./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1039659119
<...>
syzkaller
syzkaller login: [ 42.567234][ T26] kauditd_printk_skb: 42 callbacks suppressed
[ 42.567245][ T26] audit: type=1400 audit(1686865860.454:77): avc: denied { transition } for pid=4840 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 42.596066][ T26] audit: type=1400 audit(1686865860.464:78): avc: denied { noatsecure } for pid=4840 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 42.615864][ T26] audit: type=1400 audit(1686865860.484:79): avc: denied { write } for pid=4840 comm="sh" path="pipe:[27492]" dev="pipefs" ino=27492 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[ 42.638772][ T26] audit: type=1400 audit(1686865860.484:80): avc: denied { rlimitinh } for pid=4840 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 42.657846][ T26] audit: type=1400 audit(1686865860.484:81): avc: denied { siginh } for pid=4840 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 43.253618][ T26] audit: type=1400 audit(1686865861.144:82): avc: denied { read } for pid=4429 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
Warning: Permanently added '10.128.0.62' (ECDSA) to the list of known hosts.
execve("./syz-executor1039659119", ["./syz-executor1039659119"], 0x7fffe61f67c0 /* 10 vars */) = 0
brk(NULL) = 0x555555760000
brk(0x555555760c40) = 0x555555760c40
arch_prctl(ARCH_SET_FS, 0x555555760300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor1039659119", 4096) = 28
brk(0x555555781c40) = 0x555555781c40
brk(0x555555782000) = 0x555555782000
mprotect(0x7f07292bb000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3
[ 57.940277][ T26] audit: type=1400 audit(1686865875.834:83): avc: denied { write } for pid=4989 comm="strace-static-x" path="pipe:[27648]" dev="pipefs" ino=27648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3
write(3, "0", 1) = 1
close(3) = 0
getpid() = 4992
mkdir("./syzkaller.QBSfOD", 0700) = 0
chmod("./syzkaller.QBSfOD", 0777) = 0
chdir("./syzkaller.QBSfOD") = 0
mkdir("./0", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555557605d0) = 4993
./strace-static-x86_64: Process 4993 attached
[pid 4993] chdir("./0") = 0
[pid 4993] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 4993] setpgid(0, 0) = 0
[pid 4993] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 4993] write(3, "1000", 4) = 4
[pid 4993] close(3) = 0
[pid 4993] symlink("/dev/binderfs", "./binderfs") = 0
[ 57.978295][ T26] audit: type=1400 audit(1686865875.864:84): avc: denied { execmem } for pid=4992 comm="syz-executor103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 58.004123][ T26] audit: type=1400 audit(1686865875.894:85): avc: denied { read write } for pid=4992 comm="syz-executor103" name="loop0" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[pid 4993] memfd_create("syzkaller", 0) = 3
[pid 4993] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0720dff000
[pid 4993] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768) = 32768
[pid 4993] munmap(0x7f0720dff000, 32768) = 0
[pid 4993] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 4993] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 4993] close(3) = 0
[pid 4993] mkdir("./file0", 0777) = 0
[ 58.039731][ T4993] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=4993 'syz-executor103'
[ 58.043369][ T26] audit: type=1400 audit(1686865875.894:86): avc: denied { open } for pid=4992 comm="syz-executor103" path="/dev/loop0" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 58.059239][ T4993] loop0: detected capacity change from 0 to 64
[pid 4993] mount("/dev/loop0", "./file0", "hfs", MS_REC, "") = 0
[pid 4993] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 4993] chdir("./file0") = 0
[pid 4993] ioctl(4, LOOP_CLR_FD) = 0
[pid 4993] close(4) = 0
[pid 4993] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4
[pid 4993] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 5
[pid 4993] write(5, "13", 2) = 2
[ 58.075196][ T26] audit: type=1400 audit(1686865875.894:87): avc: denied { ioctl } for pid=4992 comm="syz-executor103" path="/dev/loop0" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 58.115065][ T4993] FAULT_INJECTION: forcing a failure.
