./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor181786502 <...> DUID 00:04:f8:b5:8a:47:ae:09:95:3a:43:2d:d7:42:86:31:94:89 forked to background, child pid 4644 [ 30.837649][ T4645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.852006][ T4645] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.43' (ECDSA) to the list of known hosts. execve("./syz-executor181786502", ["./syz-executor181786502"], 0x7ffe22296ec0 /* 10 vars */) = 0 brk(NULL) = 0x5555557ab000 brk(0x5555557abc40) = 0x5555557abc40 arch_prctl(ARCH_SET_FS, 0x5555557ab300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor181786502", 4096) = 27 brk(0x5555557ccc40) = 0x5555557ccc40 brk(0x5555557cd000) = 0x5555557cd000 mprotect(0x7f7fadb91000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7fa56d7000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 munmap(0x7f7fa56d7000, 524288) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 syzkaller login: [ 52.489978][ T5065] loop0: detected capacity change from 0 to 1024 [ 52.503990][ T5065] ------------[ cut here ]------------ [ 52.509585][ T5065] WARNING: CPU: 1 PID: 5065 at fs/hfsplus/inode.c:534 hfsplus_cat_read_inode+0xa7c/0xec0 [ 52.519472][ T5065] Modules linked in: [ 52.523415][ T5065] CPU: 1 PID: 5065 Comm: syz-executor181 Not tainted 6.1.0-syzkaller-13139-gf9ff5644bcc0 #0 [ 52.533536][ T5065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 52.543639][ T5065] RIP: 0010:hfsplus_cat_read_inode+0xa7c/0xec0 [ 52.549833][ T5065] Code: 37 3f 08 b8 fb ff ff ff 49 bf 00 00 00 00 00 fc ff df 4c 8b 74 24 18 eb 80 e8 c0 02 2d ff 0f 0b e9 01 f7 ff ff e8 b4 02 2d ff <0f> 0b e9 46 fa ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 44 f6 ff [ 52.569527][ T5065] RSP: 0018:ffffc90003b9f3a0 EFLAGS: 00010293 [ 52.575585][ T5065] RAX: ffffffff825ed30c RBX: 000000000000004e RCX: ffff88802bb88000 [ 52.583597][ T5065] RDX: 0000000000000000 RSI: 000000000000004e RDI: 00000000000000f8 [ 52.591603][ T5065] RBP: ffffc90003b9f6f0 R08: ffffffff825ecd48 R09: ffffffff825ec9b5 [ 52.599613][ T5065] R10: 0000000000000002 R11: ffff88802bb88000 R12: ffff8880206d9b00 [ 52.607590][ T5065] R13: ffff8880206d9cb0 R14: ffffc90003b9f790 R15: dffffc0000000000 [ 52.615813][ T5065] FS: 00005555557ab300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 52.624833][ T5065] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.631570][ T5065] CR2: 00000000005fdeb8 CR3: 0000000021d2c000 CR4: 00000000003506e0 [ 52.639590][ T5065] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 52.647564][ T5065] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 52.655575][ T5065] Call Trace: [ 52.658889][ T5065] [ 52.661816][ T5065] ? hfsplus_inode_write_fork+0x160/0x160 [ 52.667534][ T5065] ? rcu_read_lock_sched_held+0x87/0x110 [ 52.673298][ T5065] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 52.679338][ T5065] ? trace_raw_output_contention_end+0xd0/0xd0 [ 52.685502][ T5065] ? hfsplus_find_init+0x80/0x1b0 [ 52.690764][ T5065] ? trace_contention_end+0x72/0x1d0 [ 52.696055][ T5065] ? __mutex_lock_common+0x45f/0x26e0 [ 52.701616][ T5065] ? hfsplus_find_init+0x143/0x1b0 [ 52.706740][ T5065] ? rcu_read_lock_sched_held+0x87/0x110 [ 52.712410][ T5065] ? mutex_lock_io_nested+0x60/0x60 [ 52.717614][ T5065] ? __kmem_cache_alloc_node+0x21a/0x340 [ 52.723312][ T5065] ? hfsplus_find_init+0x80/0x1b0 [ 52.728370][ T5065] ? trace_kmalloc+0x30/0xf0 [ 52.732947][ T5065] ? __kmalloc+0xcc/0x190 [ 52.737266][ T5065] ? mutex_lock_nested+0x17/0x20 [ 52.742237][ T5065] ? hfsplus_find_init+0x143/0x1b0 [ 52.747365][ T5065] hfsplus_iget+0x576/0x630 [ 52.751945][ T5065] ? zisofs_uncompress_block+0x1140/0x1140 [ 52.757786][ T5065] hfsplus_fill_super+0xc6a/0x1b50 [ 52.763058][ T5065] ? __lock_acquire+0x1292/0x1f60 [ 52.768125][ T5065] ? hfsplus_mount+0x40/0x40 [ 52.772778][ T5065] ? bdev_name+0x2ce/0x3f0 [ 52.777186][ T5065] ? pointer+0x14a/0xfa0 [ 52.781496][ T5065] ? string+0x2d0/0x2d0 [ 52.785663][ T5065] ? vsnprintf+0x1cb0/0x1cb0 [ 52.790315][ T5065] ? vsnprintf+0x1bd8/0x1cb0 [ 52.794939][ T5065] ? ptr_to_hashval+0x70/0x70 [ 52.799670][ T5065] ? snprintf+0xc0/0x110 [ 52.803922][ T5065] ? vscnprintf+0x80/0x80 [ 52.808316][ T5065] ? set_blocksize+0x1ec/0x390 [ 52.813090][ T5065] ? sb_set_blocksize+0x95/0xf0 [ 52.817929][ T5065] mount_bdev+0x26c/0x3a0 [ 52.822323][ T5065] ? hfsplus_mount+0x40/0x40 [ 52.826914][ T5065] legacy_get_tree+0xea/0x180 [ 52.831654][ T5065] ? hfsplus_mark_mdb_dirty+0x1b0/0x1b0 [ 52.837214][ T5065] vfs_get_tree+0x88/0x270 [ 52.841680][ T5065] do_new_mount+0x289/0xad0 [ 52.846195][ T5065] ? do_move_mount_old+0x150/0x150 [ 52.851354][ T5065] ? user_path_at_empty+0x149/0x1a0 [ 52.856563][ T5065] __se_sys_mount+0x2d3/0x3c0 [ 52.861294][ T5065] ? __x64_sys_mount+0xc0/0xc0 [ 52.866064][ T5065] ? syscall_enter_from_user_mode+0x2e/0x1d0 [ 52.872105][ T5065] ? __x64_sys_mount+0x1c/0xc0 [ 52.876874][ T5065] do_syscall_64+0x3d/0xb0 [ 52.881356][ T5065] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 52.887296][ T5065] RIP: 0033:0x7f7fadb24e6a [ 52.891777][ T5065] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 52.911441][ T5065] RSP: 002b:00007ffe37ee4838 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 52.920770][ T5065] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f7fadb24e6a [ 52.928850][ T5065] RDX: 0000000020000600 RSI: 00000000200000c0 RDI: 00007ffe37ee4850 [ 52.936818][ T5065] RBP: 00007ffe37ee4850 R08: 00007ffe37ee4890 R09: 0000000000000616 [ 52.944845][ T5065] R10: 0000000002a14010 R11: 0000000000000286 R12: 0000000000000004 [ 52.952849][ T5065] R13: 00005555557ab2c0 R14: 0000000002a14010 R15: 00007ffe37ee4890 [ 52.960876][ T5065] [ 52.963902][ T5065] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 52.971166][ T5065] CPU: 1 PID: 5065 Comm: syz-executor181 Not tainted 6.1.0-syzkaller-13139-gf9ff5644bcc0 #0 [ 52.981210][ T5065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 52.991257][ T5065] Call Trace: [ 52.994523][ T5065] [ 52.997441][ T5065] dump_stack_lvl+0x1b1/0x290 [ 53.002114][ T5065] ? nf_tcp_handle_invalid+0x630/0x630 [ 53.007559][ T5065] ? panic+0x710/0x710 [ 53.011709][ T5065] ? vscnprintf+0x59/0x80 [ 53.016030][ T5065] ? hfsplus_cat_read_inode+0xa70/0xec0 [ 53.021568][ T5065] panic+0x2d6/0x710 [ 53.025465][ T5065] ? __warn+0x16d/0x2d0 [ 53.029615][ T5065] ? memcpy_page_flushcache+0x100/0x100 [ 53.035167][ T5065] ? hfsplus_cat_read_inode+0xa7c/0xec0 [ 53.042009][ T5065] __warn+0x284/0x2d0 [ 53.045989][ T5065] ? hfsplus_cat_read_inode+0xa7c/0xec0 [ 53.051535][ T5065] report_bug+0x1b3/0x2d0 [ 53.055879][ T5065] handle_bug+0x3d/0x70 [ 53.060027][ T5065] exc_invalid_op+0x16/0x40 [ 53.064526][ T5065] asm_exc_invalid_op+0x16/0x20 [ 53.069370][ T5065] RIP: 0010:hfsplus_cat_read_inode+0xa7c/0xec0 [ 53.075571][ T5065] Code: 37 3f 08 b8 fb ff ff ff 49 bf 00 00 00 00 00 fc ff df 4c 8b 74 24 18 eb 80 e8 c0 02 2d ff 0f 0b e9 01 f7 ff ff e8 b4 02 2d ff <0f> 0b e9 46 fa ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 44 f6 ff [ 53.095950][ T5065] RSP: 0018:ffffc90003b9f3a0 EFLAGS: 00010293 [ 53.102013][ T5065] RAX: ffffffff825ed30c RBX: 000000000000004e RCX: ffff88802bb88000 [ 53.109978][ T5065] RDX: 0000000000000000 