./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2066189181
<...>
DUID 00:04:9f:e8:07:f9:ba:36:1f:d4:05:68:5a:d1:6a:7f:90:cd
forked to background, child pid 4660
[ 29.877094][ T4661] 8021q: adding VLAN 0 to HW filter on device bond0
[ 29.886359][ T4661] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.0.111' (ECDSA) to the list of known hosts.
execve("./syz-executor2066189181", ["./syz-executor2066189181"], 0x7ffc8f0ced80 /* 10 vars */) = 0
brk(NULL) = 0x555556d26000
brk(0x555556d26c40) = 0x555556d26c40
arch_prctl(ARCH_SET_FS, 0x555556d26300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor2066189181", 4096) = 28
brk(0x555556d47c40) = 0x555556d47c40
brk(0x555556d48000) = 0x555556d48000
mprotect(0x7ffa4b702000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
memfd_create("syzkaller", 0) = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa43249000
write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288
munmap(0x7ffa43249000, 524288) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
ioctl(4, LOOP_SET_FD, 3) = 0
close(3) = 0
mkdir("./bus", 0777) = 0
syzkaller login: [ 54.273229][ T4992] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=4992 'syz-executor206'
[ 54.291350][ T4992] loop0: detected capacity change from 0 to 1024
[ 54.300935][ T4992] =======================================================
[ 54.300935][ T4992] WARNING: The mand mount option has been deprecated and
[ 54.300935][ T4992] and is ignored by this kernel. Remove the mand
mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0
openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
chdir("./bus") = 0
ioctl(4, LOOP_CLR_FD) = 0
close(4) = 0
creat("./bus", 000) = 4
[ 54.300935][ T4992] option from the mount to silence this warning.
[ 54.300935][ T4992] =======================================================
[ 54.362872][ T4992] ==================================================================
[ 54.370979][ T4992] BUG: KASAN: wild-memory-access in hfsplus_bnode_read_u16+0x146/0x2c0
[ 54.379248][ T4992] Read of size 1 at addr 000508800000103f by task syz-executor206/4992
[ 54.387829][ T4992]
[ 54.390169][ T4992] CPU: 1 PID: 4992 Comm: syz-executor206 Not tainted 6.4.0-rc6-syzkaller-00195-g40f71e7cd3c6 #0
[ 54.400737][ T4992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 54.410955][ T4992] Call Trace:
[ 54.414266][ T4992]
[ 54.417283][ T4992] dump_stack_lvl+0x1e7/0x2d0
[ 54.421987][ T4992] ? nf_tcp_handle_invalid+0x650/0x650
[ 54.427528][ T4992] ? panic+0x770/0x770
[ 54.431779][ T4992] ? _printk+0xd5/0x120
[ 54.435957][ T4992] print_report+0xe6/0x540
[ 54.440404][ T4992] ? __virt_addr_valid+0x58/0x2e0
[ 54.445443][ T4992] ? hfsplus_bnode_read_u16+0x146/0x2c0
[ 54.451007][ T4992] kasan_report+0x176/0x1b0
[ 54.455632][ T4992] ? hfsplus_bnode_read_u16+0x146/0x2c0
[ 54.461430][ T4992] ? hfsplus_bnode_read_u16+0x146/0x2c0
[ 54.467532][ T4992] kasan_check_range+0x283/0x290
[ 54.472911][ T4992] ? hfsplus_bnode_read_u16+0x146/0x2c0
[ 54.478475][ T4992] __asan_memcpy+0x29/0x70
[ 54.482877][ T4992] hfsplus_bnode_read_u16+0x146/0x2c0
[ 54.488234][ T4992] ? hfsplus_bnode_read+0x1e0/0x1e0
[ 54.493415][ T4992] ? do_raw_spin_unlock+0x13b/0x8b0