[ 58.115065][ T4993] name failslab, interval 1, probability 0, space 0, times 1
[ 58.122573][ T26] audit: type=1400 audit(1686865875.974:88): avc: denied { mounton } for pid=4993 comm="syz-executor103" path="/root/syzkaller.QBSfOD/0/file0" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[ 58.128579][ T4993] CPU: 1 PID: 4993 Comm: syz-executor103 Not tainted 6.4.0-rc6-syzkaller-00037-gb6dad5178cea #0
[ 58.161191][ T26] audit: type=1400 audit(1686865875.974:89): avc: denied { mount } for pid=4993 comm="syz-executor103" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[ 58.162564][ T4993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 58.186196][ T26] audit: type=1400 audit(1686865876.074:90): avc: denied { append } for pid=4429 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 58.194712][ T4993] Call Trace:
[ 58.194721][ T4993]
[ 58.194729][ T4993] dump_stack_lvl+0x136/0x150
[ 58.194770][ T4993] should_fail_ex+0x4a3/0x5b0
[ 58.216935][ T26] audit: type=1400 audit(1686865876.074:91): avc: denied { open } for pid=4429 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 58.220062][ T4993] should_failslab+0x9/0x20
[ 58.220095][ T4993] __kmem_cache_alloc_node+0x5b/0x3f0
[ 58.220119][ T4993] ? __hfs_bnode_create+0x107/0x820
[ 58.224173][ T26] audit: type=1400 audit(1686865876.074:92): avc: denied { getattr } for pid=4429 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 58.227689][ T4993] __kmalloc+0x4e/0x190
[ 58.296356][ T4993] __hfs_bnode_create+0x107/0x820
[ 58.301379][ T4993] ? memcpy_to_page+0x80/0x80
[ 58.306046][ T4993] ? lock_downgrade+0x690/0x690
[ 58.310891][ T4993] ? do_raw_spin_lock+0x124/0x2b0
[ 58.315905][ T4993] ? spin_bug+0x1c0/0x1c0
[ 58.320227][ T4993] hfs_bnode_create+0x181/0x530
[ 58.325070][ T4993] hfs_bmap_alloc+0x6f4/0x800
[ 58.329738][ T4993] ? hfs_bmap_reserve+0x380/0x380
[ 58.334765][ T4993] ? lock_acquire+0x1f5/0x520
[ 58.339434][ T4993] hfs_btree_inc_height.isra.0+0xe6/0x950
[ 58.345165][ T4993] ? preempt_schedule_thunk+0x1a/0x20
[ 58.350540][ T4993] ? hfs_bnode_split+0xda0/0xda0
[ 58.355467][ T4993] ? preempt_schedule_thunk+0x1a/0x20
[ 58.360833][ T4993] hfs_brec_insert+0x983/0xbc0
[ 58.365588][ T4993] ? hfs_find_init+0x182/0x240
[ 58.370339][ T4993] ? hfs_brec_find+0x3c9/0x500
[ 58.375089][ T4993] ? hfs_brec_keylen+0x3a0/0x3a0
[ 58.380031][ T4993] ? hfs_bmap_reserve+0x2b9/0x380
[ 58.385043][ T4993] __hfs_ext_write_extent+0x3ec/0x510
[ 58.390409][ T4993] hfs_ext_read_extent+0x81c/0xa20
[ 58.395510][ T4993] ? rcu_is_watching+0x12/0xb0
[ 58.400271][ T4993] ? hfs_free_extents+0x2e0/0x2e0
[ 58.405288][ T4993] ? clean_bdev_aliases+0x4ff/0x600
[ 58.410476][ T4993] ? find_held_lock+0x2d/0x110
