./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3427296793 <...> Warning: Permanently added '10.128.0.189' (ED25519) to the list of known hosts. execve("./syz-executor3427296793", ["./syz-executor3427296793"], 0x7ffcc04c5df0 /* 10 vars */) = 0 brk(NULL) = 0x555556350000 brk(0x555556350d00) = 0x555556350d00 arch_prctl(ARCH_SET_FS, 0x555556350380) = 0 set_tid_address(0x555556350650) = 5033 set_robust_list(0x555556350660, 24) = 0 rseq(0x555556350ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3427296793", 4096) = 28 getrandom("\x9c\x7e\x73\x11\x20\xd4\xd0\xe2", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556350d00 brk(0x555556371d00) = 0x555556371d00 brk(0x555556372000) = 0x555556372000 mprotect(0x7f7339604000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7331154000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 munmap(0x7f7331154000, 524288) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./file1", 0777) = 0 mount("/dev/loop0", "./file1", "hfsplus", MS_NODEV|MS_SYNCHRONOUS|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "") = 0 openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 chdir("./file1") = 0 ioctl(4, LOOP_CLR_FD) = 0 close(4) = 0 openat(AT_FDCWD, "blkio.throttle.io_serviced_recursive", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [ 71.931596][ T5033] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5033 'syz-executor342' [ 71.952181][ T5033] loop0: detected capacity change from 0 to 1024 [ 71.985872][ T5033] hfsplus: new node 0 already hashed? [ 71.991878][ T5033] ------------[ cut here ]------------ [ 71.997524][ T5033] WARNING: CPU: 0 PID: 5033 at fs/hfsplus/bnode.c:573 hfsplus_bnode_create+0x14b/0x530 [ 72.007284][ T5033] Modules linked in: [ 72.011193][ T5033] CPU: 0 PID: 5033 Comm: syz-executor342 Not tainted 6.5.0-rc3-next-20230727-syzkaller #0 [ 72.021359][ T5033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 72.031519][ T5033] RIP: 0010:hfsplus_bnode_create+0x14b/0x530 [ 72.037652][ T5033] Code: 7b 1e 30 ff 45 39 fc 75 9e e8 81 23 30 ff 4c 89 f7 e8 f9 e6 e3 07 e8 74 23 30 ff 44 89 e6 48 c7 c7 00 5d 87 8a e8 15 5f 13 ff <0f> 0b e8 5e 23 30 ff 48 89 d8 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e [ 72.057567][ T5033] RSP: 0018:ffffc90003b1f2d8 EFLAGS: 00010286 [ 72.063703][ T5033] RAX: 0000000000000023 RBX: ffff8881452e3d00 RCX: 0000000000000000 [ 72.071761][ T5033] RDX: 0000000000000000 RSI: ffffffff816adc22 RDI: 0000000000000005 [ 72.079851][ T5033] RBP: ffff88802785a000 R08: 0000000000000005 R09: 0000000000000000 [ 72.087882][ T5033] R10: 0000000080000000 R11: 0000000000000001 R12: 0000000000000000 [ 72.095956][ T5033] R13: dffffc0000000000 R14: ffff88802785a0e0 R15: 0000000000000000 [ 72.103961][ T5033] FS: 0000555556350380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 72.112964][ T5033] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.119683][ T5033] CR2: 000000002000f000 CR3: 000000001ed30000 CR4: 00000000003506f0 [ 72.127766][ T5033] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 72.135952][ T5033] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 