program: r0 = fsopen(&(0x7f00000003c0)='ext3\x00', 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x800080, &(0x7f0000002600)=ANY=[], 0x1, 0x5f6, &(0x7f000001f6c0)="$eJzs3U9rHOcdB/Dvrv545YKjKHbilkBFCqFU1N6VoHZ6aZqmRZRQAj300ouoZVt47QRpU5QcGrf0EHrKS0gPegOlxxR8aHJsT4HeVHIs9K6bwszOalfWxpGstXdtfz4w+zwzz8yzv+c3fzwzwmyAZ9bqUqbvpZbVpbe2i/ndnZX27s7K7V49yZkk9aSRpFYs/nuSL5O76U75dq9hoDzii08bNz7/+LOPunONairXrz1ou+M5iGW+G2tZjqq/5VP3d3iEC0kWTxcfjMZ+z3+HNp/yvAQAJlktmRq2fD45W92sF88B3bvi7j32E+3uuAMAAACAx+C5vexlO+fGHQcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Sarf/69VU71XX0yt9/v/s9WyVPUn2r1xBwAAAAAAAAAAI/DdvexlO+d68/u18m/+r5Qz58vPb+W9bGU9m7mU7aylk04200oyP9DR7PZap7PZOsaWy0O3XH484wUAAAAAAACAp9Sfstr/+z8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEyCWjLVLcrpfK8+n/p0kkaS2WK9u8m/e/XJMnOitV9/ZHEAAADA5HhuL3vZzrne/H6tfOZ/sXzub+S93EknG+mknfVcK98FdJ/667s7K+3dnZXbxXS035/+/0RhlD2m++5h+DdfLNeYy/VslEsu5Xd5J+1cS73csnCxF8/wuP5YxFT7SeWYkV2rymLkv6zKyTBfZmTmICPNKrYiG88/OBMn3Dv3f1Mr9YM3P+cfQc7PVmUxnjcnOufLA0ffiw/ORLLwm79cudm+c+vm9a2lyRnSQ7o/EysDmXjpmcpEs8zEhYP51fwiv85SFvN2NrOR32ctnaxnMW+WtbXqeC4+53d3Vva7PhySqdcPvV99+5sima32S/cqerKYXim3PZeN/Crv5Fq5R5u5kitZzo/yWpqH9vCFoXv4w/2quTzr6yc767/3/aoyk+TnJ36R+ygVeX1+IK+D19z5sm1wST9LC6O/Nk5/p6oUR88bE3dt7GdipvxXopeJF+7PxOGd+9fywNlq37m1eXPt3WN+36tVWWTgZ0cysT91+hE9rOJ4WSh2Vjl3+Ogo2l4Y2tYq284ftNWPtF04aPumM3W2uoc72tNy2fbS0LbudhcH2obdbwEw8c7+4Ozs3P/m/jX3ydyf527OvdV448zVMy/PZuafMz+ebk69Wn+59rd8kj/0n/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICHt/X+B7fW2u31TRWVZ6+ymGQ0HS5OwnBGWRn3lQl41C53br97eev9D364cXvtxvqN9TuvNa9ebbVaV5qXr2+016vPcUcJAIxS/6Z/3JEAAAAAAAAAAAAAAABf53H8d+JxjxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHi6rS5l+l5qaTUvNYv53Z2VdjH16v01G0lqReUfyX++TO6mO2U+v53qrVT7uu/54tPGjc8//uyjfl+N3vq1B213PAOxJPWqHFV/y6furz/CxSQLVQlj91UAAAD//xFWB70=") r1 = open(&(0x7f0000000200)='./file2\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r2, 0x0, 0x2f, &(0x7f0000000440)="00000000cc600bd7020000f7c548b3bf9216000d", 0xffffffffffffffdb) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='./file2\x00') r3 = memfd_create(&(0x7f0000000140)='TIPCv2\x00', 0x8) ftruncate(r3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000100)={0x0, @dev, @remote}, &(0x7f0000000140)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000180)={@local}, &(0x7f00000001c0)=0x14) r4 = socket(0x200000100000011, 0x3, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f0000003b00)=[{{&(0x7f0000000880)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'ip6gre0\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff7f850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000006840)={r7, 