./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor996273383 <...> forked to background, child pid 4640 no interfaces have a carrier [ 26.690154][ T4641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.700425][ T4641] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.83' (ECDSA) to the list of known hosts. execve("./syz-executor996273383", ["./syz-executor996273383"], 0x7fff8f501760 /* 10 vars */) = 0 brk(NULL) = 0x5555569e1000 brk(0x5555569e1c40) = 0x5555569e1c40 arch_prctl(ARCH_SET_FS, 0x5555569e1300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor996273383", 4096) = 27 brk(0x555556a02c40) = 0x555556a02c40 brk(0x555556a03000) = 0x555556a03000 mprotect(0x7f4d256ee000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4d1d235000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 munmap(0x7f4d1d235000, 524288) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./file0", 0777) = 0 syzkaller login: [ 52.302645][ T5061] loop0: detected capacity change from 0 to 1024 [ 52.315603][ T5061] ------------[ cut here ]------------ [ 52.321151][ T5061] WARNING: CPU: 1 PID: 5061 at fs/hfsplus/inode.c:534 hfsplus_cat_read_inode+0x843/0x9c0 [ 52.331137][ T5061] Modules linked in: [ 52.335043][ T5061] CPU: 1 PID: 5061 Comm: syz-executor996 Not tainted 6.1.0-syzkaller-14446-g8395ae05cb5a #0 [ 52.345221][ T5061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 52.355349][ T5061] RIP: 0010:hfsplus_cat_read_inode+0x843/0x9c0 [ 52.361537][ T5061] Code: 8b 6b 30 48 8d bd b8 01 00 00 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 84 b4 fc ff ff e8 c7 9a 88 ff e9 aa fc ff ff e8 ad 92 3a ff <0f> 0b e9 52 f9 ff ff e8 91 9a 88 ff e9 c4 f8 ff ff 4c 89 f7 e8 e4 [ 52.381238][ T5061] RSP: 0018:ffffc90003e2f510 EFLAGS: 00010293 [ 52.387396][ T5061] RAX: 0000000000000000 RBX: ffff88807c331cb0 RCX: 0000000000000000 [ 52.395482][ T5061] RDX: ffff88801e6d0000 RSI: ffffffff8246bf33 RDI: 0000000000000005 [ 52.403743][ T5061] RBP: ffffc90003e2f858 R08: 0000000000000005 R09: 00000000000000f7 [ 52.411803][ T5061] R10: 0000000000000058 R11: 0000000000000000 R12: 1ffff920007c5ea3 [ 52.419865][ T5061] R13: 0000000000000058 R14: ffffc90003e2f884 R15: ffffc90003e2f870 [ 52.427931][ T5061] FS: 00005555569e1300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 52.436971][ T5061] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.443552][ T5061] CR2: 00000000005fdeb8 CR3: 000000002006c000 CR4: 0000000000350ee0 [ 52.451618][ T5061] Call Trace: [ 52.454900][ T5061] [ 52.457905][ T5061] ? hfsplus_find_cat+0x3b0/0x490 [ 52.462956][ T5061] ? hfsplus_inode_write_fork+0x170/0x170 [ 52.468736][ T5061] ? vfs_get_tree+0x8d/0x2f0 [ 52.473342][ T5061] ? lock_release+0x810/0x810 [ 52.478159][ T5061] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 52.484249][ T5061] ? rcu_read_lock_sched_held+0x3e/0x70 [ 52.489874][ T5061] ? trace_contention_end+0x153/0x1e0 [ 52.495320][ T5061] ? __mutex_lock+0x231/0x1360 [ 52.500083][ T5061] ? hfsplus_find_init+0x1bb/0x230 [ 52.505246][ T5061] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 52.510847][ T5061] ? hfsplus_find_init+0x95/0x230 [ 52.516230][ T5061] ? rcu_read_lock_sched_held+0x3e/0x70 [ 52.521803][ T5061] ? trace_kmalloc+0x35/0x100 [ 52.526729][ T5061] hfsplus_iget+0x4be/0x7c0 [ 52.531247][ T5061] ? hfsplus_evict_inode+0xe0/0xe0 [ 52.536458][ T5061] ? folio_flags.constprop.0+0x53/0x150 [ 52.542047][ T5061] ? hfsplus_btree_open+0x7d0/0xcd0 [ 52.547340][ T5061] hfsplus_fill_super+0xd15/0x1a30 [ 52.552500][ T5061] ? hfsplus_iget+0x7c0/0x7c0 [ 52.557237][ T5061] ? bdev_name.constprop.0+0x26e/0x4c0 [ 