[ 58.415234][ T4993] hfs_extend_file+0x4b5/0xae0
[ 58.419987][ T4993] ? spin_bug+0x1c0/0x1c0
[ 58.424308][ T4993] ? hfs_free_fork+0x920/0x920
[ 58.429060][ T4993] ? rcu_is_watching+0x12/0xb0
[ 58.433818][ T4993] ? __mark_inode_dirty+0x297/0xd60
[ 58.439011][ T4993] hfs_get_block+0x17f/0x820
[ 58.443595][ T4993] __block_write_begin_int+0x3bd/0x14b0
[ 58.449138][ T4993] ? hfs_extend_file+0xae0/0xae0
[ 58.454066][ T4993] ? invalidate_bh_lrus_cpu+0x140/0x140
[ 58.459597][ T4993] ? folio_flags.constprop.0+0x53/0x150
[ 58.465141][ T4993] ? hfs_extend_file+0xae0/0xae0
[ 58.470077][ T4993] block_write_begin+0xb9/0x4d0
[ 58.474930][ T4993] cont_write_begin+0x534/0x740
[ 58.479787][ T4993] ? hfs_extend_file+0xae0/0xae0
[ 58.484747][ T4993] ? block_write_begin+0x4d0/0x4d0
[ 58.489859][ T4993] ? fault_in_readable+0x129/0x210
[ 58.494975][ T4993] ? fault_in_subpage_writeable+0x20/0x20
[ 58.500685][ T4993] hfs_write_begin+0x87/0x150
[ 58.505354][ T4993] ? hfs_extend_file+0xae0/0xae0
[ 58.510284][ T4993] generic_perform_write+0x256/0x570
[ 58.515567][ T4993] ? generic_file_readonly_mmap+0x180/0x180
[ 58.521453][ T4993] ? new_inode+0x280/0x280
[ 58.525862][ T4993] ? generic_write_checks+0x2c0/0x400
[ 58.531226][ T4993] __generic_file_write_iter+0x2ae/0x500
[ 58.536860][ T4993] generic_file_write_iter+0xe3/0x350
[ 58.542235][ T4993] vfs_write+0x945/0xd50
[ 58.546469][ T4993] ? kernel_write+0x670/0x670
[ 58.551137][ T4993] ? recalc_sigpending_tsk+0x18b/0x1d0
[ 58.556600][ T4993] ? find_held_lock+0x2d/0x110
[ 58.561358][ T4993] ? lock_downgrade+0x690/0x690
[ 58.566203][ T4993] ? __fget_light+0x20a/0x270
[ 58.570870][ T4993] ksys_write+0x12b/0x250
[ 58.575198][ T4993] ? __ia32_sys_read+0xb0/0xb0
[ 58.579952][ T4993] ? lockdep_hardirqs_on+0x7d/0x100
[ 58.585146][ T4993] ? _raw_spin_unlock_irq+0x2e/0x50
[ 58.590339][ T4993] ? ptrace_notify+0xfe/0x140
[ 58.595005][ T4993] do_syscall_64+0x39/0xb0
[ 58.599413][ T4993] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 58.605300][ T4993] RIP: 0033:0x7f072924c9e9
[ 58.609705][ T4993] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 58.629305][ T4993] RSP: 002b:00007fff25293308 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 58.637707][ T4993] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f072924c9e9
[ 58.645665][ T4993] RDX: 00000000000ffe00 RSI: 0000000020004200 RDI: 0000000000000004
[ 58.653626][ T4993] RBP: 00007fff25293330 R08: 0000000000000002 R09: 00007fff25293340
[ 58.661586][ T4993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[ 58.669543][ T4993] R13: 00007fff25293370 R14: 00007fff25293350 R15: 0000000000000000
[ 58.677502][ T4993]
[ 58.681445][ T4993] hfs: new node 0 already hashed?
