./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3207414222 <...> forked to background, child pid 3184 no interfaces have a carri[ 18.001997][ T3185] 8021q: adding VLAN 0 to HW filter on device bond0 er [ 18.013276][ T3185] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.19' (ECDSA) to the list of known hosts. execve("./syz-executor3207414222", ["./syz-executor3207414222"], 0x7fff6bde9e10 /* 10 vars */) = 0 brk(NULL) = 0x555556389000 brk(0x555556389c40) = 0x555556389c40 arch_prctl(ARCH_SET_FS, 0x555556389300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor3207414222", 4096) = 28 brk(0x5555563aac40) = 0x5555563aac40 brk(0x5555563ab000) = 0x5555563ab000 mprotect(0x7fdcadb67000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 ftruncate(3, 135266304) = 0 pwrite64(3, "\x01\x16\x19\x70\x00\x00\x00\x01\x00\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x64\x00\x00\x00\x00\x00\x00\x07\x09\x00\x00\x07\x6c\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x0c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x22\x00\x00\x00\x00\x00\x08\x19\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0c\x00\x00\x00\x00\x00\x00\x09\x25\x6c\x6f\x63\x6b"..., 332, 65536) = 332 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 mkdir("./file0", 0777) = 0 syzkaller login: [ 34.836446][ T3605] loop0: detected capacity change from 0 to 264192 [ 34.845958][ T3605] detected buffer overflow in __fortify_strlen [ 34.852306][ T3605] ------------[ cut here ]------------ [ 34.858205][ T3605] kernel BUG at lib/string_helpers.c:1027! [ 34.864030][ T3605] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 34.870098][ T3605] CPU: 0 PID: 3605 Comm: syz-executor320 Not tainted 6.0.0-syzkaller-09413-g4899a36f91a9 #0 [ 34.880142][ T3605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 34.890178][ T3605] RIP: 0010:fortify_panic+0x18/0x1a [ 34.895365][ T3605] Code: 8c e8 8e e0 d3 fa e9 ac 97 b1 fa e8 b4 87 7a f8 eb db 55 48 89 fd e8 79 71 2d f8 48 89 ee 48 c7 c7 40 36 49 8a e8 1d e7 f0 ff <0f> 0b e8 63 71 2d f8 48 8b 54 24 18 4c 89 f1 48 c7 c7 c0 40 49 8a [ 34.914953][ T3605] RSP: 0018:ffffc9000408fb28 EFLAGS: 00010282 [ 34.921014][ T3605] RAX: 000000000000002c RBX: ffff888021344000 RCX: 0000000000000000 [ 34.929058][ T3605] RDX: ffff888027c59d80 RSI: ffffffff81612738 RDI: fffff52000811f57 [ 34.937015][ T3605] RBP: ffffffff8a3b0220 R08: 000000000000002c R09: 0000000000000000 [ 34.945057][ T3605] R10: 0000000080000000 R11: 6465746365746564 R12: 0000000000000040 [ 34.953009][ T3605] R13: ffff8880215f147e R14: ffff8880215f0128 R15: 0000000000000000 [ 34.960963][ T3605] FS: 0000555556389300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 34.969877][ T3605] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.976451][ T3605] CR2: 00007fa30fbf5a70 CR3: 0000000020af2000 CR4: 0000000000350ef0 [ 34.984414][ T3605] Call Trace: [ 34.987682][ T3605] [ 34.990600][ T3605] gfs2_fill_super+0x1226/0x27f0 [ 34.995539][ T3605] ? gfs2_reconfigure+0x1060/0x1060 [ 35.000732][ T3605] ? lock_downgrade+0x6e0/0x6e0 [ 35.005578][ T3605] ? snprintf+0xbb/0xf0 [ 35.009729][ T3605] ? vsprintf+0x30/0x30 [ 35.013881][ T3605] ? wait_for_completion_io_timeout+0x20/0x20 [ 35.019952][ T3605] ? set_blocksize+0x2e5/0x370 [ 35.024715][ T3605] get_tree_bdev+0x440/0x760 [ 35.029396][ T3605] ? gfs2_reconfigure+0x1060/0x1060 [ 35.034590][ T3605] gfs2_get_tree+0x4a/0x270 [ 35.039086][ T3605] vfs_get_tree+0x89/0x2f0 [ 35.043527][ T3605] path_mount+0x1326/0x1e20 [ 35.048029][ T3605] ? kmem_cache_free+0xeb/0x5b0 [ 35.052874][ T3605] ? finish_automount+0x960/0x960 [ 35.057895][ T3605] ? putname+0xfe/0x140 [ 35.062047][ T3605] __x64_sys_mount+0x27f/0x300 [ 35.066897][ T3605] ? copy_mnt_ns+0xae0/0xae0 [ 35.071484][ T3605] ? _raw_spin_unlock_irq+0x2a/0x40 [ 35.076671][ T3605] ? ptrace_notify+0xfa/0x140 [ 35.081340][ T3605] do_syscall_64+0x35/0xb0 [ 35.085763][ T3605] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 35.091651][ T3605] RIP: 0033:0x7fdcadafc03a [ 35.096052][ T3605] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 35.115667][ T3605] RSP: 002b:00007ffcde0fd3a8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 35.124070][ T3605] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fdcadafc03a [ 35.132046][ T3605] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007ffcde0fd3c0 [ 35.140003][ T3605] RBP: 00007ffcde0fd3c0 R08: 00007ffcde0fd400 R09: 00005555563892c0 [ 35.148050][ T3605] R10: 0000000000000008 R11: 0000000000000282 R12: 0000000000000004 [ 35.156009][ T3605] R13: 00007ffcde0fd400 R14: 0000000000000001 R15: 0000000020000218 [ 35.163975][ T3605] [ 35.166981][ T3605] Modules linked in: [ 35.170983][ T3605] ---[ end trace 0000000000000000 ]--- [ 35.176828][ T3605] RIP: 0010:fortify_panic+0x18/0x1a [ 35.182208][ T3605] Code: 8c e8 8e e0 d3 fa e9 ac 97 b1 fa e8 b4 87 7a f8 eb db 55 48 89 fd e8 79 71 2d f8 48 89 ee 48 c7 c7 40 36 49 8a e8 1d e7 f0 ff <0f> 0b e8 63 71 2d f8 48 8b 54 24 18 4c 89 f1 48 c7 c7 c0 40 49 8a [ 35.202022][ T3605] RSP: 0018:ffffc9000408fb28 EFLAGS: 00010282 [ 35.208324][ T3605] RAX: 000000000000002c RBX: ffff888021344000 RCX: 0000000000000000 [ 35.216490][ T3605] RDX: ffff888027c59d80 RSI: ffffffff81612738 RDI: fffff52000811f57 [ 35.224471][ T3605] RBP: ffffffff8a3b0220 R08: 000000000000002c R09: 0000000000000000 [ 35.232549][ T3605] R10: 0000000080000000 R11: 6465746365746564 R12: 0000000000000040 [ 35.240553][ T3605] R13: ffff8880215f147e R14: ffff8880215f0128 R15: 0000000000000000 [ 35.248554][ T3605] FS: 0000555556389300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 35.257498][ T3605] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.264095][ T3605] CR2: 00007fa30fbf5a70 CR3: 0000000020af2000 CR4: 0000000000350ef0 [ 35.272047][ T3605] Kernel panic - not syncing: Fatal exception [ 35.278949][ T3605] Kernel Offset: disabled [ 35.283374][ T3605] Rebooting in 86400 seconds..