syzkaller login: [ 92.087666][ T9] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:4211' (ED25519) to the list of known hosts. executing program [ 93.701048][ T5315] loop0: detected capacity change from 0 to 1024 [ 93.786060][ T5315] hfsplus: new node 0 already hashed? [ 93.790858][ T5315] ------------[ cut here ]------------ [ 93.793521][ T5315] WARNING: CPU: 0 PID: 5315 at fs/hfsplus/bnode.c:579 hfsplus_bnode_create+0x461/0x4f0 [ 93.797677][ T5315] Modules linked in: [ 93.801556][ T5315] CPU: 0 UID: 0 PID: 5315 Comm: syz-executor174 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 93.807666][ T5315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 93.813119][ T5315] RIP: 0010:hfsplus_bnode_create+0x461/0x4f0 [ 93.815791][ T5315] Code: a1 8b 89 ee e8 00 8f 8f fe e9 cf fc ff ff e8 16 5f 28 ff 4c 89 ef e8 7e ab d0 08 48 c7 c7 e0 b0 a1 8b 89 ee e8 e0 8e 8f fe 90 <0f> 0b 90 eb b0 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c d6 fb ff ff [ 93.824151][ T5315] RSP: 0018:ffffc9000d1c7040 EFLAGS: 00010246 [ 93.826738][ T5315] RAX: 0000000000000023 RBX: ffff88803364e000 RCX: 209e5f1d45884300 [ 93.830844][ T5315] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 93.834398][ T5315] RBP: 0000000000000000 R08: ffffc9000d1c6d67 R09: 1ffff92001a38dac [ 93.838351][ T5315] R10: dffffc0000000000 R11: fffff52001a38dad R12: 0000000000000000 [ 93.842321][ T5315] R13: ffff88803364e0e0 R14: ffff888032d60100 R15: dffffc0000000000 [ 93.845737][ T5315] FS: 000055557248b380(0000) GS:ffff88808d252000(0000) knlGS:0000000000000000 [ 93.850455][ T5315] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.853765][ T5315] CR2: 00007fff17a6bb4c CR3: 000000003f875000 CR4: 0000000000352ef0 [ 93.857305][ T5315] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 93.861248][ T5315] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 93.865389][ T5315] Call Trace: [ 93.867065][ T5315] [ 93.868480][ T5315] ? do_raw_spin_unlock+0x4d/0x240 [ 93.871152][ T5315] hfsplus_bmap_alloc+0x5af/0x640 [ 93.873391][ T5315] ? __pfx_hfsplus_bmap_alloc+0x10/0x10 [ 93.876018][ T5315] ? hfsplus_bnode_read+0x135/0x2a0 [ 93.878748][ T5315] ? hfsplus_bnode_read+0x135/0x2a0 [ 93.881960][ T5315] hfs_bnode_split+0xcc/0xef0 [ 93.884105][ T5315] ? hfsplus_bnode_read+0x255/0x2a0 [ 93.886308][ T5315] ? hfsplus_bnode_read+0x135/0x2a0 [ 93.888764][ T5315] ? __asan_memcpy+0x40/0x70 [ 93.891184][ T5315] ? hfsplus_bnode_read_u16+0x87/0xd0 [ 93.893407][ T5315] ? __pfx_hfs_bnode_split+0x10/0x10 [ 93.895643][ T5315] hfsplus_brec_insert+0x38f/0xcc0 [ 93.897851][ T5315] ? __pfx_hfsplus_brec_insert+0x10/0x10 [ 93.900593][ T5315] hfsplus_create_cat+0x3b6/0x1000 [ 93.903099][ T5315] ? __pfx_hfsplus_create_cat+0x10/0x10 [ 93.905669][ T5315] ? do_raw_spin_unlock+0x4d/0x240 [ 93.908055][ T5315] ? do_raw_spin_unlock+0x4d/0x240 [ 93.910535][ T5315] ? _raw_spin_unlock+0x28/0x50 [ 93.913705][ T5315] ? hfsplus_new_inode+0x643/0x820 [ 93.916109][ T5315] hfsplus_fill_super+0x1314/0x1b70 [ 93.918371][ T5315] ? __pfx_hfsplus_fill_super+0x10/0x10 [ 93.921569][ T5315] ? string+0x279/0x2b0 [ 93.923801][ T5315] ? snprintf+0xda/0x120 [ 93.925706][ T5315] ? sb_set_blocksize+0x104/0x180 [ 93.927856][ T5315] ? setup_bdev_super+0x4c1/0x5b0 [ 93.930075][ T5315] get_tree_bdev_flags+0x40b/0x4d0 [ 93.932247][ T5315] ? __pfx_hfsplus_fill_super+0x10/0x10 [ 93.934595][ T5315] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 93.937168][ T5315] vfs_get_tree+0x92/0x2b0 [ 93.939466][ T5315] do_new_mount+0x24a/0xa40 [ 93.941865][ T5315] __se_sys_mount+0x317/0x410 [ 93.944025][ T5315] ? __pfx___se_sys_mount+0x10/0x10 [ 93.946250][ T5315] ? rcu_is_watching+0x15/0xb0 [ 93.948335][ T5315] ? do_syscall_64+0xbe/0x3b0 [ 93.950547][ T5315] ? __x64_sys_mount+0x20/0xc0 [ 93.953032][ T5315] do_syscall_64+0xfa/0x3b0 [ 93.955538][ T5315] ? lockdep_hardirqs_on+0x9c/0x150 [ 93.957831][ T5315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.960493][ T5315] ? clear_bhb_loop+0x60/0xb0 [ 93.962689][ T5315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.965412][ T5315] RIP: 0033:0x7f4c77345e2a [ 93.967826][ T5315] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 93.977161][ T5315] RSP: 002b:00007fffb557c1e8 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 93.981179][ T5315] RAX: ffffffffffffffda RBX: 00007fffb557c200 RCX: 00007f4c77345e2a [ 93.985050][ T5315] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 00007fffb557c200 [ 93.988714][ T5315] RBP: 0000200000000040 R08: 00007fffb557c240 R09: 00000000000006a9 [ 93.992318][ T5315] R10: 0000000002000010 R11: 0000000000000286 R12: 0000200000000000 [ 93.995934][ T5315] R13: 00007fffb557c240 R14: 0000000000000003 R15: 0000000002000010 [ 94.000069][ T5315] [ 94.001619][ T5315] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 94.004842][ T5315] CPU: 0 UID: 0 PID: 5315 Comm: syz-executor174 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 94.011063][ T5315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 94.015685][ T5315] Call Trace: [ 94.016981][ T5315] [ 94.018358][ T5315] dump_stack_lvl+0x99/0x250 [ 94.020568][ T5315] ? __asan_memcpy+0x40/0x70 [ 94.022606][ T5315] ? __pfx_dump_stack_lvl+0x10/0x10 [ 94.024998][ T5315] ? __pfx__printk+0x10/0x10 [ 94.027780][ T5315] panic+0x2db/0x790 [ 94.029912][ T5315] ? __pfx_panic+0x10/0x10 [ 94.031963][ T5315] ? show_trace_log_lvl+0x4fb/0x550 [ 94.034610][ T5315] __warn+0x31b/0x4b0 [ 94.036607][ T5315] ? hfsplus_bnode_create+0x461/0x4f0 [ 94.039198][ T5315] ? hfsplus_bnode_create+0x461/0x4f0 [ 94.041630][ T5315] report_bug+0x2be/0x4f0 [ 94.043179][ T5315] ? hfsplus_bnode_create+0x461/0x4f0 [ 94.045271][ T5315] ? hfsplus_bnode_create+0x461/0x4f0 [ 94.047474][ T5315] ? hfsplus_bnode_create+0x463/0x4f0 [ 94.050102][ T5315] handle_bug+0x84/0x160 [ 94.051932][ T5315] exc_invalid_op+0x1a/0x50 [ 94.053932][ T5315] asm_exc_invalid_op+0x1a/0x20 [ 94.055961][ T5315] RIP: 0010:hfsplus_bnode_create+0x461/0x4f0 [ 94.058716][ T5315] Code: a1 8b 89 ee e8 00 8f 8f fe e9 cf fc ff ff e8 16 5f 28 ff 4c 89 ef e8 7e ab d0 08 48 c7 c7 e0 b0 a1 8b 89 ee e8 e0 8e 8f fe 90 <0f> 0b 90 eb b0 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c d6 fb ff ff [ 94.068267][ T5315] RSP: 0018:ffffc9000d1c7040 EFLAGS: 00010246 [ 94.070930][ T5315] RAX: 0000000000000023 RBX: ffff88803364e000 RCX: 209e5f1d45884300 [ 94.074554][ T5315] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 94.078143][ T5315] RBP: 0000000000000000 R08: ffffc9000d1c6d67 R09: 1ffff92001a38dac [ 94.081834][ T5315] R10: dffffc0000000000 R11: fffff52001a38dad R12: 0000000000000000 [ 94.085435][ T5315] R13: ffff88803364e0e0 R14: ffff888032d60100 R15: dffffc0000000000 [ 94.089072][ T5315] ? do_raw_spin_unlock+0x4d/0x240 [ 94.091593][ T5315] hfsplus_bmap_alloc+0x5af/0x640 [ 94.094232][ T5315] ? __pfx_hfsplus_bmap_alloc+0x10/0x10 [ 94.096711][ T5315] ? hfsplus_bnode_read+0x135/0x2a0 [ 94.098905][ T5315] ? hfsplus_bnode_read+0x135/0x2a0 [ 94.101349][ T5315] hfs_bnode_split+0xcc/0xef0 [ 94.103710][ T5315] ? hfsplus_bnode_read+0x255/0x2a0 [ 94.106401][ T5315] ? hfsplus_bnode_read+0x135/0x2a0 [ 94.109149][ T5315] ? __asan_memcpy+0x40/0x70 [ 94.111452][ T5315] ? hfsplus_bnode_read_u16+0x87/0xd0 [ 