
arch_prctl(ARCH_SET_FS, 0x555592b6d380) = 0
set_tid_address(0x555592b6d650) = 5078
set_robust_list(0x555592b6d660, 24) = 0
rseq(0x555592b6dca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor1729260384", 4096) = 28
getrandom("\x4c\xae\x0a\x8e\xdc\x88\x19\x9e", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x555592b6dd00
brk(0x555592b8ed00) = 0x555592b8ed00
brk(0x555592b8f000) = 0x555592b8f000
mprotect(0x7fa99b705000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5080 attached
<unfinished ...>
[pid 5080] set_robust_list(0x555592b6d660, 24) = 0
[pid 5080] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid 5078] <... clone resumed>, child_tidptr=0x555592b6d650) = 5080
[pid 5080] <... prctl resumed>) = 0
[pid 5080] setpgid(0, 0) = 0
[pid 5080] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5080] write(3, "1000", 4) = 4
[pid 5080] close(3) = 0
[pid 5080] write(1, "executing program\n", 18executing program
) = 18
[pid 5080] memfd_create("syzkaller", 0) = 3
[pid 5080] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa993200000
[pid 5080] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288
[pid 5080] munmap(0x7fa993200000, 138412032) = 0
[pid 5080] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5080] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5080] close(3) = 0
[pid 5080] close(4) = 0
[pid 5080] mkdir("./file1", 0777) = 0
[pid 5080] mount("/dev/loop0", "./file1", "hfsplus", MS_NOATIME|MS_SILENT|MS_STRICTATIME, "") = 0
[pid 5080] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3
[ 56.915358][ T5080] loop0: detected capacity change from 0 to 1024
[pid 5080] chdir("./file1") = 0
[pid 5080] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid 5080] openat(AT_FDCWD, ".", O_RDONLY) = 4
[ 56.993072][ T5080] hfsplus: request for non-existent node 128 in B*Tree
[ 57.000259][ T5080] hfsplus: request for non-existent node 128 in B*Tree
[ 57.007641][ T5080] ==================================================================
[ 57.015792][ T5080] BUG: KASAN: wild-memory-access in hfsplus_bnode_dump+0x403/0xbb0
[ 57.023710][ T5080] Read of size 2 at addr 000508800000103e by task syz-executor172/5080
[ 57.031973][ T5080]
[ 57.034292][ T5080] CPU: 0 PID: 5080 Comm: syz-executor172 Not tainted 6.9.0-syzkaller-09880-gdaa121128a2d #0
[ 57.044353][ T5080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[ 57.054414][ T5080] Call Trace:
[ 57.057690][ T5080] <TASK>
[ 57.060626][ T5080] dump_stack_lvl+0x241/0x360
[ 57.065339][ T5080] ? __pfx_dump_stack_lvl+0x10/0x10
[ 57.070542][ T5080] ? __pfx__printk+0x10/0x10
[ 57.075145][ T5080] ? _printk+0xd5/0x120
[ 57.079307][ T5080] print_report+0xe8/0x550
[ 57.083724][ T5080] ? __virt_addr_valid+0x58/0x520
[ 57.088761][ T5080] ? hfsplus_bnode_dump+0x403/0xbb0
[ 57.093977][ T5080] kasan_report+0x143/0x180
[ 57.098485][ T5080] ? hfsplus_bnode_dump+0x403/0xbb0
[ 57.103692][ T5080] ? hfsplus_bnode_dump+0x403/0xbb0
[ 57.109079][ T5080] kasan_check_range+0x282/0x290
[ 57.114126][ T5080] ? hfsplus_bnode_dump+0x403/0xbb0
[ 57.119328][ T5080] __asan_memcpy+0x29/0x70
[ 57.123764][ T5080] hfsplus_bnode_dump+0x403/0xbb0
[ 57.128800][ T5080] ? __pfx_hfsplus_bnode_dump+0x10/0x10
