ci2-upstream-fs/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci2-upstream-fs/syz-executor647001740 <...> Warning: Permanently added '10.128.1.62' (ED25519) to the list of known hosts. execve("ci2-upstream-fs/syz-executor647001740", ["ci2-upstream-fs/syz-executor647001740"], 0x7fffe3acc400 /* 10 vars */) = 0 brk(NULL) = 0x5555939c0000 brk(0x5555939c0d80) = 0x5555939c0d80 arch_prctl(ARCH_SET_FS, 0x5555939c0400) = 0 set_tid_address(0x5555939c06d0) = 5607 set_robust_list(0x5555939c06e0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci2-upstream-fs/syz-executor647001740", 4096) = 43 getrandom("\xbc\xc0\xa0\x96\x4c\x50\xb6\xd9", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555939c0d80 brk(0x5555939e1d80) = 0x5555939e1d80 brk(0x5555939e2000) = 0x5555939e2000 mprotect(0x7f8314a5c000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5608 attached , child_tidptr=0x5555939c06d0) = 5608 [pid 5608] set_robust_list(0x5555939c06e0, 24 [pid 5607] rt_sigprocmask(SIG_SETMASK, [] [pid 5608] <... set_robust_list resumed>) = 0 [pid 5607] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5608] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5608] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5608] setpgid(0, 0) = 0 [pid 5608] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5608] write(3, "1000", 4) = 4 [pid 5608] close(3) = 0 [pid 5608] write(1, "executing program\n", 18) = 18 executing program [pid 5608] memfd_create("syzkaller", 0) = 3 [pid 5608] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f830c5a4000 [pid 5608] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5608] munmap(0x7f830c5a4000, 138412032) = 0 [pid 5608] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5608] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5608] close(3) = 0 [pid 5608] close(4) = 0 [pid 5608] mkdir("./file0", 0777) = 0 [ 99.584495][ T5608] loop0: detected capacity change from 0 to 1024 [pid 5608] mount("/dev/loop0", "./file0", "hfsplus", MS_RDONLY|MS_NOSUID|MS_LAZYTIME, "nodecompose") = 0 [pid 5608] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5608] chdir("./file0") = 0 [pid 5608] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5608] mount(NULL, ".", NULL, MS_REMOUNT|MS_LAZYTIME, NULL) = 0 [ 99.699372][ T5608] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] SMP KASAN PTI [ 99.711359][ T5608] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 99.719818][ T5608] CPU: 0 UID: 0 PID: 5608 Comm: syz-executor647 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 99.730071][ T5608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 99.740139][ T5608] RIP: 0010:hfsplus_rename_cat+0x43f/0x1070 [ 99.746116][ T5608] Code: 0f b7 84 24 60 01 00 00 66 89 44 24 18 4c 8b b4 24 00 01 00 00 48 8b 44 24 28 4c 8d 60 40 4c 89 e0 48 c1 e8 03 48 89 44 24 68 <42> 80 3c 38 00 74 08 4c 89 e7 e8 62 9c 85 ff 4c 89 64 24 58 45 8b [ 99.765760][ T5608] RSP: 0018:ffffc90004dcf780 EFLAGS: 00010202 [ 99.771896][ T5608] RAX: 0000000000000008 RBX: fffff520009b9f00 RCX: ffff888038783e80 [ 99.779917][ T5608] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 99.787938][ T5608] RBP: ffffc90004dcfbd0 R08: 0000000000000000 R09: 0000000000000000 [ 99.795971][ T5608] R10: 6d33a5df14000000 R11: 6d33a5df6d33a5df R12: 0000000000000040 [ 99.803973][ T5608] R13: ffff888020ee0001 R14: ffff888020ee0000 R15: dffffc0000000000 [ 