./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor99320903
<...>
DUID 00:04:ef:48:41:79:0b:5e:d9:4d:76:cd:70:81:2e:69:59:2c
forked to background, child pid 4665
[ 21.111114][ T4666] 8021q: adding VLAN 0 to HW filter on device bond0
[ 21.121853][ T4666] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.0.54' (ECDSA) to the list of known hosts.
execve("./syz-executor99320903", ["./syz-executor99320903"], 0x7ffd79cb1830 /* 10 vars */) = 0
brk(NULL) = 0x555556869000
brk(0x555556869c40) = 0x555556869c40
arch_prctl(ARCH_SET_FS, 0x555556869300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor99320903", 4096) = 26
brk(0x55555688ac40) = 0x55555688ac40
brk(0x55555688b000) = 0x55555688b000
mprotect(0x7fa928d51000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
memfd_create("syzkaller", 0) = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa920897000
write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288
munmap(0x7fa920897000, 524288) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
ioctl(4, LOOP_SET_FD, 3) = 0
close(3) = 0
mkdir("./file1", 0777) = 0
mount("/dev/loop0", "./file1", "hfsplus", MS_NODEV|MS_SYNCHRONOUS|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "") = 0
openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3
chdir("./file1") = 0
ioctl(4, LOOP_CLR_FD) = 0
close(4) = 0
openat(AT_FDCWD, "blkio.throttle.io_serviced_recursive", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
syzkaller login: [ 41.209547][ T4997] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=4997 'syz-executor993'
[ 41.226279][ T4997] loop0: detected capacity change from 0 to 1024
[ 41.255593][ T4997] hfsplus: new node 0 already hashed?
[ 41.261367][ T4997] ------------[ cut here ]------------
[ 41.266952][ T4997] WARNING: CPU: 0 PID: 4997 at fs/hfsplus/bnode.c:573 hfsplus_bnode_create+0x14c/0x530
[ 41.276666][ T4997] Modules linked in:
[ 41.280541][ T4997] CPU: 0 PID: 4997 Comm: syz-executor993 Not tainted 6.4.0-rc6-syzkaller-00269-g1b29d271614a #0
[ 41.291078][ T4997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 41.301201][ T4997] RIP: 0010:hfsplus_bnode_create+0x14c/0x530
[ 41.307247][ T4997] Code: 89 ef 44 89 fe e8 44 a5 33 ff 44 39 fd 75 9b e8 9a a9 33 ff 4c 89 f7 e8 92 aa c3 07 89 ee 48 c7 c7 c0 e6 66 8a e8 b4 8d 17 ff <0f> 0b e8 7d a9 33 ff 4c 89 e0 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e
[ 41.326886][ T4997] RSP: 0018:ffffc90003a1f2d0 EFLAGS: 00010282
[ 41.332938][ T4997] RAX: 0000000000000023 RBX: ffff888078926000 RCX: 0000000000000000
[ 41.340955][ T4997] RDX: 0000000000000000 RSI: ffffffff8168bd1c RDI: 0000000000000005
[ 41.349056][ T4997] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000
[ 41.357080][ T4997] R10: 0000000080000000 R11: 0000000000000001 R12: ffff888017e4a700
[ 41.365074][ T4997] R13: dffffc0000000000 R14: ffff8880789260e0 R15: 0000000000000000
[ 41.373125][ T4997] FS: 0000555556869300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 41.382087][ T4997] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 41.388871][ T4997] CR2: 000000002000f000 CR3: 0000000078545000 CR4: 0000000000350ef0
[ 41.396869][ T4997] Call Trace:
[ 41.400216][ T4997]
[ 41.403123][ T4997] ? __warn+0xe6/0x390
[ 41.407309][ T4997] ? hfsplus_bnode_create+0x14c/0x530
[ 41.412690][ T4997] ? report_bug+0x2da/0x500
[ 41.417241][ T4997] ? handle_bug+0x3c/0x70
[ 41.421567][ T4997] ? exc_invalid_op+0x18/0x50
[ 41.426359][ T4997] ? asm_exc_invalid_op+0x1a/0x20
[ 41.431395][ T4997] ? vprintk+0x8c/0xa0
[ 41.435448][ T4997] ? hfsplus_bnode_create+0x14c/0x530
[ 41.440963][ T4997] hfsplus_bmap_alloc+0x6d0/0x7d0
[ 41.446039][ T4997] ? hfsplus_bmap_reserve+0x410/0x410
[ 41.451424][ T4997] hfs_btree_inc_height.isra.0+0xe6/0x9e0
[ 41.457209][ T4997] ? hfs_bnode_split+0xda0/0xda0
[ 41.462168][ T4997] ? rcu_is_watching+0x12/0xb0
[ 41.467012][ T4997] ? trace_contention_end+0xd8/0x100
[ 41.472317][ T4997] hfsplus_brec_insert+0x9e5/0xc40
[ 41.478473][ T4997] ? hfsplus_find_init+0x174/0x230
[ 41.483611][ T4997] ? hfsplus_brec_find+0x3ee/0x520
[ 41.489140][ T4997] ? hfsplus_brec_keylen+0x350/0x350
[ 41.494448][ T4997] ? __kmem_cache_alloc_node+0x1b0/0x320
[ 41.500149][ T4997] ? hfsplus_bmap_reserve+0x336/0x410
[ 41.505580][ T4997] __hfsplus_ext_write_extent+0x479/0x5b0
[ 41.511310][ T4997] hfsplus_ext_read_extent+0x845/0xae0
[ 41.516803][ T4997] ? mutex_lock_io_nested+0x11a0/0x11a0
[ 41.522359][ T4997] ? hfsplus_free_extents+0x510/0x510
[ 41.527778][ T4997] hfsplus_file_extend+0x684/0xf90
[ 41.532904][ T4997] ? hfsplus_free_fork+0x7d0/0x7d0
[ 41.538044][ T4997] ? __lock_buffer+0x70/0x70
[ 41.542667][ T4997] ? folio_create_buffers+0x10b/0x160
[ 41.548068][ T4997] ? rcu_is_watching+0x12/0xb0
[ 41.552844][ T4997] ? __mark_inode_dirty+0x297/0xd60
[ 41.558071][ T4997] hfsplus_get_block+0x1b3/0x9b0
[ 41.563016][ T4997] __block_write_begin_int+0x3bd/0x14b0
[ 41.568593][ T4997] ? hfsplus_file_extend+0xf90/0xf90
[ 41.573880][ T4997] ? invalidate_bh_lrus_cpu+0x140/0x140
[ 41.579451][ T4997] ? folio_flags.constprop.0+0x53/0x150
[ 41.585020][ T4997] ? hfsplus_file_extend+0xf90/0xf90
[ 41.590400][ T4997] block_write_begin+0xb9/0x4d0
[ 41.595292][ T4997] cont_write_begin+0x534/0x740
[ 41.600294][ T4997] ? hfsplus_file_extend+0xf90/0xf90
[ 41.605627][ T4997] ? block_write_begin+0x4d0/0x4d0
[ 41.610842][ T4997] ? fault_in_readable+0x129/0x210
[ 41.616016][ T4997] ? fault_in_subpage_writeable+0x20/0x20
[ 41.621791][ T4997] hfsplus_write_begin+0x87/0x150
[ 41.626862][ T4997] ? hfsplus_file_extend+0xf90/0xf90
[ 41.632154][ T4997] generic_perform_write+0x256/0x570
[ 41.637482][ T4997] ? generic_file_readonly_mmap+0x180/0x180
[ 41.643379][ T4997] ? new_inode+0x280/0x280
[ 41.647818][ T4997] ? generic_write_checks+0x2c0/0x400
[ 41.653220][ T4997] __generic_file_write_iter+0x2ae/0x500
[ 41.658887][ T4997] generic_file_write_iter+0xe3/0x350
[ 41.664266][ T4997] vfs_write+0x945/0xd50
[ 41.668535][ T4997] ? kernel_write+0x670/0x670
[ 41.673207][ T4997] ? recalc_sigpending_tsk+0x18b/0x1d0
[ 41.678731][ T4997] ? find_held_lock+0x2d/0x110
[ 41.683499][ T4997] ? lock_downgrade+0x690/0x690
[ 41.688395][ T4997] ? __fget_light+0x20a/0x270
[ 41.693103][ T4997] ksys_write+0x12b/0x250
[ 41.697465][ T4997] ? __ia32_sys_read+0xb0/0xb0
[ 41.702226][ T4997] ? lockdep_hardirqs_on+0x7d/0x100