[ 58.686890][ T4993] ------------[ cut here ]------------
[ 58.692549][ T4993] WARNING: CPU: 0 PID: 4993 at fs/hfs/bnode.c:422 hfs_bnode_create+0x14c/0x530
[ 58.701519][ T4993] Modules linked in:
[ 58.705405][ T4993] CPU: 0 PID: 4993 Comm: syz-executor103 Not tainted 6.4.0-rc6-syzkaller-00037-gb6dad5178cea #0
[ 58.715876][ T4993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 58.725990][ T4993] RIP: 0010:hfs_bnode_create+0x14c/0x530
[ 58.731715][ T4993] Code: 89 ef 44 89 fe e8 24 3e 33 ff 44 39 fd 75 9b e8 7a 42 33 ff 4c 89 f7 e8 e2 d7 c2 07 89 ee 48 c7 c7 e0 cc 66 8a e8 14 26 17 ff <0f> 0b e8 5d 42 33 ff 4c 89 e0 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e
[ 58.751389][ T4993] RSP: 0018:ffffc900033df358 EFLAGS: 00010282
[ 58.757461][ T4993] RAX: 000000000000001f RBX: ffff888073f7a000 RCX: 0000000000000000
[ 58.765474][ T4993] RDX: 0000000000000000 RSI: ffffffff8167dd6c RDI: 0000000000000005
[ 58.773488][ T4993] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000
[ 58.781499][ T4993] R10: 0000000080000000 R11: 0000000000000001 R12: ffff88801fdc2600
[ 58.789481][ T4993] R13: dffffc0000000000 R14: ffff888073f7a0e0 R15: 0000000000000000
[ 58.797511][ T4993] FS: 0000555555760300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 58.806479][ T4993] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 58.813101][ T4993] CR2: 00005624f6333218 CR3: 000000002ad44000 CR4: 00000000003506f0
[ 58.821114][ T4993] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 58.829079][ T4993] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 58.837086][ T4993] Call Trace:
[ 58.840397][ T4993]
[ 58.843336][ T4993] ? __warn+0xe6/0x390
[ 58.847442][ T4993] ? hfs_bnode_create+0x14c/0x530
[ 58.852535][ T4993] ? report_bug+0x2da/0x500
[ 58.857077][ T4993] ? handle_bug+0x3c/0x70
[ 58.861484][ T4993] ? exc_invalid_op+0x18/0x50
[ 58.866176][ T4993] ? asm_exc_invalid_op+0x1a/0x20
[ 58.871265][ T4993] ? vprintk+0x8c/0xa0
[ 58.875354][ T4993] ? hfs_bnode_create+0x14c/0x530
[ 58.880419][ T4993] ? hfs_bnode_create+0x14c/0x530
[ 58.885460][ T4993] hfs_bmap_alloc+0x6f4/0x800
[ 58.890183][ T4993] ? hfs_bmap_reserve+0x380/0x380
[ 58.895228][ T4993] ? hfs_bnode_put.part.0+0x1e0/0x280
[ 58.900651][ T4993] ? lock_downgrade+0x690/0x690
[ 58.905535][ T4993] hfs_btree_inc_height.isra.0+0xe6/0x950
[ 58.911333][ T4993] ? hfs_bnode_split+0xda0/0xda0
[ 58.916303][ T4993] ? do_raw_spin_unlock+0x175/0x230
[ 58.921575][ T4993] ? _raw_spin_unlock+0x28/0x40
[ 58.926455][ T4993] ? hfs_bnode_put.part.0+0x1e0/0x280
[ 58.931875][ T4993] hfs_brec_insert+0x851/0xbc0
[ 58.936657][ T4993] ? hfs_brec_keylen+0x3a0/0x3a0
[ 58.941640][ T4993] ? hfs_bmap_reserve+0x2b9/0x380
[ 58.946682][ T4993] __hfs_ext_write_extent+0x3ec/0x510
[ 58.952099][ T4993] hfs_ext_read_extent+0x81c/0xa20