0x70000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x60}, 0x50) bind$packet(r4, &(0x7f0000000180)={0x11, 0x16, r6}, 0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'gretap0\x00', &(0x7f0000000240)={'tunl0\x00', 0x0, 0x8000, 0x40, 0x0, 0x4, {{0x17, 0x4, 0x3, 0x4, 0x5c, 0x65, 0x0, 0x4, 0x2f, 0x0, @empty, @private=0xa010100, {[@generic={0x7, 0xd, "c804f38de2f1b313dd4400"}, @timestamp={0x44, 0x20, 0xf2, 0x0, 0x4, [0x3ff, 0x7fff, 0x8, 0x42c, 0x6, 0xb25, 0xffff]}, @end, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xb, 0x64, [@empty, @loopback]}, @lsrr={0x83, 0xb, 0x6e, [@remote, @empty]}]}}}}}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="38000000031401002cbd7008231b828932918400737f7d310000000001004100727803000000000000000000000000000000000000009df186f328af458c39dc62fecfd9f378dddec94f7c74"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000380)={'erspan0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x700, 0x8, 0x6, 0x9, {{0x6, 0x4, 0x0, 0x8, 0x18, 0x64, 0x0, 0x7, 0x2b, 0x0, @multicast1, @loopback, {[@end]}}}}}) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6d0, &(0x7f0000001340)="$eJzs3cFvHFcdB/DvrNeOt1TBaRMaoSKsRCpIEYkTK4VwwSCEcqhQVQ49W4nTWN0kVeKitEKQAoITEof+AQXJNw4IiXtQuHApt159rITEJeIQ9bJoZmfXu/Y6Xif2OoHPJxrPe/Nm3vzmN29mvOusNsD/rctn0ryfIpfPvHG3rG+sL7Y31heP1M3tJGW5kTS7sxQ3k+JBslS2FwNTBubbfLx66a3PHm583q0166laf6q/3exYIY/Yx716ynzd3/zILafH6r/bVxVeXkxypZ4Pmxm3r6EVy6Sdrudw6Drb3NvL5jte78Czr/d0KrrPzW3mkhfqJ3P1O0F9d2hMLsKDsae7HAAAADynPr112BEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA86f+/v+inhr1PPMpet//P9NbVpefQUtjr3n/QOMAAAAAAAAAgMn4+qM8yt0c7dU7RfU3/1NV5Xi+6CRfyvu5k5XcztnczXLWspbbOZ9kbqCjmbvLa2u3z/e3LI3e8sLILS9M6ogBAAAAAAAA4H/SL9Pa/Ps/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8C4pkqjurpuP1PHNpNLPZlnvJP5PMHHa8e1CMWnh/8nEAAADAU5l9gm2+/CiPcjdHe/VOUb3m/0r1enk27+dm1rKatbSzkqv1a+jyVX9jY32xvbG+eKOcyvpwv9//957CmKl7mKpqo/Z8slqjlWtZrZaczZUqmKtpdPd9OjnZi2cgrgEflTEV36uNGVmzTmu5s9/v9C7Cvhh+K6LxmDVbm8El/Yws1LGVWx7rZqCo3qhJtmZi17PTHKrNVb1O9/d0Po3+Oz/HDyDnL9Tz8nh+c6A536t+JhqpMnGhN/rKa+bxmUi+8dc/vX29ffPd69funHl2DmkXUzss3zomFgcy8cpznYnmHtdfqDJxol+/nB/lJzmT+byZ21nNT7OctaykU7cv1+O5/Dn3+EwtDdXe3C2Smfq8dM/ZODHN54dVaTmnqm2PZjVFbuVqVvJ69e9CzufbuZiLuTRwhk/sGHd1bNVV39h61ffO9N9GBn/6m3WhvLv9dvMut/S4I95pdO6X7r2/zOuxgbx2R/3D/lrHBq6DhYEsvdTLzvTIzp/k3tj8al0o9/GrXZ4TkzVXZ6K8gHpPiV50L3cz0ayeRdvH+R865XZp3+x0ri+/t0P/97bUX6vn5bBa/9pua/eMPhX7qxwvL2W2vpMMj46y7eX+XWagrbM5lrttw0/ccrsTVVtR9K7UH+dWNQC2X6kz9e9w23u6ULW9MrJtsWo7OdA29PtWbqWdqxPIHwBP4h9v94tzeWGm9a/Wp61PWr9