[ 57.134453][ T5080] ? hfsplus_bnode_write_u16+0x9b/0xf0
[ 57.139912][ T5080] ? __pfx_hfsplus_bnode_write_u16+0x10/0x10
[ 57.145896][ T5080] ? rcu_is_watching+0x15/0xb0
[ 57.150677][ T5080] ? hfsplus_bnode_move+0x2da/0x910
[ 57.155895][ T5080] ? __mark_inode_dirty+0x41c/0xe20
[ 57.161088][ T5080] hfsplus_brec_remove+0x42c/0x4f0
[ 57.166215][ T5080] __hfsplus_delete_attr+0x275/0x450
[ 57.171496][ T5080] ? __pfx___hfsplus_delete_attr+0x10/0x10
[ 57.177297][ T5080] hfsplus_delete_all_attrs+0x26b/0x3d0
[ 57.182845][ T5080] ? __pfx_hfsplus_delete_all_attrs+0x10/0x10
[ 57.188904][ T5080] ? do_raw_spin_unlock+0x13c/0x8b0
[ 57.194098][ T5080] ? rcu_is_watching+0x15/0xb0
[ 57.198853][ T5080] ? __mark_inode_dirty+0x82d/0xe20
[ 57.204065][ T5080] hfsplus_delete_cat+0xb37/0xf70
[ 57.209107][ T5080] ? __pfx_hfsplus_delete_cat+0x10/0x10
[ 57.214674][ T5080] ? smk_access+0x4ab/0x4e0
[ 57.219188][ T5080] ? hfsplus_unlink+0x161/0x790
[ 57.224048][ T5080] hfsplus_unlink+0x363/0x790
[ 57.228742][ T5080] ? __pfx_smack_inode_unlink+0x10/0x10
[ 57.234303][ T5080] ? __pfx_hfsplus_unlink+0x10/0x10
[ 57.239502][ T5080] ? __down_write_common+0x162/0x200
[ 57.244790][ T5080] ? bpf_lsm_inode_unlink+0x9/0x10
[ 57.249899][ T5080] ? security_inode_unlink+0xd5/0x120
[ 57.255291][ T5080] vfs_unlink+0x365/0x600
[ 57.259637][ T5080] do_unlinkat+0x4ae/0x830
[ 57.264062][ T5080] ? __pfx_do_unlinkat+0x10/0x10
[ 57.269004][ T5080] ? __might_fault+0xc6/0x120
[ 57.273682][ T5080] ? strncpy_from_user+0x1a4/0x2f0
[ 57.278804][ T5080] __x64_sys_unlinkat+0xce/0xf0
[ 57.283672][ T5080] do_syscall_64+0xf5/0x240
[ 57.288190][ T5080] ? clear_bhb_loop+0x35/0x90
[ 57.292867][ T5080] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 57.298762][ T5080] RIP: 0033:0x7fa99b691a99
[ 57.303175][ T5080] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 57.322787][ T5080] RSP: 002b:00007ffc953021e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000107
[ 57.331197][ T5080] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa99b691a99
[ 57.339160][ T5080] RDX: 0000000000000000 RSI: 0000000020002780 RDI: 0000000000000004
[ 57.347121][ T5080] RBP: 00007fa99b7055f0 R08: 0000555592b6e4c0 R09: 0000555592b6e4c0
[ 57.355339][ T5080] R10: 000000000000067a R11: 0000000000000246 R12: 00007ffc95302210
[ 57.363300][ T5080] R13: 00007ffc95302438 R14: 431bde82d7b634db R15: 00007fa99b6da03b
[ 57.371268][ T5080] </TASK>
[ 57.374274][ T5080] ==================================================================
[ 57.382814][ T5080] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 57.390025][ T5080] CPU: 0 PID: 5080 Comm: syz-executor172 Not tainted 6.9.0-syzkaller-09880-gdaa121128a2d #0
[ 57.400081][ T5080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[ 57.410130][ T5080] Call Trace:
[ 57.413494][ T5080] <TASK>
[ 57.416416][ T5080] dump_stack_lvl+0x241/0x360
[ 57.421094][ T5080] ? __pfx_dump_stack_lvl+0x10/0x10
[ 57.426281][ T5080] ? __pfx__printk+0x10/0x10
[ 57.430864][ T5080] ? preempt_schedule+0xe1/0xf0
[ 57.435711][ T5080] ? vscnprintf+0x5d/0x90
[ 57.440034][ T5080] panic+0x349/0x860
[ 57.443920][ T5080] ? check_panic_on_warn+0x21/0xb0
[ 57.449022][ T5080] ? __pfx_panic+0x10/0x10
[ 57.453433][ T5080] ? _raw_spin_unlock_irqrestore+0x130/0x140