[ 58.957244][ T4993] ? rcu_is_watching+0x12/0xb0
[ 58.962086][ T4993] ? hfs_free_extents+0x2e0/0x2e0
[ 58.967137][ T4993] ? clean_bdev_aliases+0x4ff/0x600
[ 58.972385][ T4993] ? find_held_lock+0x2d/0x110
[ 58.977166][ T4993] hfs_extend_file+0x4b5/0xae0
[ 58.981976][ T4993] ? spin_bug+0x1c0/0x1c0
[ 58.986323][ T4993] ? hfs_free_fork+0x920/0x920
[ 58.991146][ T4993] ? rcu_is_watching+0x12/0xb0
[ 58.995937][ T4993] ? __mark_inode_dirty+0x297/0xd60
[ 59.001189][ T4993] hfs_get_block+0x17f/0x820
[ 59.005800][ T4993] __block_write_begin_int+0x3bd/0x14b0
[ 59.011389][ T4993] ? hfs_extend_file+0xae0/0xae0
[ 59.016347][ T4993] ? invalidate_bh_lrus_cpu+0x140/0x140
[ 59.021937][ T4993] ? folio_flags.constprop.0+0x53/0x150
[ 59.027506][ T4993] ? hfs_extend_file+0xae0/0xae0
[ 59.032490][ T4993] block_write_begin+0xb9/0x4d0
[ 59.037358][ T4993] cont_write_begin+0x534/0x740
[ 59.042257][ T4993] ? hfs_extend_file+0xae0/0xae0
[ 59.047247][ T4993] ? block_write_begin+0x4d0/0x4d0
[ 59.052412][ T4993] ? fault_in_readable+0x129/0x210
[ 59.057541][ T4993] ? fault_in_subpage_writeable+0x20/0x20
[ 59.063311][ T4993] hfs_write_begin+0x87/0x150
[ 59.068011][ T4993] ? hfs_extend_file+0xae0/0xae0
[ 59.072995][ T4993] generic_perform_write+0x256/0x570
[ 59.078306][ T4993] ? generic_file_readonly_mmap+0x180/0x180
[ 59.084291][ T4993] ? new_inode+0x280/0x280
[ 59.088743][ T4993] ? generic_write_checks+0x2c0/0x400
[ 59.094183][ T4993] __generic_file_write_iter+0x2ae/0x500
[ 59.099872][ T4993] generic_file_write_iter+0xe3/0x350
[ 59.105243][ T4993] vfs_write+0x945/0xd50
[ 59.109480][ T4993] ? kernel_write+0x670/0x670
[ 59.114211][ T4993] ? recalc_sigpending_tsk+0x18b/0x1d0
[ 59.119696][ T4993] ? find_held_lock+0x2d/0x110
[ 59.124526][ T4993] ? lock_downgrade+0x690/0x690
[ 59.129398][ T4993] ? __fget_light+0x20a/0x270
[ 59.134117][ T4993] ksys_write+0x12b/0x250
[ 59.138463][ T4993] ? __ia32_sys_read+0xb0/0xb0
[ 59.143291][ T4993] ? lockdep_hardirqs_on+0x7d/0x100
[ 59.148507][ T4993] ? _raw_spin_unlock_irq+0x2e/0x50
[ 59.153752][ T4993] ? ptrace_notify+0xfe/0x140
[ 59.158445][ T4993] do_syscall_64+0x39/0xb0
[ 59.162917][ T4993] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 59.168845][ T4993] RIP: 0033:0x7f072924c9e9
[ 59.173305][ T4993] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 59.192954][ T4993] RSP: 002b:00007fff25293308 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 59.201538][ T4993] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f072924c9e9
[ 59.209535][ T4993] RDX: 00000000000ffe00 RSI: 0000000020004200 RDI: 0000000000000004
[ 59.217552][ T4993] RBP: 00007fff25293330 R08: 0000000000000002 R09: 00007fff25293340
[ 59.225563][ T4993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[ 59.233587][ T4993] R13: 00007fff25293370 R14: 00007fff25293350 R15: 0000000000000000