94.113795][ T5315] ? __pfx_hfs_bnode_split+0x10/0x10 [ 94.116129][ T5315] hfsplus_brec_insert+0x38f/0xcc0 [ 94.118270][ T5315] ? __pfx_hfsplus_brec_insert+0x10/0x10 [ 94.120523][ T5315] hfsplus_create_cat+0x3b6/0x1000 [ 94.122747][ T5315] ? __pfx_hfsplus_create_cat+0x10/0x10 [ 94.125661][ T5315] ? do_raw_spin_unlock+0x4d/0x240 [ 94.128339][ T5315] ? do_raw_spin_unlock+0x4d/0x240 [ 94.130682][ T5315] ? _raw_spin_unlock+0x28/0x50 [ 94.132858][ T5315] ? hfsplus_new_inode+0x643/0x820 [ 94.135060][ T5315] hfsplus_fill_super+0x1314/0x1b70 [ 94.137309][ T5315] ? __pfx_hfsplus_fill_super+0x10/0x10 [ 94.139866][ T5315] ? string+0x279/0x2b0 [ 94.142056][ T5315] ? snprintf+0xda/0x120 [ 94.144288][ T5315] ? sb_set_blocksize+0x104/0x180 [ 94.146815][ T5315] ? setup_bdev_super+0x4c1/0x5b0 [ 94.149005][ T5315] get_tree_bdev_flags+0x40b/0x4d0 [ 94.151265][ T5315] ? __pfx_hfsplus_fill_super+0x10/0x10 [ 94.153693][ T5315] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 94.156322][ T5315] vfs_get_tree+0x92/0x2b0 [ 94.158303][ T5315] do_new_mount+0x24a/0xa40 [ 94.160674][ T5315] __se_sys_mount+0x317/0x410 [ 94.163101][ T5315] ? __pfx___se_sys_mount+0x10/0x10 [ 94.165571][ T5315] ? rcu_is_watching+0x15/0xb0 [ 94.167877][ T5315] ? do_syscall_64+0xbe/0x3b0 [ 94.169963][ T5315] ? __x64_sys_mount+0x20/0xc0 [ 94.171999][ T5315] do_syscall_64+0xfa/0x3b0 [ 94.173746][ T5315] ? lockdep_hardirqs_on+0x9c/0x150 [ 94.175863][ T5315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.178294][ T5315] ? clear_bhb_loop+0x60/0xb0 [ 94.180627][ T5315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.183564][ T5315] RIP: 0033:0x7f4c77345e2a [ 94.185500][ T5315] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 94.193804][ T5315] RSP: 002b:00007fffb557c1e8 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 94.198001][ T5315] RAX: ffffffffffffffda RBX: 00007fffb557c200 RCX: 00007f4c77345e2a [ 94.201780][ T5315] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 00007fffb557c200 [ 94.205206][ T5315] RBP: 0000200000000040 R08: 00007fffb557c240 R09: 00000000000006a9 [ 94.208586][ T5315] R10: 0000000002000010 R11: 0000000000000286 R12: 0000200000000000 [ 94.212289][ T5315] R13: 00007fffb557c240 R14: 0000000000000003 R15: 0000000002000010 [ 94.216202][ T5315] [ 94.218054][ T5315] Kernel Offset: disabled [ 94.219967][ T5315] Rebooting in 86400 seconds.. VM DIAGNOSIS: 15:47:29 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000111 RCX=0000000000000002 RDX=0000000000000008 RSI=0000000000000111 RDI=ffff888033b92440 RBP=ffffffff9345d560 RSP=ffffc90000007458 R8 =ffffc90000007420 R9 =0000000000000020 R10=dffffc0000000000 R11=ffffffff819ea610 R12=ffffffff962836f8 R13=ffffc900000074e0 R14=ffff888033b93098 R15=0000000000000001 RIP=ffffffff819e897e RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055557248b380 ffffffff 00c00000 GS =0000 ffff88808d252000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fff17a6bb4c CR3=000000003f875000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000440401 Opmask01=0000000000000001 Opmask02=00000000fff7ffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffb557c380 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4c773c4560 00007f4c773b85d8 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4c773a9924 00007f4c773bd240 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65723d73726f7272 6500747865003036 36396f7369007265 6c6c616b7a797300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40571856574a5757 4000515d40001513 131c4a564c005740 4949444e5f5c5600 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000