[ 54.498601][ T4992] hfsplus_bnode_find+0x769/0x10c0
[ 54.503694][ T4992] ? hfsplus_bnode_unlink+0x7f0/0x7f0
[ 54.509160][ T4992] ? lockdep_unlock+0x169/0x300
[ 54.513993][ T4992] ? hfsplus_bmap_reserve+0x498/0x4e0
[ 54.519358][ T4992] hfsplus_bmap_alloc+0xc9/0x640
[ 54.524383][ T4992] ? hfsplus_bmap_reserve+0x4e0/0x4e0
[ 54.529751][ T4992] hfs_btree_inc_height+0x11e/0xdb0
[ 54.535034][ T4992] ? hfsplus_brec_insert+0xdd0/0xdd0
[ 54.540334][ T4992] ? read_lock_is_recursive+0x20/0x20
[ 54.545703][ T4992] ? __mutex_trylock_common+0x182/0x2e0
[ 54.551238][ T4992] ? __might_sleep+0xc0/0xc0
[ 54.555815][ T4992] hfsplus_brec_insert+0x166/0xdd0
[ 54.560912][ T4992] ? rcu_is_watching+0x15/0xb0
[ 54.565657][ T4992] ? trace_contention_end+0x3c/0xf0
[ 54.570839][ T4992] ? hfsplus_brec_find+0x19d/0x570
[ 54.575933][ T4992] ? hfs_find_1st_rec_by_cnid+0x3c0/0x3c0
[ 54.581635][ T4992] ? hfsplus_brec_keylen+0x310/0x310
[ 54.586929][ T4992] ? mutex_lock_io_nested+0x60/0x60
[ 54.592107][ T4992] __hfsplus_ext_write_extent+0x36b/0x5b0
[ 54.597807][ T4992] __hfsplus_ext_cache_extent+0x84/0xe00
[ 54.603419][ T4992] ? mutex_lock_nested+0x1b/0x20
[ 54.608336][ T4992] hfsplus_file_extend+0x439/0x1b10
[ 54.613511][ T4992] ? xas_find+0x37c/0xaa0
[ 54.617821][ T4992] ? hfsplus_get_block+0x14e0/0x14e0
[ 54.623084][ T4992] ? find_lock_entries+0x10f0/0x10f0
[ 54.628357][ T4992] ? clean_bdev_aliases+0x7f9/0x920
[ 54.633545][ T4992] hfsplus_get_block+0x406/0x14e0
[ 54.638777][ T4992] ? hfsplus_ext_write_extent+0x1f0/0x1f0
[ 54.644503][ T4992] ? _raw_spin_unlock+0x28/0x40
[ 54.649338][ T4992] ? folio_create_buffers+0x132/0x250
[ 54.654694][ T4992] __block_write_begin_int+0x548/0x1a50
[ 54.660229][ T4992] ? folio_add_lru+0x353/0x6f0
[ 54.665001][ T4992] ? hfsplus_ext_write_extent+0x1f0/0x1f0
[ 54.670703][ T4992] ? PageUptodate+0x290/0x290
[ 54.675363][ T4992] ? folio_test_hugetlb+0xa0/0x1d0
[ 54.680455][ T4992] ? pagecache_get_page+0xeb/0x220
[ 54.685658][ T4992] ? hfsplus_ext_write_extent+0x1f0/0x1f0
[ 54.691382][ T4992] block_write_begin+0x9c/0x1f0
[ 54.696213][ T4992] ? cont_write_begin+0x626/0x880
[ 54.701216][ T4992] cont_write_begin+0x643/0x880
[ 54.706050][ T4992] ? generic_cont_expand_simple+0x2a0/0x2a0
[ 54.711925][ T4992] hfsplus_write_begin+0x8a/0xd0
[ 54.716846][ T4992] ? hfsplus_ext_write_extent+0x1f0/0x1f0
[ 54.722639][ T4992] cont_write_begin+0x316/0x880
[ 54.727472][ T4992] ? generic_cont_expand_simple+0x2a0/0x2a0
[ 54.733344][ T4992] ? smk_access+0x477/0x4b0
[ 54.737830][ T4992] ? smk_tskacc+0x2ff/0x360
[ 54.742317][ T4992] hfsplus_write_begin+0x8a/0xd0
[ 54.747248][ T4992] ? hfsplus_ext_write_extent+0x1f0/0x1f0
[ 54.752993][ T4992] generic_cont_expand_simple+0x18b/0x2a0
[ 54.758694][ T4992] ? submit_bh+0x20/0x20
[ 54.763381][ T4992] ? current_time+0x1e0/0x300
[ 54.768056][ T4992] ? atime_needs_update+0x6d0/0x6d0
[ 54.773285][ T4992] hfsplus_setattr+0x16d/0x280
[ 54.778054][ T4992] ? hfsplus_fileattr_set+0x330/0x330
[ 54.783432][ T4992] notify_change+0xc8b/0xf40
[ 54.788038][ T4992] do_truncate+0x220/0x300
[ 54.792450][ T4992] ? put_page_bootmem+0x2e0/0x2e0
[ 54.797478][ T4992] ? print_irqtrace_events+0x220/0x220
[ 54.802937][ T4992] do_sys_ftruncate+0x2e4/0x380