[ 59.241599][ T4993]
[ 59.244614][ T4993] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 59.251888][ T4993] CPU: 0 PID: 4993 Comm: syz-executor103 Not tainted 6.4.0-rc6-syzkaller-00037-gb6dad5178cea #0
[ 59.262307][ T4993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 59.272350][ T4993] Call Trace:
[ 59.275621][ T4993]
[ 59.278542][ T4993] dump_stack_lvl+0xd9/0x150
[ 59.283135][ T4993] panic+0x686/0x730
[ 59.287030][ T4993] ? panic_smp_self_stop+0xa0/0xa0
[ 59.292152][ T4993] ? show_trace_log_lvl+0x284/0x390
[ 59.297372][ T4993] ? hfs_bnode_create+0x14c/0x530
[ 59.302388][ T4993] check_panic_on_warn+0xb1/0xc0
[ 59.307324][ T4993] __warn+0xf2/0x390
[ 59.311220][ T4993] ? hfs_bnode_create+0x14c/0x530
[ 59.316249][ T4993] report_bug+0x2da/0x500
[ 59.320591][ T4993] handle_bug+0x3c/0x70
[ 59.324756][ T4993] exc_invalid_op+0x18/0x50
[ 59.329256][ T4993] asm_exc_invalid_op+0x1a/0x20
[ 59.334111][ T4993] RIP: 0010:hfs_bnode_create+0x14c/0x530
[ 59.339740][ T4993] Code: 89 ef 44 89 fe e8 24 3e 33 ff 44 39 fd 75 9b e8 7a 42 33 ff 4c 89 f7 e8 e2 d7 c2 07 89 ee 48 c7 c7 e0 cc 66 8a e8 14 26 17 ff <0f> 0b e8 5d 42 33 ff 4c 89 e0 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e
[ 59.359362][ T4993] RSP: 0018:ffffc900033df358 EFLAGS: 00010282
[ 59.365453][ T4993] RAX: 000000000000001f RBX: ffff888073f7a000 RCX: 0000000000000000
[ 59.373416][ T4993] RDX: 0000000000000000 RSI: ffffffff8167dd6c RDI: 0000000000000005
[ 59.381377][ T4993] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000
[ 59.389336][ T4993] R10: 0000000080000000 R11: 0000000000000001 R12: ffff88801fdc2600
[ 59.397304][ T4993] R13: dffffc0000000000 R14: ffff888073f7a0e0 R15: 0000000000000000
[ 59.405292][ T4993] ? vprintk+0x8c/0xa0
[ 59.409396][ T4993] ? hfs_bnode_create+0x14c/0x530
[ 59.414437][ T4993] hfs_bmap_alloc+0x6f4/0x800
[ 59.419111][ T4993] ? hfs_bmap_reserve+0x380/0x380
[ 59.424136][ T4993] ? hfs_bnode_put.part.0+0x1e0/0x280
[ 59.429535][ T4993] ? lock_downgrade+0x690/0x690
[ 59.434407][ T4993] hfs_btree_inc_height.isra.0+0xe6/0x950
[ 59.440117][ T4993] ? hfs_bnode_split+0xda0/0xda0
[ 59.445046][ T4993] ? do_raw_spin_unlock+0x175/0x230
[ 59.450241][ T4993] ? _raw_spin_unlock+0x28/0x40
[ 59.455096][ T4993] ? hfs_bnode_put.part.0+0x1e0/0x280
[ 59.460494][ T4993] hfs_brec_insert+0x851/0xbc0
[ 59.465276][ T4993] ? hfs_brec_keylen+0x3a0/0x3a0
[ 59.470207][ T4993] ? hfs_bmap_reserve+0x2b9/0x380
[ 59.475222][ T4993] __hfs_ext_write_extent+0x3ec/0x510
[ 59.480612][ T4993] hfs_ext_read_extent+0x81c/0xa20
[ 59.485736][ T4993] ? rcu_is_watching+0x12/0xb0
[ 59.490497][ T4993] ? hfs_free_extents+0x2e0/0x2e0
[ 59.495535][ T4993] ? clean_bdev_aliases+0x4ff/0x600