uXW+9MfuDI9858upMpv8+/d3mwtRrjVeLv+ST/Hzz9T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDk7nzw4bvL7fbK7dGFxs5NQ4VWti7Zqecjo/sp6i/0GWNfz0VhNsnQkup7jiYeRmtrGNsKnV8kE89P70sER6/zu7LQ3DaiRhWWhpb8eXuHH+0xwmK86+IAC41MdqdTGT0ADvGmBEzEubUb752788GH31q9sfzOyjsrN6cvXry0cOni64vnrq22Vxa6Pw87SuAgbD70DzsSAAAAAAAAAAAAYFyjPhhw6sXdPjQy1mc8/M9CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYF9cPpPm/RQ5v3B2oaxvrC+2y6lX3lyzmaTRSIqfJcWDZCndKXMD3RX544N0Ruzn49VLb332cOPzzb6a3fWTRj3f2eNbk9yrp8wnmarnT2GovytP3V/xn94xlAn7otPpLD1dfLA//hsAAP//P3v0tA==") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000c00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001f80)='./bus\x00') [ 69.452424][ T5319] syz.0.0 (5319) used greatest stack depth: 9136 bytes left [ 68.585328][ T5304] Bluetooth: hci0: command tx timeout [ 68.664499][ T5319] loop0: detected capacity change from 0 to 1024 [ 68.727625][ T5319] netlink: 40 bytes leftover after parsing attributes in process `syz.0.0'. [ 68.746456][ T5319] hfsplus: new node 0 already hashed? [ 68.748742][ T5319] ------------[ cut here ]------------ [ 68.751310][ T5319] WARNING: CPU: 0 PID: 5319 at fs/hfsplus/bnode.c:573 hfsplus_bnode_create+0x3b6/0x440 [ 68.755379][ T5319] Modules linked in: [ 68.757019][ T5319] CPU: 0 UID: 0 PID: 5319 Comm: syz.0.0 Not tainted 6.14.0-rc7-syzkaller-00179-gb3ee1e460951 #0 [ 68.761157][ T5319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.765175][ T5319] RIP: 0010:hfsplus_bnode_create+0x3b6/0x440 [ 68.767472][ T5319] Code: 44 89 e6 e8 3c 34 81 fe e9 78 fd ff ff e8 32 0e 1c ff 4c 89 ff e8 4a f3 65 09 48 c7 c7 00 1c 41 8c 44 89 e6 e8 1b 34 81 fe 90 <0f> 0b 90 eb af 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 83 fc ff ff 48 [ 68.774588][ T5319] RSP: 0018:ffffc900019b7078 EFLAGS: 00010246 [ 68.776926][ T5319] RAX: 0000000000000023 RBX: ffff888033dc9100 RCX: 8bef000b1b3d9200 [ 68.780029][ T5319] RDX: ffffc9000e40a000 RSI: 0000000000000e69 RDI: 0000000000000e6a [ 68.783338][ T5319] RBP: 0000000000000000 R08: ffffffff81a136fc R09: 1ffff92000336dac [ 68.786421][ T5319] R10: dffffc0000000000 R11: fffff52000336dad R12: 0000000000000000 [ 68.789350][ T5319] R13: dffffc0000000000 R14: ffff8880348a0000 R15: ffff8880348a00e0 [ 68.792746][ T5319] FS: 00007f1b4abf56c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 68.796453][ T5319] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.798906][ T5319] CR2: 00007f1b4267fc00 CR3: 000000004354a000 CR4: 0000000000352ef0 [ 68.802258][ T5319] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 68.805177][ T5319] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 68.808231][ T5319] Call Trace: [ 68.809719][ T5319] [ 68.810971][ T5319] ? __warn+0x165/0x4d0 [ 68.812623][ T5319] ? hfsplus_bnode_create+0x3b6/0x440 [ 68.814766][ T5319] ? report_bug+0x2b3/0x500 [ 68.821978][ T5319] ? hfsplus_bnode_create+0x3b6/0x440 [ 68.824104][ T5319] ? handle_bug+0x60/0x90 [ 68.825824][ T5319] ? exc_invalid_op+0x1a/0x50 [ 68.827652][ T5319] ? asm_exc_invalid_op+0x1a/0x20 [ 68.829626][ T5319] ? __wake_up_klogd+0xcc/0x110 [ 68.831579][ T5319] ? hfsplus_bnode_create+0x3b6/0x440 [ 68.833670][ T5319] ? hfsplus_bnode_create+0x3b5/0x440 [ 68.835809][ T5319] hfsplus_bmap_alloc+0x59a/0x640 [ 68.837828][ T5319] ? __pfx_hfsplus_bmap_alloc+0x10/0x10 [ 68.840043][ T5319] ? __asan_memcpy+0x40/0x70 [ 68.841818][ T5319] hfs_bnode_split+0xde/0x1110 [ 68.843687][ T5319] ? hfsplus_bnode_dump+0x582/0x6a0 [ 68.845575][ T5319] ? hfsplus_bnode_read+0xe9/0x1e0 [ 68.847629][ T5319] ? hfsplus_bnode_read+0x19b/0x1e0 [ 68.849773][ T5319] ? hfsplus_bnode_read_u16+0x99/0x120 [ 68.851919][ T5319] ? __pfx_hfs_bnode_split+0x10/0x10 [ 68.853657][ T5319] ? __pfx_hfs_find_rec_by_key+0x10/0x10 [ 68.855787][ T5319] hfsplus_brec_insert+0x3a6/0xde0 [ 68.857869][ T5319] ? do_raw_spin_unlock+0x58/0x8b0 [ 68.860055][ T5319] ? __pfx_hfsplus_brec_insert+0x10/0x10 [ 68.862216][ T5319] ? hfsplus_cat_set_perms+0x2d1/0x630 [ 68.864205][ T5319] hfsplus_create_cat+0xef6/0x1b70 [ 68.866402][ T5319] ? __pfx_hfsplus_create_cat+0x10/0x10 [ 68.868685][ T5319] ? do_raw_spin_unlock+0x58/0x8b0 [ 68.870893][ T5319] ? _raw_spin_unlock+0x28/0x50 [ 68.872814][ T5319] hfsplus_mknod+0x16a/0x2a0 [ 68.874632][ T5319] ? __pfx_hfsplus_create+0x10/0x10 [ 68.876505][ T5319] path_openat+0x193c/0x3590 [ 68.878149][ T5319] ? __pfx_path_openat+0x10/0x10 [ 68.880271][ T5319] do_filp_open+0x27f/0x4e0 [ 68.882077][ T5319] ? __pfx_do_filp_open+0x10/0x10 [ 68.884063][ T5319] ? do_raw_spin_lock+0x14f/0x370 [ 68.886100][ T5319] do_sys_openat2+0x13e/0x1d0 [ 68.888014][ T5319] ? __might_fault+0xaa/0x120 [ 68.889953][ T5319] ? __pfx_do_sys_openat2+0x10/0x10 [ 68.892116][ T5319] ? rcu_is_watching+0x15/0xb0 [ 68.894140][ T5319] ? __rseq_handle_notify_resume+0x34d/0x14e0 [ 68.896629][ T5319] __x64_sys_open+0x225/0x270 [ 68.898411][ T5319] ? __pfx___x64_sys_open+0x10/0x10 [ 68.900674][ T5319] ? do_syscall_64+0x100/0x230 [ 68.902505][ T5319] ? do_syscall_64+0xb6/0x230 [ 68.904260][ T5319] do_syscall_64+0xf3/0x230 [ 68.906013][ T5319] ? clear_bhb_loop+0x35/0x90 [ 68.907794][ T5319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.910137][ T5319] RIP: 0033:0x7f1b4e78d169 [ 68.912048][ T5319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.919408][ T5319] RSP: 002b:00007f1b4abf5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 68.922798][ T5319] RAX: ffffffffffffffda RBX: 00007f1b4e9a5fa0 RCX: 00007f1b4e78d169 [ 68.925613][ T5319] RDX: 0000000000000000 RSI: 0000000400141042 RDI: 0000200000000080 [ 68.928920][ T5319] RBP: 00007f1b4e80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 68.932209][ T5319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.935134][ T5319] R13: 0000000000000000 R14: 00007f1b4e9a5fa0 R15: 00007fff6b34c6f8 [ 68.938127][ T5319] [ 68.939372][ T5319] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 68.942072][ T5319] CPU: 0 UID: 0 PID: 5319 Comm: syz.0.0 Not tainted 6.14.0-rc7-syzkaller-00179-gb3ee1e460951 #0 [ 68.945868][ T5319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.949911][ T5319] Call Trace: [ 68.951199][ T5319] [ 68.952318][ T5319] dump_stack_lvl+0x241/0x360 [ 68.954149][ T5319] ? __pfx_dump_stack_lvl+0x10/0x10 [ 68.956198][ T5319] ? __pfx__printk+0x10/0x10 [ 68.958046][ T5319] ? vscnprintf+0x5d/0x90 [ 68.959769][ T5319] panic+0x349/0x880 [ 68.961350][ T5319] ? __warn+0x174/0x4d0 [ 68.962981][ T5319] ? __pfx_panic+0x10/0x10 [ 68.964797][ T5319] __warn+0x344/0x4d0 [ 68.966510][ T5319] ? hfsplus_bnode_create+0x3b6/0x440 [ 68.968660][ T5319] report_bug+0x2b3/0x500 [ 68.970332][ T5319] ? hfsplus_bnode_create+0x3b6/0x440 [ 68.972319][ T5319] handle_bug+0x60/0x90 [ 68.973999][ T5319] exc_invalid_op+0x1a/0x50 [ 68.975872][ T5319] asm_exc_invalid_op+0x1a/0x20 [ 68.977895][ T5319] RIP: 0010:hfsplus_bnode_create+0x3b6/0x440 [ 68.980271][ T5319] Code: 44 89 e6 e8 3c 34 81 fe e9 78 fd ff ff e8 32 0e 1c ff 4c 89 ff e8 4a f3 65 09 48 c7 c7 00 1c 41 8c 44 89 e6 e8 1b 34 81 fe 90 <0f> 0b 90 eb af 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 83 fc ff ff 48 [ 68.987225][ T5319] RSP: 0018:ffffc900019b7078 EFLAGS: 00010246 [ 68.989632][ T5319] RAX: 0000000000000023 RBX: ffff888033dc9100 RCX: 8bef000b1b3d9200 [ 68.992861][ T5319] RDX: ffffc9000e40a000 RSI: 0000000000000e69 RDI: 0000000000000e6a [ 68.995976][ T5319] RBP: 0000000000000000 R08: ffffffff81a136fc R09: 1ffff92000336dac [ 68.998888][ T5319] R10: dffffc0000000000 R11: fffff52000336dad R12: 0000000000000000 [ 69.001782][ T5319] R13: dffffc0000000000 R14: ffff8880348a0000 R15: ffff8880348a00e0 [ 69.005026][ T5319] ? __wake_up_klogd+0xcc/0x110 [ 69.006920][ T5319] ? hfsplus_bnode_create+0x3b5/0x440 [ 69.009048][ T5319] hfsplus_bmap_alloc+0x59a/0x640 [ 69.011021][ T5319] ? __pfx_hfsplus_bmap_alloc+0x10/0x10 [ 69.013226][ T5319] ? __asan_memcpy+0x40/0x70 [ 69.015079][ T5319] hfs_bnode_split+0xde/0x1110 [ 69.016992][ T5319] ? hfsplus_bnode_dump+0x582/0x6a0 [ 69.019083][ T5319] ? hfsplus_bnode_read+0xe9/0x1e0 [ 69.021177][ T5319] ? hfsplus_bnode_read+0x19b/0x1e0 [ 69.023271][ T5319] ? hfsplus_bnode_read_u16+0x99/0x120 [ 69.025521][ T5319] ? __pfx_hfs_bnode_split+0x10/0x10 [ 69.027732][ T5319] ? __pfx_hfs_find_rec_by_key+0x10/0x10 [ 69.029905][ T5319] hfsplus_brec_insert+0x3a6/0xde0 [ 69.031951][ T5319] ? do_raw_spin_unlock+0x58/0x8b0 [ 69.033954][ T5319] ? __pfx_hfsplus_brec_insert+0x10/0x10 [ 69.036161][ T5319] ? hfsplus_cat_set_perms+0x2d1/0x630 [ 69.038333][ T5319] hfsplus_create_cat+0xef6/0x1b70 [ 69.040423][ T5319] ? __pfx_hfsplus_create_cat+0x10/0x10 [ 69.042693][ T5319] ? do_raw_spin_unlock+0x58/0x8b0 [ 69.044699][ T5319] ? _raw_spin_unlock+0x28/0x50 [ 69.046647][ T5319] hfsplus_mknod+0x16a/0x2a0 [ 69.048373][ T5319] ? __pfx_hfsplus_create+0x10/0x10 [ 69.050562][ T5319] path_openat+0x193c/0x3590 [ 69.052441][ T5319] ? __pfx_path_openat+0x10/0x10 [ 69.054332][ T5319] do_filp_open+0x27f/0x4e0 [ 69.056072][ T5319] ? __pfx_do_filp_open+0x10/0x10 [ 69.058023][ T5319] ? do_raw_spin_lock+0x14f/0x370 [ 69.060059][ T5319] do_sys_openat2+0x13e/0x1d0 [ 69.061906][ T5319] ? __might_fault+0xaa/0x120 [ 69.063750][ T5319] ? __pfx_do_sys_openat2+0x10/0x10 [ 69.065828][ T5319] ? rcu_is_watching+0x15/0xb0 [ 69.067734][ T5319] ? __rseq_handle_notify_resume+0x34d/0x14e0 [ 69.070063][ T5319] __x64_sys_open+0x225/0x270 [ 69.072007][ T5319] ? __pfx___x64_sys_open+0x10/0x10 [ 69.074054][ T5319] ? do_syscall_64+0x100/0x230 [ 69.075985][ T5319] ? do_syscall_64+0xb6/0x230 [ 69.077854][ T5319] do_syscall_64+0xf3/0x230 [ 69.079697][ T5319] ? clear_bhb_loop+0x35/0x90 [ 69.081661][ T5319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.083982][ T5319] RIP: 0033:0x7f1b4e78d169 [ 69.085706][ T5319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.093335][ T5319] RSP: 002b:00007f1b4abf5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 69.096561][ T5319] RAX: ffffffffffffffda RBX: 00007f1b4e9a5fa0 RCX: 00007f1b4e78d169 [ 69.099668][ T5319] RDX: 0000000000000000 RSI: 0000000400141042 RDI: 0000200000000080 [ 69.102720][ T5319] RBP: 00007f1b4e80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 69.105749][ T5319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.108769][ T5319] R13: 0000000000000000 R14: 00007f1b4e9a5fa0 R15: 00007fff6b34c6f8 [ 69.111967][ T5319] [ 69.113501][ T5319] Kernel Offset: disabled [ 69.115325][ T5319] Rebooting in 86400 seconds..