[ 57.459413][ T5080] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 57.465746][ T5080] ? print_report+0xe8/0x550
[ 57.470324][ T5080] check_panic_on_warn+0x86/0xb0
[ 57.475253][ T5080] ? hfsplus_bnode_dump+0x403/0xbb0
[ 57.480440][ T5080] end_report+0x77/0x160
[ 57.484679][ T5080] kasan_report+0x154/0x180
[ 57.489175][ T5080] ? hfsplus_bnode_dump+0x403/0xbb0
[ 57.494364][ T5080] ? hfsplus_bnode_dump+0x403/0xbb0
[ 57.499637][ T5080] kasan_check_range+0x282/0x290
[ 57.504560][ T5080] ? hfsplus_bnode_dump+0x403/0xbb0
[ 57.509750][ T5080] __asan_memcpy+0x29/0x70
[ 57.514160][ T5080] hfsplus_bnode_dump+0x403/0xbb0
[ 57.519179][ T5080] ? __pfx_hfsplus_bnode_dump+0x10/0x10
[ 57.524802][ T5080] ? hfsplus_bnode_write_u16+0x9b/0xf0
[ 57.530339][ T5080] ? __pfx_hfsplus_bnode_write_u16+0x10/0x10
[ 57.536310][ T5080] ? rcu_is_watching+0x15/0xb0
[ 57.541064][ T5080] ? hfsplus_bnode_move+0x2da/0x910
[ 57.546253][ T5080] ? __mark_inode_dirty+0x41c/0xe20
[ 57.551445][ T5080] hfsplus_brec_remove+0x42c/0x4f0
[ 57.556585][ T5080] __hfsplus_delete_attr+0x275/0x450
[ 57.561951][ T5080] ? __pfx___hfsplus_delete_attr+0x10/0x10
[ 57.567841][ T5080] hfsplus_delete_all_attrs+0x26b/0x3d0
[ 57.573386][ T5080] ? __pfx_hfsplus_delete_all_attrs+0x10/0x10
[ 57.579445][ T5080] ? do_raw_spin_unlock+0x13c/0x8b0
[ 57.584651][ T5080] ? rcu_is_watching+0x15/0xb0
[ 57.589410][ T5080] ? __mark_inode_dirty+0x82d/0xe20
[ 57.594597][ T5080] hfsplus_delete_cat+0xb37/0xf70
[ 57.599611][ T5080] ? __pfx_hfsplus_delete_cat+0x10/0x10
[ 57.605152][ T5080] ? smk_access+0x4ab/0x4e0
[ 57.609644][ T5080] ? hfsplus_unlink+0x161/0x790
[ 57.614583][ T5080] hfsplus_unlink+0x363/0x790
[ 57.619254][ T5080] ? __pfx_smack_inode_unlink+0x10/0x10
[ 57.624793][ T5080] ? __pfx_hfsplus_unlink+0x10/0x10
[ 57.629979][ T5080] ? __down_write_common+0x162/0x200
[ 57.635257][ T5080] ? bpf_lsm_inode_unlink+0x9/0x10
[ 57.640355][ T5080] ? security_inode_unlink+0xd5/0x120
[ 57.645718][ T5080] vfs_unlink+0x365/0x600
[ 57.650045][ T5080] do_unlinkat+0x4ae/0x830
[ 57.654456][ T5080] ? __pfx_do_unlinkat+0x10/0x10
[ 57.659383][ T5080] ? __might_fault+0xc6/0x120
[ 57.664051][ T5080] ? strncpy_from_user+0x1a4/0x2f0
[ 57.669157][ T5080] __x64_sys_unlinkat+0xce/0xf0
[ 57.674003][ T5080] do_syscall_64+0xf5/0x240
[ 57.678594][ T5080] ? clear_bhb_loop+0x35/0x90
[ 57.683284][ T5080] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 57.689216][ T5080] RIP: 0033:0x7fa99b691a99
[ 57.693631][ T5080] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 57.713248][ T5080] RSP: 002b:00007ffc953021e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000107
[ 57.721686][ T5080] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa99b691a99
[ 57.729663][ T5080] RDX: 0000000000000000 RSI: 0000000020002780 RDI: 0000000000000004
[ 57.737639][ T5080] RBP: 00007fa99b7055f0 R08: 0000555592b6e4c0 R09: 0000555592b6e4c0
[ 57.745608][ T5080] R10: 000000000000067a R11: 0000000000000246 R12: 00007ffc95302210
[ 57.753583][ T5080] R13: 00007ffc95302438 R14: 431bde82d7b634db R15: 00007fa99b6da03b
[ 57.761554][ T5080] </TASK>
[ 57.764911][ T5080] Kernel Offset: disabled
[ 57.769245][ T5080] Rebooting in 86400 seconds..