[ 59.500751][ T4993] ? find_held_lock+0x2d/0x110
[ 59.505511][ T4993] hfs_extend_file+0x4b5/0xae0
[ 59.510273][ T4993] ? spin_bug+0x1c0/0x1c0
[ 59.514605][ T4993] ? hfs_free_fork+0x920/0x920
[ 59.519386][ T4993] ? rcu_is_watching+0x12/0xb0
[ 59.524160][ T4993] ? __mark_inode_dirty+0x297/0xd60
[ 59.529385][ T4993] hfs_get_block+0x17f/0x820
[ 59.533971][ T4993] __block_write_begin_int+0x3bd/0x14b0
[ 59.539511][ T4993] ? hfs_extend_file+0xae0/0xae0
[ 59.544453][ T4993] ? invalidate_bh_lrus_cpu+0x140/0x140
[ 59.550028][ T4993] ? folio_flags.constprop.0+0x53/0x150
[ 59.555589][ T4993] ? hfs_extend_file+0xae0/0xae0
[ 59.560529][ T4993] block_write_begin+0xb9/0x4d0
[ 59.565394][ T4993] cont_write_begin+0x534/0x740
[ 59.570252][ T4993] ? hfs_extend_file+0xae0/0xae0
[ 59.575187][ T4993] ? block_write_begin+0x4d0/0x4d0
[ 59.580296][ T4993] ? fault_in_readable+0x129/0x210
[ 59.585400][ T4993] ? fault_in_subpage_writeable+0x20/0x20
[ 59.591113][ T4993] hfs_write_begin+0x87/0x150
[ 59.595792][ T4993] ? hfs_extend_file+0xae0/0xae0
[ 59.600733][ T4993] generic_perform_write+0x256/0x570
[ 59.606017][ T4993] ? generic_file_readonly_mmap+0x180/0x180
[ 59.611919][ T4993] ? new_inode+0x280/0x280
[ 59.616394][ T4993] ? generic_write_checks+0x2c0/0x400
[ 59.621758][ T4993] __generic_file_write_iter+0x2ae/0x500
[ 59.627382][ T4993] generic_file_write_iter+0xe3/0x350
[ 59.632746][ T4993] vfs_write+0x945/0xd50
[ 59.636980][ T4993] ? kernel_write+0x670/0x670
[ 59.641650][ T4993] ? recalc_sigpending_tsk+0x18b/0x1d0
[ 59.647109][ T4993] ? find_held_lock+0x2d/0x110
[ 59.651864][ T4993] ? lock_downgrade+0x690/0x690
[ 59.656707][ T4993] ? __fget_light+0x20a/0x270
[ 59.661376][ T4993] ksys_write+0x12b/0x250
[ 59.665706][ T4993] ? __ia32_sys_read+0xb0/0xb0
[ 59.670485][ T4993] ? lockdep_hardirqs_on+0x7d/0x100
[ 59.675682][ T4993] ? _raw_spin_unlock_irq+0x2e/0x50
[ 59.680877][ T4993] ? ptrace_notify+0xfe/0x140
[ 59.685549][ T4993] do_syscall_64+0x39/0xb0
[ 59.689967][ T4993] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 59.695885][ T4993] RIP: 0033:0x7f072924c9e9
[ 59.700290][ T4993] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 59.719902][ T4993] RSP: 002b:00007fff25293308 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 59.728321][ T4993] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f072924c9e9
[ 59.736282][ T4993] RDX: 00000000000ffe00 RSI: 0000000020004200 RDI: 0000000000000004
[ 59.744248][ T4993] RBP: 00007fff25293330 R08: 0000000000000002 R09: 00007fff25293340
[ 59.752217][ T4993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[ 59.760192][ T4993] R13: 00007fff25293370 R14: 00007fff25293350 R15: 0000000000000000
[ 59.768184][ T4993]
[ 59.771375][ T4993] Kernel Offset: disabled
[ 59.775791][ T4993] Rebooting in 86400 seconds..