RSI: 000000000000004e RDI: 00000000000000f8 [ 53.117944][ T5065] RBP: ffffc90003b9f6f0 R08: ffffffff825ecd48 R09: ffffffff825ec9b5 [ 53.125915][ T5065] R10: 0000000000000002 R11: ffff88802bb88000 R12: ffff8880206d9b00 [ 53.133879][ T5065] R13: ffff8880206d9cb0 R14: ffffc90003b9f790 R15: dffffc0000000000 [ 53.142284][ T5065] ? hfsplus_cat_read_inode+0x125/0xec0 [ 53.147826][ T5065] ? hfsplus_cat_read_inode+0x4b8/0xec0 [ 53.154165][ T5065] ? hfsplus_cat_read_inode+0xa7c/0xec0 [ 53.159715][ T5065] ? hfsplus_inode_write_fork+0x160/0x160 [ 53.165439][ T5065] ? rcu_read_lock_sched_held+0x87/0x110 [ 53.171069][ T5065] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 53.177046][ T5065] ? trace_raw_output_contention_end+0xd0/0xd0 [ 53.183207][ T5065] ? hfsplus_find_init+0x80/0x1b0 [ 53.188238][ T5065] ? trace_contention_end+0x72/0x1d0 [ 53.193518][ T5065] ? __mutex_lock_common+0x45f/0x26e0 [ 53.198893][ T5065] ? hfsplus_find_init+0x143/0x1b0 [ 53.204001][ T5065] ? rcu_read_lock_sched_held+0x87/0x110 [ 53.209627][ T5065] ? mutex_lock_io_nested+0x60/0x60 [ 53.214819][ T5065] ? __kmem_cache_alloc_node+0x21a/0x340 [ 53.220449][ T5065] ? hfsplus_find_init+0x80/0x1b0 [ 53.225645][ T5065] ? trace_kmalloc+0x30/0xf0 [ 53.230232][ T5065] ? __kmalloc+0xcc/0x190 [ 53.234561][ T5065] ? mutex_lock_nested+0x17/0x20 [ 53.239491][ T5065] ? hfsplus_find_init+0x143/0x1b0 [ 53.244601][ T5065] hfsplus_iget+0x576/0x630 [ 53.249104][ T5065] ? zisofs_uncompress_block+0x1140/0x1140 [ 53.254920][ T5065] hfsplus_fill_super+0xc6a/0x1b50 [ 53.260024][ T5065] ? __lock_acquire+0x1292/0x1f60 [ 53.265058][ T5065] ? hfsplus_mount+0x40/0x40 [ 53.269642][ T5065] ? bdev_name+0x2ce/0x3f0 [ 53.274054][ T5065] ? pointer+0x14a/0xfa0 [ 53.278297][ T5065] ? string+0x2d0/0x2d0 [ 53.282452][ T5065] ? vsnprintf+0x1cb0/0x1cb0 [ 53.287068][ T5065] ? vsnprintf+0x1bd8/0x1cb0 [ 53.291675][ T5065] ? ptr_to_hashval+0x70/0x70 [ 53.296370][ T5065] ? snprintf+0xc0/0x110 [ 53.300624][ T5065] ? vscnprintf+0x80/0x80 [ 53.304954][ T5065] ? set_blocksize+0x1ec/0x390 [ 53.309717][ T5065] ? sb_set_blocksize+0x95/0xf0 [ 53.314564][ T5065] mount_bdev+0x26c/0x3a0 [ 53.318896][ T5065] ? hfsplus_mount+0x40/0x40 [ 53.323481][ T5065] legacy_get_tree+0xea/0x180 [ 53.328154][ T5065] ? hfsplus_mark_mdb_dirty+0x1b0/0x1b0 [ 53.333693][ T5065] vfs_get_tree+0x88/0x270 [ 53.338103][ T5065] do_new_mount+0x289/0xad0 [ 53.342603][ T5065] ? do_move_mount_old+0x150/0x150 [ 53.347710][ T5065] ? user_path_at_empty+0x149/0x1a0 [ 53.352933][ T5065] __se_sys_mount+0x2d3/0x3c0 [ 53.357622][ T5065] ? __x64_sys_mount+0xc0/0xc0 [ 53.362401][ T5065] ? syscall_enter_from_user_mode+0x2e/0x1d0 [ 53.368397][ T5065] ? __x64_sys_mount+0x1c/0xc0 [ 53.373168][ T5065] do_syscall_64+0x3d/0xb0 [ 53.377589][ T5065] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 53.384619][ T5065] RIP: 0033:0x7f7fadb24e6a [ 53.389030][ T5065] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 53.408801][ T5065] RSP: 002b:00007ffe37ee4838 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 53.417229][ T5065] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f7fadb24e6a [ 53.425192][ T5065] RDX: 0000000020000600 RSI: 00000000200000c0 RDI: 00007ffe37ee4850 [ 53.433153][ T5065] RBP: 00007ffe37ee4850 R08: 00007ffe37ee4890 R09: 0000000000000616 [ 53.441118][ T5065] R10: 0000000002a14010 R11: 0000000000000286 R12: 0000000000000004 [ 53.449082][ T5065] R13: 00005555557ab2c0 R14: 0000000002a14010 R15: 00007ffe37ee4890 [ 53.457143][ T5065] [ 53.460303][ T5065] Kernel Offset: disabled [ 53.464697][ T5065] Rebooting in 86400 seconds..