72.143960][ T5033] Call Trace: [ 72.147297][ T5033] [ 72.150257][ T5033] ? __warn+0xe6/0x380 [ 72.154357][ T5033] ? hfsplus_bnode_create+0x14b/0x530 [ 72.159886][ T5033] ? report_bug+0x3bc/0x580 [ 72.164461][ T5033] ? handle_bug+0x3c/0x70 [ 72.168882][ T5033] ? exc_invalid_op+0x17/0x40 [ 72.173624][ T5033] ? asm_exc_invalid_op+0x1a/0x20 [ 72.178757][ T5033] ? vprintk+0x82/0x90 [ 72.182862][ T5033] ? hfsplus_bnode_create+0x14b/0x530 [ 72.188338][ T5033] ? hfsplus_bnode_create+0x14b/0x530 [ 72.193779][ T5033] hfsplus_bmap_alloc+0x728/0x830 [ 72.198907][ T5033] ? hfsplus_bmap_reserve+0x410/0x410 [ 72.204327][ T5033] ? lock_acquire+0x1ae/0x510 [ 72.209194][ T5033] ? lock_sync+0x190/0x190 [ 72.213709][ T5033] hfs_btree_inc_height.isra.0+0x100/0x8b0 [ 72.219664][ T5033] ? hfs_bnode_split+0xdc0/0xdc0 [ 72.224721][ T5033] ? rcu_is_watching+0x12/0xb0 [ 72.229621][ T5033] ? trace_contention_end+0xd6/0x100 [ 72.235097][ T5033] ? __mutex_lock+0x25b/0x1340 [ 72.239923][ T5033] hfsplus_brec_insert+0x9fe/0xc50 [ 72.245128][ T5033] ? hfsplus_brec_find+0x3e8/0x520 [ 72.250308][ T5033] ? hfsplus_brec_keylen+0x340/0x340 [ 72.255872][ T5033] ? hfsplus_bmap_reserve+0x332/0x410 [ 72.261322][ T5033] ? kasan_set_track+0x25/0x30 [ 72.266169][ T5033] __hfsplus_ext_write_extent+0x49c/0x5e0 [ 72.271945][ T5033] ? hfsplus_find_init+0x16d/0x200 [ 72.277181][ T5033] hfsplus_ext_read_extent+0x84c/0xb00 [ 72.282729][ T5033] ? hfsplus_free_extents+0x510/0x510 [ 72.288196][ T5033] ? hfsplus_get_block+0x3b8/0x9e0 [ 72.293348][ T5033] hfsplus_file_extend+0x695/0x1090 [ 72.298795][ T5033] ? hfsplus_free_fork+0x820/0x820 [ 72.303988][ T5033] ? __lock_buffer+0x70/0x70 [ 72.308710][ T5033] ? spin_bug+0x1d0/0x1d0 [ 72.313164][ T5033] hfsplus_get_block+0x1ae/0x9e0 [ 72.318251][ T5033] ? hfsplus_file_extend+0x1090/0x1090 [ 72.323773][ T5033] __block_write_begin_int+0x3c0/0x1470 [ 72.329408][ T5033] ? hfsplus_file_extend+0x1090/0x1090 [ 72.334966][ T5033] ? invalidate_bh_lrus_cpu+0x170/0x170 [ 72.340551][ T5033] block_write_begin+0xb1/0x490 [ 72.345475][ T5033] ? hfsplus_file_extend+0x1090/0x1090 [ 72.351182][ T5033] cont_write_begin+0x52f/0x730 [ 72.356234][ T5033] ? hfsplus_file_extend+0x1090/0x1090 [ 72.361770][ T5033] ? block_write_begin+0x490/0x490 [ 72.366978][ T5033] ? fault_in_readable+0x106/0x200 [ 72.372144][ T5033] ? fault_in_readable+0x150/0x200 [ 72.377358][ T5033] ? fault_in_subpage_writeable+0x20/0x20 [ 72.383142][ T5033] hfsplus_write_begin+0x87/0x140 [ 72.388261][ T5033] ? hfsplus_file_extend+0x1090/0x1090 [ 72.394230][ T5033] generic_perform_write+0x278/0x600 [ 72.399710][ T5033] ? folio_add_wait_queue+0x1c0/0x1c0 [ 72.405178][ T5033] ? new_inode+0x270/0x270 [ 72.409646][ T5033] ? generic_write_checks_count+0x2d0/0x2d0 [ 72.415656][ T5033] __generic_file_write_iter+0x1f9/0x240 [ 72.421356][ T5033] generic_file_write_iter+0xe3/0x350 [ 72.426897][ T5033] vfs_write+0x650/0xe40 [ 72.431187][ T5033] ? kernel_write+0x6c0/0x6c0 [ 72.435980][ T5033] ksys_write+0x12f/0x250 [ 72.440358][ T5033] ? __ia32_sys_read+0xb0/0xb0 [ 72.445300][ T5033] ? lockdep_hardirqs_on+0x7d/0x100 [ 72.450557][ T5033] ? _raw_spin_unlock_irq+0x2e/0x50 [ 72.456067][ T5033] ? ptrace_notify+0xf4/0x130 [ 72.460808][ T5033] do_syscall_64+0x38/0xb0 [ 72.465386][ T5033] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 72.471512][ T5033] RIP: 0033:0x7f7339591639 [ 72.476034][ T5033] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 72.495780][ T5033] RSP: 002b:00007ffeba1e26c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 72.504228][ T5033] RAX: ffffffffffffffda RBX: 00007ffeba1e2898 RCX: 00007f7339591639 [ 72.512272][ T5033] RDX: 0000000000029000 RSI: 0000000020000040 RDI: 0000000000000004 [ 72.520382][ T5033] RBP: 00007f7339604610 R08: 0000000000000000 R09: 00007ffeba1e2898 [ 72.528432][ T5033] R10: 0000000000000642 R11: 0000000000000246 R12: 0000000000000001 [ 72.536517][ T5033] R13: 00007ffeba1e2888 R14: 0000000000000001 R15: 0000000000000001 [ 72.544706][ T5033] [ 72.547763][ T5033] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 72.555076][ T5033] CPU: 0 PID: 5033 Comm: syz-executor342 Not tainted 6.5.0-rc3-next-20230727-syzkaller #0 [ 72.565025][ T5033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 72.575099][ T5033] Call Trace: [ 72.578654][ T5033] [ 72.581611][ T5033] dump_stack_lvl+0xd9/0x1b0 [ 72.586363][ T5033] panic+0x6a4/0x750 [ 72.590284][ T5033] ? panic_smp_self_stop+0xa0/0xa0 [ 72.595423][ T5033] ? show_trace_log_lvl+0x29d/0x3c0 [ 72.600658][ T5033] ? hfsplus_bnode_create+0x14b/0x530 [ 72.606095][ T5033] check_panic_on_warn+0xab/0xb0 [ 72.611056][ T5033] __warn+0xf2/0x380 [ 72.614971][ T5033] ? hfsplus_bnode_create+0x14b/0x530 [ 72.620371][ T5033] report_bug+0x3bc/0x580 [ 72.624732][ T5033] handle_bug+0x3c/0x70 [ 72.628924][ T5033] exc_invalid_op+0x17/0x40 [ 72.633443][ T5033] asm_exc_invalid_op+0x1a/0x20 [ 72.638320][ T5033] RIP: 0010:hfsplus_bnode_create+0x14b/0x530 [ 72.644344][ T5033] Code: 7b 1e 30 ff 45 39 fc 75 9e e8 81 23 30 ff 4c 89 f7 e8 f9 e6 e3 07 e8 74 23 30 ff 44 89 e6 48 c7 c7 00 5d 87 8a e8 15 5f 13 ff <0f> 0b e8 5e 23 30 ff 48 89 d8 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e [ 72.663984][ T5033] RSP: 0018:ffffc90003b1f2d8 EFLAGS: 00010286 [ 72.670078][ T5033] RAX: 0000000000000023 RBX: ffff8881452e3d00 RCX: 0000000000000000 [ 72.678073][ T5033] RDX: 0000000000000000 RSI: ffffffff816adc22 RDI: 0000000000000005 [ 72.686063][ T5033] RBP: ffff88802785a000 R08: 0000000000000005 R09: 0000000000000000 [ 72.694054][ T5033] R10: 0000000080000000 R11: 0000000000000001 R12: 0000000000000000 [ 72.702045][ T5033] R13: dffffc0000000000 R14: ffff88802785a0e0 R15: 0000000000000000 [ 72.710054][ T5033] ? vprintk+0x82/0x90 [ 72.714184][ T5033] ? hfsplus_bnode_create+0x14b/0x530 [ 72.719605][ T5033] hfsplus_bmap_alloc+0x728/0x830 [ 72.724764][ T5033] ? hfsplus_bmap_reserve+0x410/0x410 [ 72.730176][ T5033] ? lock_acquire+0x1ae/0x510 [ 72.734909][ T5033] ? lock_sync+0x190/0x190 [ 72.739363][ T5033] hfs_btree_inc_height.isra.0+0x100/0x8b0 [ 72.745213][ T5033] ? hfs_bnode_split+0xdc0/0xdc0 [ 72.750191][ T5033] ? rcu_is_watching+0x12/0xb0 [ 72.754987][ T5033] ? trace_contention_end+0xd6/0x100 [ 72.760309][ T5033] ? __mutex_lock+0x25b/0x1340 [ 