./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor420959352 <...> DUID 00:04:76:8b:f6:84:a4:3b:36:39:6c:68:e7:10:38:dd:b7:2c forked to background, child pid 3208 [ 29.421466][ T3209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.431640][ T3209] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.234' (ECDSA) to the list of known hosts. execve("./syz-executor420959352", ["./syz-executor420959352"], 0x7fffa567d0f0 /* 10 vars */) = 0 brk(NULL) = 0x555557084000 brk(0x555557084d00) = 0x555557084d00 arch_prctl(ARCH_SET_FS, 0x5555570843c0) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor420959352", 4096) = 27 brk(0x5555570a5d00) = 0x5555570a5d00 brk(0x5555570a6000) = 0x5555570a6000 mprotect(0x7f77e8c74000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGSEGV, {sa_handler=0x7f77e8bc55a0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f77e8bc65f0}, NULL, 8) = 0 rt_sigaction(SIGBUS, {sa_handler=0x7f77e8bc55a0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f77e8bc65f0}, NULL, 8) = 0 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f77e07bb000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768) = 32768 munmap(0x7f77e07bb000, 32768) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./bus", 0777) = 0 mount("/dev/loop0", "./bus", "hfs", MS_NOEXEC|MS_NOATIME|MS_RELATIME|MS_STRICTATIME, "dir_umask=01777777777777777777770,iocharset=maccroatian,") = 0 openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 chdir("./bus") = 0 ioctl(4, LOOP_CLR_FD) = 0 close(4) = 0 openat(AT_FDCWD, "pids.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 writev(4, [{iov_base="\xf4\xa5\x90\xb3\x1d\xb9", iov_len=6}], 1) = 6 mmap(0x20000000, 11755520, PROT_READ|0x800000, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x20000000 --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x20000008} --- syzkaller login: [ 55.773399][ T3629] loop0: detected capacity change from 0 to 64 [ 55.820130][ T3629] ================================================================== [ 55.828237][ T3629] BUG: KASAN: slab-out-of-bounds in hfs_asc2mac+0x467/0x9a0 [ 55.835543][ T3629] Write of size 1 at addr ffff888029bd16ce by task syz-executor420/3629 [ 55.843852][ T3629] [ 55.846161][ T3629] CPU: 1 PID: 3629 Comm: syz-executor420 Not tainted 6.1.0-rc8-syzkaller-00152-g3ecc37918c80 #0 [ 55.856546][ T3629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 55.866608][ T3629] Call Trace: [ 55.869872][ T3629] [ 55.872787][ T3629] dump_stack_lvl+0x1b1/0x28e [ 55.877465][ T3629] ? nf_tcp_handle_invalid+0x62e/0x62e [ 55.882919][ T3629] ? __wake_up_klogd+0xcd/0x100 [ 55.887767][ T3629] ? panic+0x710/0x710 [ 55.891826][ T3629] ? _printk+0xc0/0x100 [ 55.895970][ T3629] ? _raw_spin_lock_irqsave+0x8e/0x100 [ 55.901424][ T3629] print_address_description+0x74/0x340 [ 55.906961][ T3629] print_report+0x107/0x1f0 [ 55.911451][ T3629] ? __virt_addr_valid+0x21b/0x2d0 [ 55.916553][ T3629] ? __phys_addr+0xb5/0x160 [ 55.921045][ T3629] ? hfs_asc2mac+0x467/0x9a0 [ 55.925627][ T3629] kasan_report+0xcd/0x100 [ 55.930031][ T3629] ? hfs_asc2mac+0x467/0x9a0 [ 55.934612][ T3629] hfs_asc2mac+0x467/0x9a0 [ 55.939016][ T3629] ? mutex_lock_io_nested+0x60/0x60 [ 55.944207][ T3629] ? hfs_mac2asc+0x850/0x850 [ 55.948786][ T3629] ? hfs_find_init+0x8b/0x1e0 [ 55.953456][ T3629] ? trace_kmalloc+0x30/0xf0 [ 55.958040][ T3629] ? __kmalloc+0xcc/0x1a0 [ 55.962364][ T3629] hfs_cat_build_key+0x92/0x170 [ 55.967202][ T3629] hfs_lookup+0x1ab/0x2c0 [ 55.971519][ T3629] ? hfs_dir_release+0x140/0x140 [ 55.976441][ T3629] ? apparmor_capable+0x139/0x1a0 [ 55.981451][ T3629] ? bpf_lsm_capable+0x5/0x10 [ 55.986117][ T3629] ? security_capable+0xb1/0xd0 [ 55.990961][ T3629] ? privileged_wrt_inode_uidgid+0x20e/0x260 [ 55.996934][ T3629] ? generic_permission+0x274/0x4e0 [ 56.002153][ T3629] ? inode_permission+0xf5/0x450 [ 56.007085][ T3629] ? bpf_lsm_inode_create+0x5/0x10 [ 56.012183][ T3629] ? security_inode_create+0xdd/0x120 [ 56.017543][ T3629] ? hfs_dir_release+0x140/0x140 [ 56.022469][ T3629] path_openat+0x10e6/0x2df0 [ 56.027058][ T3629] ? do_filp_open+0x4f0/0x4f0 [ 56.031731][ T3629] do_filp_open+0x264/0x4f0 [ 56.036220][ T3629] ? vfs_tmpfile+0x490/0x490 [ 56.040799][ T3629] ? do_raw_spin_unlock+0x134/0x8a0 [ 56.045987][ T3629] ? _raw_spin_unlock+0x24/0x40 [ 56.050828][ T3629] ? alloc_fd+0x5a7/0x640 [ 56.055150][ T3629] do_sys_openat2+0x124/0x4e0 [ 56.059815][ T3629] ? print_irqtrace_events+0x220/0x220 [ 56.065258][ T3629] ? ptrace_stop+0x74d/0x970 [ 56.069837][ T3629] ? do_sys_open+0x220/0x220 [ 56.074417][ T3629] ? lockdep_hardirqs_on+0x8d/0x130 [ 56.079623][ T3629] ? _raw_spin_unlock_irq+0x2a/0x40 [ 56.084810][ T3629] ? ptrace_notify+0x245/0x340 [ 56.089559][ T3629] __x64_sys_openat+0x243/0x290 [ 56.094400][ T3629] ? __ia32_sys_open+0x270/0x270 [ 56.099326][ T3629] ? syscall_enter_from_user_mode+0x2e/0x1d0 [ 56.105296][ T3629] ? syscall_enter_from_user_mode+0x86/0x1d0 [ 56.111284][ T3629] do_syscall_64+0x3d/0xb0 [ 56.115772][ T3629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 56.121649][ T3629] RIP: 0033:0x7f77e8c08279 [ 56.126050][ T3629] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 56.145659][ T3629] RSP: 002b:00007ffd952221a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 56.154062][ T3629] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f77e8c08279 [ 56.162017][ T3629] RDX: 000000000000275a RSI: 0000000020000000 RDI: 00000000ffffff9c [ 56.169975][ T3629] RBP: 00007ffd952221b0 R08: 00007ffd952221b0 R09: 00007f77e8bc55a0 [ 56.178019][ T3629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.186148][ T3629] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 56.194111][ T3629] [ 56.197115][ T3629] [ 56.199420][ T3629] Allocated by task 3629: [ 56.203726][ T3629] kasan_set_track+0x3d/0x60 [ 56.208305][ T3629] __kasan_kmalloc+0x97/0xb0 [ 56.212877][ T3629] __kmalloc+0xaf/0x1a0 [ 56.217021][ T3629] hfs_find_init+0x8b/0x1e0 [ 56.221515][ T3629] hfs_lookup+0x105/0x2c0 [ 56.225829][ T3629] path_openat+0x10e6/0x2df0 [ 56.230402][ T3629] do_filp_open+0x264/0x4f0 [ 56.234887][ T3629] do_sys_openat2+0x124/0x4e0 [ 56.239548][ T3629] __x64_sys_openat+0x243/0x290 [ 56.244383][ T3629] do_syscall_64+0x3d/0xb0 [ 56.248780][ T3629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 56.254661][ T3629] [ 56.256972][ T3629] The buggy address belongs to the object at ffff888029bd1680 [ 56.256972][ T3629] which belongs to the cache kmalloc-96 of size 96 [ 56.270836][ T3629] The buggy address is located 78 bytes inside of [ 56.270836][ T3629] 96-byte region [ffff888029bd1680, ffff888029bd16e0) [ 56.283938][ T3629] [ 56.286248][ T3629] The buggy address belongs to the physical page: [ 56.292640][ T3629] page:ffffea0000a6f440 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29bd1 [ 56.302776][ T3629] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 56.310314][ T3629] raw: 00fff00000000200 ffffea0000720980 dead000000000003 ffff888012841780 [ 56.318893][ T3629] raw: 0000000000000000 0000000080200020 00000001ffffffff 0000000000000000 [ 56.327477][ T3629] page dumped because: kasan: bad access detected [ 56.333871][ T3629] page_owner tracks the page as allocated [ 56.339571][ T3629] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY), pid 3001, tgid 3001 (udevd), ts 24943397688, free_ts 24938656704 [ 56.357087][ T3629] get_page_from_freelist+0x742/0x7c0 [ 56.362452][ T3629] __alloc_pages+0x259/0x560 [ 56.367033][ T3629] alloc_slab_page+0xbd/0x190 [ 56.371703][ T3629] allocate_slab+0x5e/0x4b0 [ 56.376192][ T3629] ___slab_alloc+0x782/0xe20 [ 56.380780][ T3629] __kmem_cache_alloc_node+0x252/0x310 [ 56.386225][ T3629] __kmalloc+0x9e/0x1a0 [ 56.390373][ T3629] tomoyo_encode+0x26f/0x540 [ 56.394952][ T3629] tomoyo_realpath_from_path+0x5ae/0x5f0 [ 56.400575][ T3629] tomoyo_path_perm+0x227/0x670 [ 56.405414][ T3629] security_inode_getattr+0xc0/0x140 [ 56.410691][ T3629] vfs_statx+0x188/0x4a0 [ 56.414919][ T3629] __se_sys_newfstatat+0xed/0x7d0 [ 56.420015][ T3629] do_syscall_64+0x3d/0xb0 [ 56.424417][ T3629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 56.430295][ T3629] page last free stack trace: [ 56.434948][ T3629] free_pcp_prepare+0x80c/0x8f0 [ 56.439785][ T3629] free_unref_page+0x7d/0x5f0 [ 56.444448][ T3629] free_pipe_info+0x302/0x380 [ 56.449114][ T3629] pipe_release+0x232/0x310 [ 56.453602][ T3629] __fput+0x3ba/0x880 [ 56.457564][ T3629] task_work_run+0x243/0x300 [ 56.462142][ T3629] exit_to_user_mode_loop+0x124/0x150 [ 56.467501][ T3629] exit_to_user_mode_prepare+0xb2/0x140 [ 56.473038][ T3629] syscall_exit_to_user_mode+0x26/0x60 [ 56.478480][ T3629] do_syscall_64+0x49/0xb0 [ 56.482878][ T3629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 56.488756][ T3629] [ 56.491065][ T3629] Memory state around the buggy address: [ 56.496686][ T3629] ffff888029bd1580: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 56.504729][ T3629] ffff888029bd1600: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 56.512777][ T3629] >ffff888029bd1680: 00 00 00 00 00 00 00 00 00 06 fc fc fc fc fc fc [ 56.520833][ T3629] ^ [ 56.527225][ T3629] ffff888029bd1700: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 56.535268][ T3629] ffff888029bd1780: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 56.543307][ T3629] ================================================================== [ 56.552224][ T3629] Kernel panic - not syncing: panic_on_warn set ... [ 56.558835][ T3629] CPU: 1 PID: 3629 Comm: syz-executor420 Not tainted 6.1.0-rc8-syzkaller-00152-g3ecc37918c80 #0 [ 56.569243][ T3629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 56.579276][ T3629] Call Trace: [ 56.582542][ T3629] [ 56.585454][ T3629] dump_stack_lvl+0x1b1/0x28e [ 56.590202][ T3629] ? nf_tcp_handle_invalid+0x62e/0x62e [ 56.595638][ T3629] ? panic+0x710/0x710 [ 56.599687][ T3629] ? preempt_schedule_common+0xb7/0xe0 [ 56.605126][ T3629] ? vscnprintf+0x59/0x80 [ 56.609436][ T3629] panic+0x2d6/0x710 [ 56.613315][ T3629] ? memcpy_page_flushcache+0xfc/0xfc [ 56.618669][ T3629] ? _raw_spin_unlock_irqrestore+0x110/0x120 [ 56.624645][ T3629] ? rcu_read_lock_sched_held+0x5d/0x110 [ 56.630295][ T3629] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 56.636267][ T3629] ? hfs_asc2mac+0x467/0x9a0 [ 56.640845][ T3629] end_report+0x91/0xa0 [ 56.644994][ T3629] kasan_report+0xda/0x100 [ 56.649399][ T3629] ? hfs_asc2mac+0x467/0x9a0 [ 56.653974][ T3629] hfs_asc2mac+0x467/0x9a0 [ 56.658378][ T3629] ? mutex_lock_io_nested+0x60/0x60 [ 56.663574][ T3629] ? hfs_mac2asc+0x850/0x850 [ 56.668158][ T3629] ? hfs_find_init+0x8b/0x1e0 [ 56.672827][ T3629] ? trace_kmalloc+0x30/0xf0 [ 56.677425][ T3629] ? __kmalloc+0xcc/0x1a0 [ 56.681790][ T3629] hfs_cat_build_key+0x92/0x170 [ 56.686645][ T3629] hfs_lookup+0x1ab/0x2c0 [ 56.690966][ T3629] ? hfs_dir_release+0x140/0x140 [ 56.696409][ T3629] ? apparmor_capable+0x139/0x1a0 [ 56.701417][ T3629] ? bpf_lsm_capable+0x5/0x10 [ 56.706080][ T3629] ? security_capable+0xb1/0xd0 [ 56.710923][ T3629] ? privileged_wrt_inode_uidgid+0x20e/0x260 [ 56.716915][ T3629] ? generic_permission+0x274/0x4e0 [ 56.722130][ T3629] ? inode_permission+0xf5/0x450 [ 56.727071][ T3629] ? bpf_lsm_inode_create+0x5/0x10 [ 56.732174][ T3629] ? security_inode_create+0xdd/0x120 [ 56.737537][ T3629] ? hfs_dir_release+0x140/0x140 [ 56.742464][ T3629] path_openat+0x10e6/0x2df0 [ 56.747063][ T3629] ? do_filp_open+0x4f0/0x4f0 [ 56.751742][ T3629] do_filp_open+0x264/0x4f0 [ 56.756248][ T3629] ? vfs_tmpfile+0x490/0x490 [ 56.760837][ T3629] ? do_raw_spin_unlock+0x134/0x8a0 [ 56.766036][ T3629] ? _raw_spin_unlock+0x24/0x40 [ 56.770899][ T3629] ? alloc_fd+0x5a7/0x640 [ 56.775231][ T3629] do_sys_openat2+0x124/0x4e0 [ 56.779909][ T3629] ? print_irqtrace_events+0x220/0x220 [ 56.785374][ T3629] ? ptrace_stop+0x74d/0x970 [ 56.789963][ T3629] ? do_sys_open+0x220/0x220 [ 56.794545][ T3629] ? lockdep_hardirqs_on+0x8d/0x130 [ 56.799734][ T3629] ? _raw_spin_unlock_irq+0x2a/0x40 [ 56.804923][ T3629] ? ptrace_notify+0x245/0x340 [ 56.809674][ T3629] __x64_sys_openat+0x243/0x290 [ 56.814515][ T3629] ? __ia32_sys_open+0x270/0x270 [ 56.819438][ T3629] ? syscall_enter_from_user_mode+0x2e/0x1d0 [ 56.825423][ T3629] ? syscall_enter_from_user_mode+0x86/0x1d0 [ 56.831399][ T3629] do_syscall_64+0x3d/0xb0 [ 56.835808][ T3629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 56.841695][ T3629] RIP: 0033:0x7f77e8c08279 [ 56.846120][ T3629] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 56.865716][ T3629] RSP: 002b:00007ffd952221a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 56.874116][ T3629] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f77e8c08279 [ 56.882080][ T3629] RDX: 000000000000275a RSI: 0000000020000000 RDI: 00000000ffffff9c [ 56.890036][ T3629] RBP: 00007ffd952221b0 R08: 00007ffd952221b0 R09: 00007f77e8bc55a0 [ 56.897996][ T3629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.905970][ T3629] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 56.913931][ T3629] [ 56.917085][ T3629] Kernel Offset: disabled [ 56.921399][ T3629] Rebooting in 86400 seconds..