52.562725][ T5061] ? fourcc_string+0x760/0x760 [ 52.567545][ T5061] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 52.573537][ T5061] ? pointer+0x173/0xc50 [ 52.577856][ T5061] ? vsscanf+0x1f6f/0x2600 [ 52.582285][ T5061] ? resource_string.isra.0+0x16c0/0x16c0 [ 52.588057][ T5061] ? vsnprintf+0x4cd/0x16b0 [ 52.592583][ T5061] ? pointer+0xc50/0xc50 [ 52.596922][ T5061] ? sget+0x476/0x580 [ 52.600924][ T5061] ? lock_downgrade+0x6e0/0x6e0 [ 52.605834][ T5061] ? snprintf+0xbf/0x100 [ 52.610096][ T5061] ? vsprintf+0x30/0x30 [ 52.614240][ T5061] ? wait_for_completion_io_timeout+0x20/0x20 [ 52.620382][ T5061] ? up_write+0x1b0/0x520 [ 52.624733][ T5061] ? set_blocksize+0x2c9/0x370 [ 52.629591][ T5061] mount_bdev+0x351/0x410 [ 52.633936][ T5061] ? hfsplus_iget+0x7c0/0x7c0 [ 52.638703][ T5061] ? zisofs_cleanup+0x20/0x20 [ 52.643396][ T5061] legacy_get_tree+0x109/0x220 [ 52.648236][ T5061] vfs_get_tree+0x8d/0x2f0 [ 52.652693][ T5061] path_mount+0x132a/0x1e20 [ 52.657256][ T5061] ? kmem_cache_free+0xee/0x5c0 [ 52.662153][ T5061] ? finish_automount+0x960/0x960 [ 52.667256][ T5061] ? putname+0x102/0x140 [ 52.671532][ T5061] __x64_sys_mount+0x283/0x300 [ 52.676396][ T5061] ? copy_mnt_ns+0xb30/0xb30 [ 52.681007][ T5061] ? lockdep_hardirqs_on+0x7d/0x100 [ 52.686250][ T5061] ? _raw_spin_unlock_irq+0x2e/0x50 [ 52.691486][ T5061] ? ptrace_notify+0xfe/0x140 [ 52.696239][ T5061] do_syscall_64+0x39/0xb0 [ 52.700671][ T5061] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 52.706601][ T5061] RIP: 0033:0x7f4d25682aea [ 52.711053][ T5061] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 52.731093][ T5061] RSP: 002b:00007fff2e5a11d8 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 52.739561][ T5061] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f4d25682aea [ 52.747612][ T5061] RDX: 0000000020000180 RSI: 0000000020000640 RDI: 00007fff2e5a11f0 [ 52.755747][ T5061] RBP: 00007fff2e5a11f0 R08: 00007fff2e5a1230 R09: 00000000000005d1 [ 52.763742][ T5061] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000004 [ 52.771865][ T5061] R13: 00005555569e12c0 R14: 0000000000000000 R15: 00007fff2e5a1230 [ 52.779887][ T5061] [ 52.782894][ T5061] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 52.790152][ T5061] CPU: 1 PID: 5061 Comm: syz-executor996 Not tainted 6.1.0-syzkaller-14446-g8395ae05cb5a #0 [ 52.800372][ T5061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 52.810413][ T5061] Call Trace: [ 52.813675][ T5061] [ 52.816594][ T5061] dump_stack_lvl+0xd1/0x138 [ 52.821175][ T5061] panic+0x2cc/0x626 [ 52.825054][ T5061] ? panic_print_sys_info.part.0+0x110/0x110 [ 52.831063][ T5061] ? hfsplus_cat_read_inode+0x843/0x9c0 [ 52.836606][ T5061] check_panic_on_warn.cold+0x19/0x35 [ 52.841979][ T5061] __warn+0xf2/0x1a0 [ 52.845871][ T5061] ? hfsplus_cat_read_inode+0x843/0x9c0 [ 52.851413][ T5061] report_bug+0x1c0/0x210 [ 52.855738][ T5061] handle_bug+0x3c/0x70 [ 52.859890][ T5061] exc_invalid_op+0x18/0x50 [ 52.864388][ T5061] asm_exc_invalid_op+0x1a/0x20 [ 52.869232][ T5061] RIP: 0010:hfsplus_cat_read_inode+0x843/0x9c0 [ 52.875386][ T5061] Code: 8b 6b 30 48 8d bd b8 01 00 00 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 84 b4 fc ff ff e8 c7 9a 88 ff e9 aa fc ff ff e8 ad 92 3a ff <0f> 0b e9 52 f9 ff ff e8 91 9a 88 ff e9 c4 f8 ff ff 4c 89 f7 e8 e4 [ 52.894990][ T5061] RSP: 0018:ffffc90003e2f510 EFLAGS: 00010293 [ 52.901050][ T5061] RAX: 0000000000000000 RBX: ffff88807c331cb0 RCX: 0000000000000000 [ 52.909011][ T5061] RDX: ffff88801e6d0000 RSI: ffffffff8246bf33 RDI: 0000000000000005 [ 52.917064][ T5061] RBP: ffffc90003e2f858 R08: 0000000000000005 