[ 54.807800][ T4992] do_syscall_64+0x41/0xc0
[ 54.812238][ T4992] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 54.818147][ T4992] RIP: 0033:0x7ffa4b6957c9
[ 54.822729][ T4992] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 54.842498][ T4992] RSP: 002b:00007ffdd40bdb58 EFLAGS: 00000246 ORIG_RAX: 000000000000004d
[ 54.850900][ T4992] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ffa4b6957c9
[ 54.858857][ T4992] RDX: 0000000000000000 RSI: 0000000000048280 RDI: 0000000000000004
[ 54.866947][ T4992] RBP: 00007ffa4b655060 R08: 0000000000000000 R09: 0000000000000000
[ 54.875006][ T4992] R10: 00000000000005f1 R11: 0000000000000246 R12: 00007ffa4b6550f0
[ 54.882970][ T4992] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 54.890930][ T4992]
[ 54.893933][ T4992] ==================================================================
[ 54.902320][ T4992] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 54.909529][ T4992] CPU: 0 PID: 4992 Comm: syz-executor206 Not tainted 6.4.0-rc6-syzkaller-00195-g40f71e7cd3c6 #0
[ 54.919929][ T4992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 54.929977][ T4992] Call Trace:
[ 54.933245][ T4992]
[ 54.936168][ T4992] dump_stack_lvl+0x1e7/0x2d0
[ 54.940857][ T4992] ? nf_tcp_handle_invalid+0x650/0x650
[ 54.946318][ T4992] ? panic+0x770/0x770
[ 54.950380][ T4992] ? vscnprintf+0x5d/0x80
[ 54.954703][ T4992] panic+0x30f/0x770
[ 54.958600][ T4992] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 54.964920][ T4992] ? check_panic_on_warn+0x21/0xa0
[ 54.970026][ T4992] ? __memcpy_flushcache+0x2b0/0x2b0
[ 54.975305][ T4992] ? _raw_spin_unlock_irqrestore+0x12c/0x140
[ 54.981274][ T4992] ? _raw_spin_unlock+0x40/0x40
[ 54.986115][ T4992] ? print_report+0xe6/0x540
[ 54.990697][ T4992] check_panic_on_warn+0x82/0xa0
[ 54.995632][ T4992] ? hfsplus_bnode_read_u16+0x146/0x2c0
[ 55.001166][ T4992] end_report+0x63/0x110
[ 55.005407][ T4992] kasan_report+0x183/0x1b0
[ 55.010258][ T4992] ? hfsplus_bnode_read_u16+0x146/0x2c0
[ 55.016234][ T4992] ? hfsplus_bnode_read_u16+0x146/0x2c0
[ 55.021901][ T4992] kasan_check_range+0x283/0x290
[ 55.026843][ T4992] ? hfsplus_bnode_read_u16+0x146/0x2c0
[ 55.032375][ T4992] __asan_memcpy+0x29/0x70
[ 55.036795][ T4992] hfsplus_bnode_read_u16+0x146/0x2c0
[ 55.042158][ T4992] ? hfsplus_bnode_read+0x1e0/0x1e0
[ 55.047347][ T4992] ? do_raw_spin_unlock+0x13b/0x8b0
[ 55.052552][ T4992] hfsplus_bnode_find+0x769/0x10c0
[ 55.057658][ T4992] ? hfsplus_bnode_unlink+0x7f0/0x7f0
[ 55.063192][ T4992] ? lockdep_unlock+0x169/0x300
[ 55.068056][ T4992] ? hfsplus_bmap_reserve+0x498/0x4e0
[ 55.073424][ T4992] hfsplus_bmap_alloc+0xc9/0x640
[ 55.078351][ T4992] ? hfsplus_bmap_reserve+0x4e0/0x4e0
[ 55.083717][ T4992] hfs_btree_inc_height+0x11e/0xdb0
[ 55.088916][ T4992] ? hfsplus_brec_insert+0xdd0/0xdd0
[ 55.094191][ T4992] ? read_lock_is_recursive+0x20/0x20
[ 55.099560][ T4992] ? __mutex_trylock_common+0x182/0x2e0
[ 55.105102][ T4992] ? __might_sleep+0xc0/0xc0
[ 55.109713][ T4992] hfsplus_brec_insert+0x166/0xdd0
[ 55.114994][ T4992] ? rcu_is_watching+0x15/0xb0
[ 55.119745][ T4992] ? trace_contention_end+0x3c/0xf0
[ 55.124942][ T4992] ? hfsplus_brec_find+0x19d/0x570
[ 55.130044][ T4992] ? hfs_find_1st_rec_by_cnid+0x3c0/0x3c0
