program: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) socket$kcm(0x11, 0x200000000000002, 0x300) r3 = syz_open_dev$sndctrl(0x0, 0x1ff, 0x20000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d00000004000000020000000000"], 0x50) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r3, 0xe, &(0x7f00000002c0)="5e106e797831342807870e3d14947f735e3a22dfe5366965ab3bd9edbd8c14a849dfa01affd6ab34933a71caea5b98107a72e3b52ef7dcabbe856f6b22d4b794c3b65437af6a199c7863c618") bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000240)='./file1\x00', 0x3200014, &(0x7f00000006c0)=ANY=[], 0x1, 0x625, &(0x7f0000001540)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1210815, 0x0, 0x60, 0x0, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r5, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001500)=""/4105, 0x1009}, {&(0x7f0000000180)=""/69, 0x45}], 0x2}, 0x400000}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x20000, 0x0) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) creat(&(0x7f0000000040)='.\x02\x00', 0x0) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x19cc879, 0x0, 0x1, 0x6100, &(0x7f0000000d40)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mknod(&(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2c, 0xa7ed) [ 94.577761][ T5278] Bluetooth: hci0: command tx timeout [ 94.730303][ T5318] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.783207][ T5318] loop0: detected capacity change from 0 to 1024 [ 95.033745][ T932] kernel resource error, dev loop0, sector 56 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 95.325801][ T1055] kernel resource error, dev loop0, sector 222 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 95.325917][ T1055] Buffer I/O error on dev loop0, logical block 111, async page read [ 95.370960][ T1055] kernel resource error, dev loop0, sector 224 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 95.370988][ T1055] Buffer I/O error on dev loop0, logical block 112, async page read [ 95.396048][ T1055] kernel resource error, dev loop0, sector 226 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 95.396079][ T1055] Buffer I/O error on dev loop0, logical block 113, async page read [ 95.425867][ T1055] kernel resource error, dev loop0, sector 228 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 95.425894][ T1055] Buffer I/O error on dev loop0, logical block 114, async page read [ 95.441298][ T5319] BUG: unable to handle page fault for address: fffffffffffffffb [ 95.444500][ T5319] #PF: supervisor read access in kernel mode [ 95.447110][ T5319] #PF: error_code(0x0000) - not-present page [ 95.449637][ T5319] PGD eb4b067 P4D eb4b067 PUD eb4d067 PMD 0 [ 95.452192][ T5319] Oops: Oops: 0000 [#1] SMP KASAN NOPTI [ 95.454488][ T5319] CPU: 0 UID: 0 PID: 5319 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 95.458209][ T5319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.462284][ T5319] RIP: 0010:__hfsplus_brec_find+0xe0/0x850 [ 95.464839][ T5319] Code: e8 25 3c 7f ff 4d 85 ff 74 67 48 89 5c 24 38 4c 89 f8 48 c1 e8 03 48 89 44 24 10 42 80 3c 20 00 74 08 4c 89 ff e8 30 39 7f ff <49> 8b 1f 48 85 db 74 4b 4c 89 6c 24 28 48 83 c3 38 48 89 d8 48 c1 [ 95.472413][ T5319] RSP: 0018:ffffc9000db172c0 EFLAGS: 00010246 [ 95.474816][ T5319] RAX: 1fffffffffffffff RBX: ffffc9000db17600 RCX: 0000000000000000 [ 95.477961][ T5319] RDX: 0000000000000000 RSI: 00000000000000ff RDI: ffffc9000db17614 [ 95.481165][ T5319] RBP: ffffc9000db173b0 R08: ffffc9000db17613 R09: 0000000000000000 [ 95.484294][ T5319] R10: ffffc9000db17600 R11: fffff52001b62ec3 R12: dffffc0000000000 [ 95.487576][ T5319] R13: ffffc9000db175e0 R14: 1ffff92001b62e60 R15: fffffffffffffffb [ 95.490658][ T5319] FS: 00007fbdaebd46c0(0000) GS:ffff88808c2bc000(0000) knlGS:0000000000000000 [ 95.494204][ T5319] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.496813][ T5319] CR2: fffffffffffffffb CR3: 0000000012f31000 CR4: 0000000000352ef0 [ 95.500543][ T5319] Call Trace: [ 95.502113][ T5319] [ 95.503514][ T5319] ? __pfx_hfs_find_rec_by_key+0x10/0x10 [ 95.505831][ T5319] ? __pfx___hfsplus_brec_find+0x10/0x10 [ 95.508135][ T5319] ? __pfx_hfsplus_bnode_read_key+0x10/0x10 [ 95.510546][ T5319] ? do_raw_spin_unlock+0x4d/0x200 [ 95.512701][ T5319] hfsplus_brec_insert+0x90e/0xde0 [ 95.514874][ T5319] ? __pfx_hfsplus_brec_insert+0x10/0x10 [ 95.517187][ T5319] ? hfsplus_cat_set_perms+0x267/0x580 [ 95.519470][ T5319] hfsplus_create_cat+0xa7e/0x1240 [ 95.521638][ T5319] ? __pfx_hfsplus_create_cat+0x10/0x10 [ 95.524091][ T5319] ? do_raw_spin_unlock+0x4d/0x200 [ 95.526205][ T5319] ? _raw_spin_unlock+0x28/0x50 [ 95.528269][ T5319] ? hfsplus_new_inode+0x632/0x7f0 [ 95.530361][ T5319] hfsplus_mknod+0x184/0x3c0 [ 95.532269][ T5319] lookup_open+0xc0d/0x1a40 [ 95.534060][ T5319] path_openat+0x677/0x1d60 [ 95.535926][ T5319] do_file_open+0x23e/0x4a0 [ 95.537902][ T5319] ? __pfx_do_file_open+0x10/0x10 [ 95.540174][ T5319] ? _raw_spin_unlock+0x28/0x50 [ 95.542301][ T5319] ? alloc_fd+0x651/0x6c0 [ 95.544240][ T5319] do_sys_openat2+0x115/0x200 [ 95.546049][ T5319] ? __se_sys_futex+0x3a8/0x450 [ 95.548077][ T5319] ? __pfx_do_sys_openat2+0x10/0x10 [ 95.550215][ T5319] ? rcu_is_watching+0x16/0xb0 [ 95.552261][ T5319] __x64_sys_openat+0x138/0x170 [ 95.554374][ T5319] do_syscall_64+0x166/0x520 [ 95.556404][ T5319] ? trace_irq_disable+0x3b/0x140 [ 95.558513][ T5319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.561047][ T5319] ? clear_bhb_loop+0x70/0xc0 [ 95.562919][ T5319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.565333][ T5319] RIP: 0033:0x7fbdb279e159 [ 95.567343][ T5319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.575446][ T5319] RSP: 002b:00007fbdaebd3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 95.578979][ T5319] RAX: ffffffffffffffda RBX: 00007fbdb2a26090 RCX: 00007fbdb279e159 [ 95.582080][ T5319] RDX: 000000000000275a RSI: 0000200000000200 RDI: ffffffffffffff9c [ 95.584818][ T5319] RBP: 00007fbdb283506b R08: 0000000000000000 R09: 0000000000000000 [ 95.588162][ T5319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.591583][ T5319] R13: 00007fbdb2a26128 R14: 00007fbdb2a26090 R15: 00007ffd12cf6098 [ 95.595050][ T5319] [ 95.596359][ T5319] Modules linked in: [ 95.597980][ T5319] CR2: fffffffffffffffb [ 95.599673][ T5319] ---[ end trace 0000000000000000 ]--- [ 95.602053][ T5319] RIP: 0010:__hfsplus_brec_find+0xe0/0x850 [ 95.602075][ T5319] Code: e8 25 3c 7f ff 4d 85 ff 74 67 48 89 5c 24 38 4c 89 f8 48 c1 e8 03 48 89 44 24 10 42 80 3c 20 00 74 08 4c 89 ff e8 30 39 7f ff <49> 8b 1f 48 85 db 74 4b 4c 89 6c 24 28 48 83 c3 38 48 89 d8 48 c1 [ 95.602085][ T5319] RSP: 0018:ffffc9000db172c0 EFLAGS: 00010246 [ 95.602097][ T5319] RAX: 1fffffffffffffff RBX: ffffc9000db17600 RCX: 0000000000000000 [ 95.602106][ T5319] RDX: 0000000000000000 RSI: 00000000000000ff RDI: ffffc9000db17614 [ 95.602114][ T5319] RBP: ffffc9000db173b0 R08: ffffc9000db17613 R09: 0000000000000000 [ 95.602122][ T5319] R10: ffffc9000db17600 R11: fffff52001b62ec3 R12: dffffc0000000000 [ 95.602130][ T5319] R13: ffffc9000db175e0 R14: 1ffff92001b62e60 R15: fffffffffffffffb [ 95.602138][ T5319] FS: 00007fbdaebd46c0(0000) GS:ffff88808c2bc000(0000) knlGS:0000000000000000 [ 95.602147][ T5319] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.602155][ T5319] CR2: fffffffffffffffb CR3: 0000000012f31000 CR4: 0000000000352ef0 [ 95.602192][ T5319] Kernel panic - not syncing: Fatal exception [ 95.646055][ T5319] Kernel Offset: disabled [ 95.648000][ T5319] Rebooting in 86400 seconds..