99.811974][ T5608] FS: 00005555939c0400(0000) GS:ffff888125bc8000(0000) knlGS:0000000000000000 [ 99.820950][ T5608] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 99.827565][ T5608] CR2: 00007f34b15eb000 CR3: 0000000037058000 CR4: 00000000003526f0 [ 99.835580][ T5608] Call Trace: [ 99.838895][ T5608] [ 99.841860][ T5608] ? __pfx_hfsplus_rename_cat+0x10/0x10 [ 99.847439][ T5608] ? do_raw_spin_lock+0x12b/0x2f0 [ 99.852511][ T5608] ? put_dec_full8+0x11c/0x2e0 [ 99.857358][ T5608] ? __pfx_sprintf+0x10/0x10 [ 99.861979][ T5608] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 99.867820][ T5608] ? mutex_lock_nested+0x152/0x1d0 [ 99.872956][ T5608] ? hfsplus_link+0x23a/0x930 [ 99.877657][ T5608] hfsplus_link+0x39f/0x930 [ 99.882190][ T5608] ? __pfx_hfsplus_link+0x10/0x10 [ 99.887239][ T5608] ? rwbase_write_lock+0x550/0x720 [ 99.892373][ T5608] ? try_break_deleg+0x5e/0x190 [ 99.897255][ T5608] vfs_link+0x491/0x650 [ 99.901442][ T5608] filename_linkat+0x26d/0x5f0 [ 99.906239][ T5608] ? __pfx_filename_linkat+0x10/0x10 [ 99.911554][ T5608] ? do_getname+0x151/0x250 [ 99.916099][ T5608] __se_sys_link+0x55/0x2c0 [ 99.920636][ T5608] do_syscall_64+0x166/0x520 [ 99.925257][ T5608] ? trace_irq_disable+0x3b/0x140 [ 99.930307][ T5608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.936393][ T5608] ? clear_bhb_loop+0x70/0xc0 [ 99.941186][ T5608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.947099][ T5608] RIP: 0033:0x7f83149d0869 [ 99.951550][ T5608] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 99.971184][ T5608] RSP: 002b:00007ffd4927f788 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 99.979622][ T5608] RAX: ffffffffffffffda RBX: 0000200000000240 RCX: 00007f83149d0869 [ 99.987611][ T5608] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000200000000400 [ 99.995602][ T5608] RBP: 0000000000000001 R08: 00005555939c1560 R09: 00005555939c1560 [ 100.003587][ T5608] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd4927f7b0 [ 100.011573][ T5608] R13: 0000000000000002 R14: 431bde82d7b634db R15: 00007f8314a3004b [ 100.019571][ T5608] [ 100.022609][ T5608] Modules linked in: [ 100.026622][ T5608] ---[ end trace 0000000000000000 ]--- [ 100.032213][ T5608] RIP: 0010:hfsplus_rename_cat+0x43f/0x1070 [ 100.032261][ T5608] Code: 0f b7 84 24 60 01 00 00 66 89 44 24 18 4c 8b b4 24 00 01 00 00 48 8b 44 24 28 4c 8d 60 40 4c 89 e0 48 c1 e8 03 48 89 44 24 68 <42> 80 3c 38 00 74 08 4c 89 e7 e8 62 9c 85 ff 4c 89 64 24 58 45 8b [ 100.032280][ T5608] RSP: 0018:ffffc90004dcf780 EFLAGS: 00010202 [ 100.032367][ T5608] RAX: 0000000000000008 RBX: fffff520009b9f00 RCX: ffff888038783e80 [ 100.032384][ T5608] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 100.032397][ T5608] RBP: ffffc90004dcfbd0 R08: 0000000000000000 R09: 0000000000000000 [ 100.032419][ T5608] R10: 6d33a5df14000000 R11: 6d33a5df6d33a5df R12: 0000000000000040 [ 100.032434][ T5608] R13: ffff888020ee0001 R14: ffff888020ee0000 R15: dffffc0000000000 [ 100.032450][ T5608] FS: 00005555939c0400(0000) GS:ffff888125cc8000(0000) knlGS:0000000000000000 [ 100.032468][ T5608] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 100.032483][ T5608] CR2: 00005605ee7a78d0 CR3: 0000000037058000 CR4: 00000000003526f0 [ 100.032505][ T5608] Kernel panic - not syncing: Fatal exception [ 100.134094][ T5608] Kernel Offset: disabled [ 100.138432][ T5608] Rebooting in 86400 seconds..