[ 41.707452][ T4997] ? _raw_spin_unlock_irq+0x2e/0x50
[ 41.712656][ T4997] ? ptrace_notify+0xfe/0x140
[ 41.717362][ T4997] do_syscall_64+0x39/0xb0
[ 41.721777][ T4997] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 41.727695][ T4997] RIP: 0033:0x7fa928ce37c9
[ 41.732105][ T4997] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 41.751759][ T4997] RSP: 002b:00007fff31c5e1c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 41.760227][ T4997] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa928ce37c9
[ 41.768257][ T4997] RDX: 0000000000029000 RSI: 0000000020000040 RDI: 0000000000000004
[ 41.776244][ T4997] RBP: 00007fa928ca3060 R08: 0000000000000000 R09: 0000000000000000
[ 41.784201][ T4997] R10: 0000000000000642 R11: 0000000000000246 R12: 00007fa928ca30f0
[ 41.792214][ T4997] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 41.800210][ T4997]
[ 41.803211][ T4997] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 41.810480][ T4997] CPU: 0 PID: 4997 Comm: syz-executor993 Not tainted 6.4.0-rc6-syzkaller-00269-g1b29d271614a #0
[ 41.820865][ T4997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 41.830981][ T4997] Call Trace:
[ 41.834238][ T4997]
[ 41.837155][ T4997] dump_stack_lvl+0xd9/0x150
[ 41.841725][ T4997] panic+0x686/0x730
[ 41.845601][ T4997] ? panic_smp_self_stop+0xa0/0xa0
[ 41.850690][ T4997] ? show_trace_log_lvl+0x284/0x390
[ 41.855875][ T4997] ? hfsplus_bnode_create+0x14c/0x530
[ 41.861316][ T4997] check_panic_on_warn+0xb1/0xc0
[ 41.866235][ T4997] __warn+0xf2/0x390
[ 41.870108][ T4997] ? hfsplus_bnode_create+0x14c/0x530
[ 41.875472][ T4997] report_bug+0x2da/0x500
[ 41.879793][ T4997] handle_bug+0x3c/0x70
[ 41.883928][ T4997] exc_invalid_op+0x18/0x50
[ 41.888410][ T4997] asm_exc_invalid_op+0x1a/0x20
[ 41.893246][ T4997] RIP: 0010:hfsplus_bnode_create+0x14c/0x530
[ 41.899210][ T4997] Code: 89 ef 44 89 fe e8 44 a5 33 ff 44 39 fd 75 9b e8 9a a9 33 ff 4c 89 f7 e8 92 aa c3 07 89 ee 48 c7 c7 c0 e6 66 8a e8 b4 8d 17 ff <0f> 0b e8 7d a9 33 ff 4c 89 e0 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e
[ 41.918802][ T4997] RSP: 0018:ffffc90003a1f2d0 EFLAGS: 00010282
[ 41.924855][ T4997] RAX: 0000000000000023 RBX: ffff888078926000 RCX: 0000000000000000
[ 41.932810][ T4997] RDX: 0000000000000000 RSI: ffffffff8168bd1c RDI: 0000000000000005
[ 41.940769][ T4997] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000
[ 41.948725][ T4997] R10: 0000000080000000 R11: 0000000000000001 R12: ffff888017e4a700
[ 41.956685][ T4997] R13: dffffc0000000000 R14: ffff8880789260e0 R15: 0000000000000000
[ 41.964646][ T4997] ? vprintk+0x8c/0xa0
[ 41.968810][ T4997] hfsplus_bmap_alloc+0x6d0/0x7d0
[ 41.973832][ T4997] ? hfsplus_bmap_reserve+0x410/0x410
[ 41.979288][ T4997] hfs_btree_inc_height.isra.0+0xe6/0x9e0
[ 41.985091][ T4997] ? hfs_bnode_split+0xda0/0xda0
[ 41.990023][ T4997] ? rcu_is_watching+0x12/0xb0
[ 41.994783][ T4997] ? trace_contention_end+0xd8/0x100
[ 42.000059][ T4997] hfsplus_brec_insert+0x9e5/0xc40
[ 42.005253][ T4997] ? hfsplus_find_init+0x174/0x230
[ 42.010363][ T4997] ? hfsplus_brec_find+0x3ee/0x520
[ 42.015471][ T4997] ? hfsplus_brec_keylen+0x350/0x350
