Extracting prog: 2m29.23424811s
Minimizing prog: 1m8.247443395s
Simplifying prog options: 4m26.759549652s
Extracting C: 2m19.542028858s
Simplifying C: 0s
extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000040)='./file1\x00', 0x2810880, &(0x7f0000000700)=ANY=[], 0x8b, 0x2c1, &(0x7f0000000c80)="$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")
truncate(&(0x7f0000000280)='./file1\x00', 0x1fefff)
program crashed: kernel BUG in hfs_write_inode
single: successfully extracted reproducer
found reproducer with 2 syscalls
minimizing guilty program
testing program (duration=53.689314739s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000040)='./file1\x00', 0x2810880, &(0x7f0000000700)=ANY=[], 0x8b, 0x2c1, &(0x7f0000000c80)="$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")
program crashed: BUG: corrupted list in loop_process_work
extracting C reproducer
testing compiled C program (duration=53.689314739s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs
program did not crash
simplifying guilty program options
testing program (duration=53.689314739s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000040)='./file1\x00', 0x2810880, &(0x7f0000000700)=ANY=[], 0x8b, 0x2c1, &(0x7f0000000c80)="$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")
program did not crash
testing program (duration=53.689314739s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000040)='./file1\x00', 0x2810880, &(0x7f0000000700)=ANY=[], 0x8b, 0x2c1, &(0x7f0000000c80)="$eJzs3T9v004cx/HP2Wmaqv31Z2gREmJAhQom1JYFsVRCFY+BBQQ0QaqIWgFFAhYqZsQDYGdhYuJBMCEkZpiYGBm6Gd3Fac7NOe4fEjfi/ZICxr4/33Oc830jBQvAP+vm2vf3137al5FixZJuSJE9dEE1SWd0tvFsc3tju91qDmoolhpyLyO5mqavzPpmK1TV1nM1Mon9V00z/j4MR5qm6Y+qg0CVGtnfcehgJE1mn87YLzzOdmJpp+ogKmZ2tavnmq06DgBAtUzn/h5l9/mZbP0eRdJidtv37//f/qs43uO5rN2qQ6iYd/93WVZq7Pv7vzvUy/dcCmePR90s8bD92MVjXZ0rK7fANPmssj9ZdLFEUw832q2r61vtZqTXWs14xeYlraqZ5ayZkmgXAt3l1XXw1gaYdmOYsGNYKYh/LtTp0XssZz6bL+auSfROzb31Xy01tnsXQbL3Tt2a6MW/VNTc1uM7rlanVMEoT7lOzuVP7MBRxkUZibIzlcbKf0GQ5OOsB2vVta9WZ3TLRT1l7cwFa62U1Jq3tT54tXpXc3HNYTNvzW2zoF/6pDVv/R/Zs72o/k9muBFXMrsyuuMJ5oY1VzLxd+2cD7YZHW08CE6fZd7oga5r9umLl4/ut9utJ6PesDGMqK+PlQzwJG90L4KTEk9gw063JWXsHLv/UG14gU158dSPfeoaOlTh/pH6G92p8wANdifp0k7/0syEE633puf3//a2X406KIySnTxMJ//z8pUlt6SwfyQD1ulp2bLNa3E5kBtMejH0WjLu+/lJFWdA08UrnoPmXBevSJe8nSU5V6LT0tTAsY4Ts6avusf3/wAAAAAAAAAAAAAAAAAAAONmFL/o8Lrjf/QBAAAAAAAAAAAAAAAAAAAAAOAIip//29AQn/+b+x2A//zfCe2V4Pm/wJD9CQAA//8D8HJl")
program did not crash
testing program (duration=53.689314739s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000040)='./file1\x00', 0x2810880, &(0x7f0000000700)=ANY=[], 0x8b, 0x2c1, &(0x7f0000000c80)="$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")
program did not crash
reproducing took 10m23.78329422s
repro crashed as (corrupted=false):
list_add double add: new=ffff888027535770, prev=ffff888027535770, next=ffff888143300160.
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:37!
Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI
CPU: 0 UID: 0 PID: 6147 Comm: kworker/u8:8 Not tainted 6.14.0-rc2-next-20250214-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
Workqueue: loop2 loop_workfn
RIP: 0010:__list_add_valid_or_report+0xa4/0x130 lib/list_debug.c:35
Code: f7 74 11 b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 48 c7 c7 20 50 81 8c 4c 89 fe 4c 89 e2 4c 89 f1 e8 ed 4b 28 fc 90 <0f> 0b 48 c7 c7 20 4e 81 8c e8 de 4b 28 fc 90 0f 0b 48 c7 c7 c0 4e
RSP: 0018:ffffc90003427628 EFLAGS: 00010046
RAX: 0000000000000058 RBX: 1ffff11004ea6aee RCX: 30854b4ee371fc00
RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000
RBP: 1ffff1102866002d R08: ffffffff81a16efc R09: 1ffff92000684e60
R10: dffffc0000000000 R11: fffff52000684e61 R12: ffff888027535770
R13: dffffc0000000000 R14: ffff888143300160 R15: ffff888027535770
FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b3045ffff CR3: 0000000032544000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
__list_add_valid include/linux/list.h:88 [inline]
__list_add include/linux/list.h:150 [inline]
list_add_tail include/linux/list.h:183 [inline]
loop_process_work+0x1f96/0x21c0 drivers/block/loop.c:1977
process_one_work kernel/workqueue.c:3236 [inline]
process_scheduled_works+0xabe/0x18e0 kernel/workqueue.c:3317
worker_thread+0x870/0xd30 kernel/workqueue.c:3398
kthread+0x7a9/0x920 kernel/kthread.c:464
ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:148
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:__list_add_valid_or_report+0xa4/0x130 lib/list_debug.c:35
Code: f7 74 11 b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 48 c7 c7 20 50 81 8c 4c 89 fe 4c 89 e2 4c 89 f1 e8 ed 4b 28 fc 90 <0f> 0b 48 c7 c7 20 4e 81 8c e8 de 4b 28 fc 90 0f 0b 48 c7 c7 c0 4e
RSP: 0018:ffffc90003427628 EFLAGS: 00010046
RAX: 0000000000000058 RBX: 1ffff11004ea6aee RCX: 30854b4ee371fc00
RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000
RBP: 1ffff1102866002d R08: ffffffff81a16efc R09: 1ffff92000684e60
R10: dffffc0000000000 R11: fffff52000684e61 R12: ffff888027535770
R13: dffffc0000000000 R14: ffff888143300160 R15: ffff888027535770
FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b3045ffff CR3: 0000000032544000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
final repro crashed as (corrupted=false):
list_add double add: new=ffff888027535770, prev=ffff888027535770, next=ffff888143300160.
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:37!
Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI
CPU: 0 UID: 0 PID: 6147 Comm: kworker/u8:8 Not tainted 6.14.0-rc2-next-20250214-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
Workqueue: loop2 loop_workfn
RIP: 0010:__list_add_valid_or_report+0xa4/0x130 lib/list_debug.c:35
Code: f7 74 11 b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 48 c7 c7 20 50 81 8c 4c 89 fe 4c 89 e2 4c 89 f1 e8 ed 4b 28 fc 90 <0f> 0b 48 c7 c7 20 4e 81 8c e8 de 4b 28 fc 90 0f 0b 48 c7 c7 c0 4e
RSP: 0018:ffffc90003427628 EFLAGS: 00010046
RAX: 0000000000000058 RBX: 1ffff11004ea6aee RCX: 30854b4ee371fc00
RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000
RBP: 1ffff1102866002d R08: ffffffff81a16efc R09: 1ffff92000684e60
R10: dffffc0000000000 R11: fffff52000684e61 R12: ffff888027535770
R13: dffffc0000000000 R14: ffff888143300160 R15: ffff888027535770
FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b3045ffff CR3: 0000000032544000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
__list_add_valid include/linux/list.h:88 [inline]
__list_add include/linux/list.h:150 [inline]
list_add_tail include/linux/list.h:183 [inline]
loop_process_work+0x1f96/0x21c0 drivers/block/loop.c:1977
process_one_work kernel/workqueue.c:3236 [inline]
process_scheduled_works+0xabe/0x18e0 kernel/workqueue.c:3317
worker_thread+0x870/0xd30 kernel/workqueue.c:3398
kthread+0x7a9/0x920 kernel/kthread.c:464
ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:148
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:__list_add_valid_or_report+0xa4/0x130 lib/list_debug.c:35
Code: f7 74 11 b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 48 c7 c7 20 50 81 8c 4c 89 fe 4c 89 e2 4c 89 f1 e8 ed 4b 28 fc 90 <0f> 0b 48 c7 c7 20 4e 81 8c e8 de 4b 28 fc 90 0f 0b 48 c7 c7 c0 4e
RSP: 0018:ffffc90003427628 EFLAGS: 00010046
RAX: 0000000000000058 RBX: 1ffff11004ea6aee RCX: 30854b4ee371fc00
RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000
RBP: 1ffff1102866002d R08: ffffffff81a16efc R09: 1ffff92000684e60
R10: dffffc0000000000 R11: fffff52000684e61 R12: ffff888027535770
R13: dffffc0000000000 R14: ffff888143300160 R15: ffff888027535770
FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b3045ffff CR3: 0000000032544000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400