72.765114][ T5033] hfsplus_brec_insert+0x9fe/0xc50 [ 72.770267][ T5033] ? hfsplus_brec_find+0x3e8/0x520 [ 72.775425][ T5033] ? hfsplus_brec_keylen+0x340/0x340 [ 72.780750][ T5033] ? hfsplus_bmap_reserve+0x332/0x410 [ 72.786157][ T5033] ? kasan_set_track+0x25/0x30 [ 72.790964][ T5033] __hfsplus_ext_write_extent+0x49c/0x5e0 [ 72.796723][ T5033] ? hfsplus_find_init+0x16d/0x200 [ 72.801882][ T5033] hfsplus_ext_read_extent+0x84c/0xb00 [ 72.807378][ T5033] ? hfsplus_free_extents+0x510/0x510 [ 72.812789][ T5033] ? hfsplus_get_block+0x3b8/0x9e0 [ 72.817949][ T5033] hfsplus_file_extend+0x695/0x1090 [ 72.823197][ T5033] ? hfsplus_free_fork+0x820/0x820 [ 72.828348][ T5033] ? __lock_buffer+0x70/0x70 [ 72.832975][ T5033] ? spin_bug+0x1d0/0x1d0 [ 72.837357][ T5033] hfsplus_get_block+0x1ae/0x9e0 [ 72.842338][ T5033] ? hfsplus_file_extend+0x1090/0x1090 [ 72.847831][ T5033] __block_write_begin_int+0x3c0/0x1470 [ 72.853412][ T5033] ? hfsplus_file_extend+0x1090/0x1090 [ 72.858923][ T5033] ? invalidate_bh_lrus_cpu+0x170/0x170 [ 72.864513][ T5033] block_write_begin+0xb1/0x490 [ 72.869408][ T5033] ? hfsplus_file_extend+0x1090/0x1090 [ 72.874932][ T5033] cont_write_begin+0x52f/0x730 [ 72.879819][ T5033] ? hfsplus_file_extend+0x1090/0x1090 [ 72.885310][ T5033] ? block_write_begin+0x490/0x490 [ 72.890457][ T5033] ? fault_in_readable+0x106/0x200 [ 72.895604][ T5033] ? fault_in_readable+0x150/0x200 [ 72.900750][ T5033] ? fault_in_subpage_writeable+0x20/0x20 [ 72.906513][ T5033] hfsplus_write_begin+0x87/0x140 [ 72.911567][ T5033] ? hfsplus_file_extend+0x1090/0x1090 [ 72.917066][ T5033] generic_perform_write+0x278/0x600 [ 72.922393][ T5033] ? folio_add_wait_queue+0x1c0/0x1c0 [ 72.927881][ T5033] ? new_inode+0x270/0x270 [ 72.932337][ T5033] ? generic_write_checks_count+0x2d0/0x2d0 [ 72.938264][ T5033] __generic_file_write_iter+0x1f9/0x240 [ 72.943930][ T5033] generic_file_write_iter+0xe3/0x350 [ 72.949347][ T5033] vfs_write+0x650/0xe40 [ 72.953627][ T5033] ? kernel_write+0x6c0/0x6c0 [ 72.958359][ T5033] ksys_write+0x12f/0x250 [ 72.962720][ T5033] ? __ia32_sys_read+0xb0/0xb0 [ 72.967516][ T5033] ? lockdep_hardirqs_on+0x7d/0x100 [ 72.972751][ T5033] ? _raw_spin_unlock_irq+0x2e/0x50 [ 72.977993][ T5033] ? ptrace_notify+0xf4/0x130 [ 72.982717][ T5033] do_syscall_64+0x38/0xb0 [ 72.987163][ T5033] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 72.993100][ T5033] RIP: 0033:0x7f7339591639 [ 72.997539][ T5033] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 73.017260][ T5033] RSP: 002b:00007ffeba1e26c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 73.025716][ T5033] RAX: ffffffffffffffda RBX: 00007ffeba1e2898 RCX: 00007f7339591639 [ 73.033710][ T5033] RDX: 0000000000029000 RSI: 0000000020000040 RDI: 0000000000000004 [ 73.041704][ T5033] RBP: 00007f7339604610 R08: 0000000000000000 R09: 00007ffeba1e2898 [ 73.049702][ T5033] R10: 0000000000000642 R11: 0000000000000246 R12: 0000000000000001 [ 73.057699][ T5033] R13: 00007ffeba1e2888 R14: 0000000000000001 R15: 0000000000000001 [ 73.065713][ T5033] [ 73.069007][ T5033] Kernel Offset: disabled [ 73.073457][ T5033] Rebooting in 86400 seconds..