[ 42.020750][ T4997] ? __kmem_cache_alloc_node+0x1b0/0x320
[ 42.026463][ T4997] ? hfsplus_bmap_reserve+0x336/0x410
[ 42.031832][ T4997] __hfsplus_ext_write_extent+0x479/0x5b0
[ 42.037552][ T4997] hfsplus_ext_read_extent+0x845/0xae0
[ 42.043003][ T4997] ? mutex_lock_io_nested+0x11a0/0x11a0
[ 42.048539][ T4997] ? hfsplus_free_extents+0x510/0x510
[ 42.053913][ T4997] hfsplus_file_extend+0x684/0xf90
[ 42.059018][ T4997] ? hfsplus_free_fork+0x7d0/0x7d0
[ 42.064121][ T4997] ? __lock_buffer+0x70/0x70
[ 42.068713][ T4997] ? folio_create_buffers+0x10b/0x160
[ 42.074081][ T4997] ? rcu_is_watching+0x12/0xb0
[ 42.078842][ T4997] ? __mark_inode_dirty+0x297/0xd60
[ 42.084032][ T4997] hfsplus_get_block+0x1b3/0x9b0
[ 42.088967][ T4997] __block_write_begin_int+0x3bd/0x14b0
[ 42.094500][ T4997] ? hfsplus_file_extend+0xf90/0xf90
[ 42.099867][ T4997] ? invalidate_bh_lrus_cpu+0x140/0x140
[ 42.105399][ T4997] ? folio_flags.constprop.0+0x53/0x150
[ 42.110948][ T4997] ? hfsplus_file_extend+0xf90/0xf90
[ 42.116225][ T4997] block_write_begin+0xb9/0x4d0
[ 42.121074][ T4997] cont_write_begin+0x534/0x740
[ 42.125915][ T4997] ? hfsplus_file_extend+0xf90/0xf90
[ 42.131278][ T4997] ? block_write_begin+0x4d0/0x4d0
[ 42.136380][ T4997] ? fault_in_readable+0x129/0x210
[ 42.141486][ T4997] ? fault_in_subpage_writeable+0x20/0x20
[ 42.147200][ T4997] hfsplus_write_begin+0x87/0x150
[ 42.152214][ T4997] ? hfsplus_file_extend+0xf90/0xf90
[ 42.157494][ T4997] generic_perform_write+0x256/0x570
[ 42.162777][ T4997] ? generic_file_readonly_mmap+0x180/0x180
[ 42.168660][ T4997] ? new_inode+0x280/0x280
[ 42.173067][ T4997] ? generic_write_checks+0x2c0/0x400
[ 42.178429][ T4997] __generic_file_write_iter+0x2ae/0x500
[ 42.184060][ T4997] generic_file_write_iter+0xe3/0x350
[ 42.189425][ T4997] vfs_write+0x945/0xd50
[ 42.193660][ T4997] ? kernel_write+0x670/0x670
[ 42.198322][ T4997] ? recalc_sigpending_tsk+0x18b/0x1d0
[ 42.203780][ T4997] ? find_held_lock+0x2d/0x110
[ 42.208536][ T4997] ? lock_downgrade+0x690/0x690
[ 42.213379][ T4997] ? __fget_light+0x20a/0x270
[ 42.218051][ T4997] ksys_write+0x12b/0x250
[ 42.222369][ T4997] ? __ia32_sys_read+0xb0/0xb0
[ 42.227122][ T4997] ? lockdep_hardirqs_on+0x7d/0x100
[ 42.232337][ T4997] ? _raw_spin_unlock_irq+0x2e/0x50
[ 42.237541][ T4997] ? ptrace_notify+0xfe/0x140
[ 42.242309][ T4997] do_syscall_64+0x39/0xb0
[ 42.246717][ T4997] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 42.252605][ T4997] RIP: 0033:0x7fa928ce37c9
[ 42.257006][ T4997] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 42.276689][ T4997] RSP: 002b:00007fff31c5e1c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 42.285175][ T4997] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa928ce37c9
[ 42.293132][ T4997] RDX: 0000000000029000 RSI: 0000000020000040 RDI: 0000000000000004
[ 42.301088][ T4997] RBP: 00007fa928ca3060 R08: 0000000000000000 R09: 0000000000000000
[ 42.309049][ T4997] R10: 0000000000000642 R11: 0000000000000246 R12: 00007fa928ca30f0
[ 42.317006][ T4997] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 42.324974][ T4997]
[ 42.329030][ T4997] Kernel Offset: disabled
[ 42.333404][ T4997] Rebooting in 86400 seconds..