R09: 00000000000000f7 [ 52.925024][ T5061] R10: 0000000000000058 R11: 0000000000000000 R12: 1ffff920007c5ea3 [ 52.933011][ T5061] R13: 0000000000000058 R14: ffffc90003e2f884 R15: ffffc90003e2f870 [ 52.940984][ T5061] ? hfsplus_cat_read_inode+0x843/0x9c0 [ 52.946536][ T5061] ? hfsplus_find_cat+0x3b0/0x490 [ 52.951575][ T5061] ? hfsplus_inode_write_fork+0x170/0x170 [ 52.957298][ T5061] ? vfs_get_tree+0x8d/0x2f0 [ 52.961886][ T5061] ? lock_release+0x810/0x810 [ 52.966559][ T5061] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 52.972625][ T5061] ? rcu_read_lock_sched_held+0x3e/0x70 [ 52.978169][ T5061] ? trace_contention_end+0x153/0x1e0 [ 52.983540][ T5061] ? __mutex_lock+0x231/0x1360 [ 52.988306][ T5061] ? hfsplus_find_init+0x1bb/0x230 [ 52.993419][ T5061] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 52.998988][ T5061] ? hfsplus_find_init+0x95/0x230 [ 53.004009][ T5061] ? rcu_read_lock_sched_held+0x3e/0x70 [ 53.009562][ T5061] ? trace_kmalloc+0x35/0x100 [ 53.014241][ T5061] hfsplus_iget+0x4be/0x7c0 [ 53.018760][ T5061] ? hfsplus_evict_inode+0xe0/0xe0 [ 53.023862][ T5061] ? folio_flags.constprop.0+0x53/0x150 [ 53.029409][ T5061] ? hfsplus_btree_open+0x7d0/0xcd0 [ 53.034609][ T5061] hfsplus_fill_super+0xd15/0x1a30 [ 53.039720][ T5061] ? hfsplus_iget+0x7c0/0x7c0 [ 53.044391][ T5061] ? bdev_name.constprop.0+0x26e/0x4c0 [ 53.049850][ T5061] ? fourcc_string+0x760/0x760 [ 53.054610][ T5061] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 53.060587][ T5061] ? pointer+0x173/0xc50 [ 53.064824][ T5061] ? vsscanf+0x1f6f/0x2600 [ 53.069237][ T5061] ? resource_string.isra.0+0x16c0/0x16c0 [ 53.074959][ T5061] ? vsnprintf+0x4cd/0x16b0 [ 53.079462][ T5061] ? pointer+0xc50/0xc50 [ 53.083699][ T5061] ? sget+0x476/0x580 [ 53.087679][ T5061] ? lock_downgrade+0x6e0/0x6e0 [ 53.092531][ T5061] ? snprintf+0xbf/0x100 [ 53.096771][ T5061] ? vsprintf+0x30/0x30 [ 53.100920][ T5061] ? wait_for_completion_io_timeout+0x20/0x20 [ 53.106988][ T5061] ? up_write+0x1b0/0x520 [ 53.111315][ T5061] ? set_blocksize+0x2c9/0x370 [ 53.116084][ T5061] mount_bdev+0x351/0x410 [ 53.120498][ T5061] ? hfsplus_iget+0x7c0/0x7c0 [ 53.125175][ T5061] ? zisofs_cleanup+0x20/0x20 [ 53.129843][ T5061] legacy_get_tree+0x109/0x220 [ 53.134636][ T5061] vfs_get_tree+0x8d/0x2f0 [ 53.139071][ T5061] path_mount+0x132a/0x1e20 [ 53.143572][ T5061] ? kmem_cache_free+0xee/0x5c0 [ 53.148500][ T5061] ? finish_automount+0x960/0x960 [ 53.153527][ T5061] ? putname+0x102/0x140 [ 53.157768][ T5061] __x64_sys_mount+0x283/0x300 [ 53.162571][ T5061] ? copy_mnt_ns+0xb30/0xb30 [ 53.167155][ T5061] ? lockdep_hardirqs_on+0x7d/0x100 [ 53.172346][ T5061] ? _raw_spin_unlock_irq+0x2e/0x50 [ 53.177539][ T5061] ? ptrace_notify+0xfe/0x140 [ 53.182210][ T5061] do_syscall_64+0x39/0xb0 [ 53.186647][ T5061] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 53.192539][ T5061] RIP: 0033:0x7f4d25682aea [ 53.196953][ T5061] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 53.216816][ T5061] RSP: 002b:00007fff2e5a11d8 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 53.225226][ T5061] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f4d25682aea [ 53.233187][ T5061] RDX: 0000000020000180 RSI: 0000000020000640 RDI: 00007fff2e5a11f0 [ 53.241149][ T5061] RBP: 00007fff2e5a11f0 R08: 00007fff2e5a1230 R09: 00000000000005d1 [ 53.249110][ T5061] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000004 [ 53.257072][ T5061] R13: 00005555569e12c0 R14: 0000000000000000 R15: 00007fff2e5a1230 [ 53.265043][ T5061] [ 53.269074][ T5061] Kernel Offset: disabled [ 53.273569][ T5061] Rebooting in 86400 seconds..