[ 55.135750][ T4992] ? hfsplus_brec_keylen+0x310/0x310
[ 55.141112][ T4992] ? mutex_lock_io_nested+0x60/0x60
[ 55.146298][ T4992] __hfsplus_ext_write_extent+0x36b/0x5b0
[ 55.152043][ T4992] __hfsplus_ext_cache_extent+0x84/0xe00
[ 55.157661][ T4992] ? mutex_lock_nested+0x1b/0x20
[ 55.162943][ T4992] hfsplus_file_extend+0x439/0x1b10
[ 55.168302][ T4992] ? xas_find+0x37c/0xaa0
[ 55.172717][ T4992] ? hfsplus_get_block+0x14e0/0x14e0
[ 55.178336][ T4992] ? find_lock_entries+0x10f0/0x10f0
[ 55.183875][ T4992] ? clean_bdev_aliases+0x7f9/0x920
[ 55.189145][ T4992] hfsplus_get_block+0x406/0x14e0
[ 55.194248][ T4992] ? hfsplus_ext_write_extent+0x1f0/0x1f0
[ 55.200053][ T4992] ? _raw_spin_unlock+0x28/0x40
[ 55.205154][ T4992] ? folio_create_buffers+0x132/0x250
[ 55.210798][ T4992] __block_write_begin_int+0x548/0x1a50
[ 55.216328][ T4992] ? folio_add_lru+0x353/0x6f0
[ 55.221088][ T4992] ? hfsplus_ext_write_extent+0x1f0/0x1f0
[ 55.227052][ T4992] ? PageUptodate+0x290/0x290
[ 55.231800][ T4992] ? folio_test_hugetlb+0xa0/0x1d0
[ 55.236932][ T4992] ? pagecache_get_page+0xeb/0x220
[ 55.242049][ T4992] ? hfsplus_ext_write_extent+0x1f0/0x1f0
[ 55.247856][ T4992] block_write_begin+0x9c/0x1f0
[ 55.252738][ T4992] ? cont_write_begin+0x626/0x880
[ 55.257841][ T4992] cont_write_begin+0x643/0x880
[ 55.262705][ T4992] ? generic_cont_expand_simple+0x2a0/0x2a0
[ 55.268699][ T4992] hfsplus_write_begin+0x8a/0xd0
[ 55.273643][ T4992] ? hfsplus_ext_write_extent+0x1f0/0x1f0
[ 55.279352][ T4992] cont_write_begin+0x316/0x880
[ 55.284207][ T4992] ? generic_cont_expand_simple+0x2a0/0x2a0
[ 55.290180][ T4992] ? smk_access+0x477/0x4b0
[ 55.294766][ T4992] ? smk_tskacc+0x2ff/0x360
[ 55.299270][ T4992] hfsplus_write_begin+0x8a/0xd0
[ 55.304374][ T4992] ? hfsplus_ext_write_extent+0x1f0/0x1f0
[ 55.310090][ T4992] generic_cont_expand_simple+0x18b/0x2a0
[ 55.315817][ T4992] ? submit_bh+0x20/0x20
[ 55.320045][ T4992] ? current_time+0x1e0/0x300
[ 55.324724][ T4992] ? atime_needs_update+0x6d0/0x6d0
[ 55.330094][ T4992] hfsplus_setattr+0x16d/0x280
[ 55.334854][ T4992] ? hfsplus_fileattr_set+0x330/0x330
[ 55.340219][ T4992] notify_change+0xc8b/0xf40
[ 55.344897][ T4992] do_truncate+0x220/0x300
[ 55.349387][ T4992] ? put_page_bootmem+0x2e0/0x2e0
[ 55.354403][ T4992] ? print_irqtrace_events+0x220/0x220
[ 55.359854][ T4992] do_sys_ftruncate+0x2e4/0x380
[ 55.364694][ T4992] do_syscall_64+0x41/0xc0
[ 55.369098][ T4992] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 55.375065][ T4992] RIP: 0033:0x7ffa4b6957c9
[ 55.379591][ T4992] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 55.399811][ T4992] RSP: 002b:00007ffdd40bdb58 EFLAGS: 00000246 ORIG_RAX: 000000000000004d
[ 55.408341][ T4992] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ffa4b6957c9
[ 55.416403][ T4992] RDX: 0000000000000000 RSI: 0000000000048280 RDI: 0000000000000004
[ 55.424633][ T4992] RBP: 00007ffa4b655060 R08: 0000000000000000 R09: 0000000000000000
[ 55.432724][ T4992] R10: 00000000000005f1 R11: 0000000000000246 R12: 00007ffa4b6550f0
[ 55.440702][ T4992] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 55.448677][ T4992]
[ 55.451946][ T4992] Kernel Offset: disabled
[ 55.456272][ T4992] Rebooting in 86400 seconds..