./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3779123940 <...> Warning: Permanently added '10.128.0.144' (ED25519) to the list of known hosts. execve("./syz-executor3779123940", ["./syz-executor3779123940"], 0x7ffd6d19a920 /* 10 vars */) = 0 brk(NULL) = 0x555556d9a000 brk(0x555556d9ad00) = 0x555556d9ad00 arch_prctl(ARCH_SET_FS, 0x555556d9a380) = 0 set_tid_address(0x555556d9a650) = 5031 set_robust_list(0x555556d9a660, 24) = 0 rseq(0x555556d9aca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3779123940", 4096) = 28 getrandom("\x95\x4d\x85\x74\x5b\x31\x6a\xea", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556d9ad00 brk(0x555556dbbd00) = 0x555556dbbd00 brk(0x555556dbc000) = 0x555556dbc000 mprotect(0x7f4150250000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4147d9f000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 munmap(0x7f4147d9f000, 138412032) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./file0", 0777) = 0 [ 77.455991][ T5031] syz-executor377[5031]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 77.480585][ T5031] loop0: detected capacity change from 0 to 1024 [ 77.499364][ T5031] hfsplus: new node 0 already hashed? [ 77.505616][ T5031] ------------[ cut here ]------------ [ 77.511521][ T5031] WARNING: CPU: 0 PID: 5031 at fs/hfsplus/bnode.c:573 hfsplus_bnode_create+0x3b1/0x440 [ 77.522450][ T5031] Modules linked in: [ 77.526390][ T5031] CPU: 0 PID: 5031 Comm: syz-executor377 Not tainted 6.6.0-rc7-syzkaller-00195-g2af9b20dbb39 #0 [ 77.537423][ T5031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 77.548235][ T5031] RIP: 0010:hfsplus_bnode_create+0x3b1/0x440 [ 77.556018][ T5031] Code: 8b 44 89 e6 e8 d0 a6 61 08 e9 7c fd ff ff e8 96 d9 25 ff 4c 89 ff e8 ee 6e 6e 08 48 c7 c7 00 53 20 8b 44 89 e6 e8 af a6 61 08 <0f> 0b eb b5 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 89 fc ff ff 48 89 [ 77.578597][ T5031] RSP: 0018:ffffc90004146f78 EFLAGS: 00010246 [ 77.585373][ T5031] RAX: 0000000000000023 RBX: ffff888016b45900 RCX: 5050a5c108666100 [ 77.594457][ T5031] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 77.603569][ T5031] RBP: 0000000000000000 R08: ffffffff81711cfc R09: 1ffff92000828d90 [ 77.611945][ T5031] R10: dffffc0000000000 R11: fffff52000828d91 R12: 0000000000000000 [ 77.620966][ T5031] R13: dffffc0000000000 R14: ffff88807a5fa000 R15: ffff88807a5fa0e0 [ 77.630110][ T5031] FS: 0000555556d9a380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 77.640116][ T5031] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.648370][ T5031] CR2: 00000000005fdeb8 CR3: 00000000734ff000 CR4: 00000000003506f0 [ 77.657520][ T5031] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 77.666851][ T5031] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 77.676910][ T5031] Call Trace: [ 77.680419][ T5031] [ 77.683499][ T5031] ? __warn+0x162/0x4a0 [ 77.687748][ T5031] ? hfsplus_bnode_create+0x3b1/0x440 [ 77.693786][ T5031] ? report_bug+0x2b3/0x500 [ 77.698614][ T5031] ? hfsplus_bnode_create+0x3b1/0x440 [ 77.704559][ T5031] ? handle_bug+0x3d/0x70 [ 77.709728][ T5031] ? exc_invalid_op+0x1a/0x50 [ 77.715060][ T5031] ? asm_exc_invalid_op+0x1a/0x20 [ 77.720312][ T5031] ? __wake_up_klogd+0xcc/0x100 [ 77.725457][ T5031] ? hfsplus_bnode_create+0x3b1/0x440 [ 77.731117][ T5031] ? hfsplus_bnode_create+0x3b1/0x440 [ 77.736866][ T5031] hfsplus_bmap_alloc+0x59a/0x640 [ 77.742619][ T5031] ? hfsplus_bmap_reserve+0x4e0/0x4e0 [ 77.748301][ T5031] ? hfsplus_free_extents+0x408/0xae0 [ 77.754313][ T5031] ? hfsplus_bnode_read_u16+0x146/0x2c0 [ 77.760298][ T5031] hfs_bnode_split+0xde/0x1110 [ 77.765657][ T5031] ? hfsplus_bnode_dump+0xa36/0xba0 [ 77.771896][ T5031] ? hfsplus_bnode_read+0xe9/0x1e0 [ 77.777193][ T5031] ? __asan_memcpy+0x40/0x70 [ 77.783471][ T5031] ? hfsplus_bnode_read_u16+0x1c1/0x2c0 [ 77.790585][ T5031] ? hfs_btree_inc_height+0xdb0/0xdb0 [ 77.797115][ T5031] ? hfs_find_1st_rec_by_cnid+0x3c0/0x3c0 [ 77.804059][ T5031] hfsplus_brec_insert+0x3a6/0xdd0 [ 77.809420][ T5031] ? hfsplus_brec_keylen+0x310/0x310 [ 77.814981][ T5031] ? __kmalloc+0xe6/0x230 [ 77.819576][ T5031] hfsplus_create_cat+0x49c/0x1b90 [ 77.826009][ T5031] ? hfsplus_find_cat+0x5c0/0x5c0 [ 77.831353][ T5031] ? do_raw_spin_unlock+0x13b/0x8b0 [ 77.836845][ T5031] ? _raw_spin_unlock+0x28/0x40 [ 77.841938][ T5031] ? hfsplus_new_inode+0x5b2/0x730 [ 77.847181][ T5031] hfsplus_fill_super+0x13ea/0x1c90 [ 77.853721][ T5031] ? hfsplus_mount+0x40/0x40 [ 77.858797][ T5031] ? read_lock_is_recursive+0x20/0x20 [ 77.864436][ T5031] mount_bdev+0x237/0x300 [ 77.868936][ T5031] ? hfsplus_mount+0x40/0x40 [ 77.874173][ T5031] ? get_tree_bdev+0x5b0/0x5b0 [ 77.879809][ T5031] ? vfs_parse_fs_string+0x190/0x230 [ 77.885234][ T5031] ? vfs_parse_fs_param+0x410/0x410 [ 77.890622][ T5031] ? cap_capable+0x1b4/0x240 [ 77.895630][ T5031] legacy_get_tree+0xef/0x190 [ 77.900686][ T5031] ? hfsplus_mark_mdb_dirty+0x1c0/0x1c0 [ 77.907527][ T5031] vfs_get_tree+0x8c/0x280 [ 77.912345][ T5031] do_new_mount+0x28f/0xae0 [ 77.916923][ T5031] ? do_move_mount_old+0x170/0x170 [ 77.922185][ T5031] __se_sys_mount+0x2d9/0x3c0 [ 77.927029][ T5031] ? __x64_sys_mount+0xc0/0xc0 [ 77.931940][ T5031] ? syscall_enter_from_user_mode+0x32/0x230 [ 77.937982][ T5031] ? __x64_sys_mount+0x20/0xc0 [ 77.942972][ T5031] do_syscall_64+0x41/0xc0 [ 77.947553][ T5031] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 77.953574][ T5031] RIP: 0033:0x7f41501ddc3a [ 77.958039][ T5031] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 77.978536][ T5031] RSP: 002b:00007fff809e7c88 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 77.987511][ T5031] RAX: ffffffffffffffda RBX: 00007fff809e7ca0 RCX: 00007f41501ddc3a [ 77.996149][ T5031] RDX: 0000000020000040 RSI: 0000000020000080 RDI: 00007fff809e7ca0 [ 78.005836][ T5031] RBP: 0000000000000004 R08: 00007fff809e7ce0 R09: 000000000000064b [ 78.014506][ T5031] R10: 0000000000208010 R11: 0000000000000286 R12: 0000000000208010 [ 78.022969][ T5031] R13: 00007fff809e7ce0 R14: 0000000000000003 R15: 0000000000080000 [ 78.031993][ T5031] [ 78.035372][ T5031] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 78.044258][ T5031] CPU: 0 PID: 5031 Comm: syz-executor377 Not tainted 6.6.0-rc7-syzkaller-00195-g2af9b20dbb39 #0 [ 78.056024][ T5031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 78.066667][ T5031] Call Trace: [ 78.071606][ T5031] [ 78.074647][ T5031] dump_stack_lvl+0x1e7/0x2d0 [ 78.079585][ T5031] ? nf_tcp_handle_invalid+0x650/0x650 [ 78.086026][ T5031] ? panic+0x770/0x770 [ 78.090340][ T5031] ? vscnprintf+0x5d/0x80 [ 78.094724][ T5031] panic+0x30f/0x770 [ 78.098838][ T5031] ? __warn+0x171/0x4a0 [ 78.103469][ T5031] ? __memcpy_flushcache+0x2b0/0x2b0 [ 78.110299][ T5031] __warn+0x314/0x4a0 [ 78.114593][ T5031] ? hfsplus_bnode_create+0x3b1/0x440 [ 78.120666][ T5031] report_bug+0x2b3/0x500 [ 78.125160][ T5031] ? hfsplus_bnode_create+0x3b1/0x440 [ 78.130775][ T5031] handle_bug+0x3d/0x70 [ 78.135350][ T5031] exc_invalid_op+0x1a/0x50 [ 78.140057][ T5031] asm_exc_invalid_op+0x1a/0x20 [ 78.144948][ T5031] RIP: 0010:hfsplus_bnode_create+0x3b1/0x440 [ 78.151087][ T5031] Code: 8b 44 89 e6 e8 d0 a6 61 08 e9 7c fd ff ff e8 96 d9 25 ff 4c 89 ff e8 ee 6e 6e 08 48 c7 c7 00 53 20 8b 44 89 e6 e8 af a6 61 08 <0f> 0b eb b5 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 89 fc ff ff 48 89 [ 78.171219][ T5031] RSP: 0018:ffffc90004146f78 EFLAGS: 00010246 [ 78.177430][ T5031] RAX: 0000000000000023 RBX: ffff888016b45900 RCX: 5050a5c108666100 [ 78.186054][ T5031] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 78.194419][ T5031] RBP: 0000000000000000 R08: ffffffff81711cfc R09: 1ffff92000828d90 [ 78.202692][ T5031] R10: dffffc0000000000 R11: fffff52000828d91 R12: 0000000000000000 [ 78.210707][ T5031] R13: dffffc0000000000 R14: ffff88807a5fa000 R15: ffff88807a5fa0e0 [ 78.219076][ T5031] ? __wake_up_klogd+0xcc/0x100 [ 78.224382][ T5031] ? hfsplus_bnode_create+0x3b1/0x440 [ 78.230200][ T5031] hfsplus_bmap_alloc+0x59a/0x640 [ 78.235652][ T5031] ? hfsplus_bmap_reserve+0x4e0/0x4e0 [ 78.241102][ T5031] ? hfsplus_free_extents+0x408/0xae0 [ 78.246717][ T5031] ? hfsplus_bnode_read_u16+0x146/0x2c0 [ 78.252577][ T5031] hfs_bnode_split+0xde/0x1110 [ 78.257840][ T5031] ? hfsplus_bnode_dump+0xa36/0xba0 [ 78.263189][ T5031] ? hfsplus_bnode_read+0xe9/0x1e0 [ 78.268524][ T5031] ? __asan_memcpy+0x40/0x70 [ 78.273414][ T5031] ? hfsplus_bnode_read_u16+0x1c1/0x2c0 [ 78.279101][ T5031] ? hfs_btree_inc_height+0xdb0/0xdb0 [ 78.284627][ T5031] ? hfs_find_1st_rec_by_cnid+0x3c0/0x3c0 [ 78.290432][ T5031] hfsplus_brec_insert+0x3a6/0xdd0 [ 78.295874][ T5031] ? hfsplus_brec_keylen+0x310/0x310 [ 78.301292][ T5031] ? __kmalloc+0xe6/0x230 [ 78.305676][ T5031] hfsplus_create_cat+0x49c/0x1b90 [ 78.310857][ T5031] ? hfsplus_find_cat+0x5c0/0x5c0 [ 78.315987][ T5031] ? do_raw_spin_unlock+0x13b/0x8b0 [ 78.321590][ T5031] ? _raw_spin_unlock+0x28/0x40 [ 78.326601][ T5031] ? hfsplus_new_inode+0x5b2/0x730 [ 78.331756][ T5031] hfsplus_fill_super+0x13ea/0x1c90 [ 78.337078][ T5031] ? hfsplus_mount+0x40/0x40 [ 78.342261][ T5031] ? read_lock_is_recursive+0x20/0x20 [ 78.347796][ T5031] mount_bdev+0x237/0x300 [ 78.352344][ T5031] ? hfsplus_mount+0x40/0x40 [ 78.357263][ T5031] ? get_tree_bdev+0x5b0/0x5b0 [ 78.362304][ T5031] ? vfs_parse_fs_string+0x190/0x230 [ 78.367784][ T5031] ? vfs_parse_fs_param+0x410/0x410 [ 78.373201][ T5031] ? cap_capable+0x1b4/0x240 [ 78.377954][ T5031] legacy_get_tree+0xef/0x190 [ 78.382797][ T5031] ? hfsplus_mark_mdb_dirty+0x1c0/0x1c0 [ 78.389084][ T5031] vfs_get_tree+0x8c/0x280 [ 78.393581][ T5031] do_new_mount+0x28f/0xae0 [ 78.398412][ T5031] ? do_move_mount_old+0x170/0x170 [ 78.404124][ T5031] __se_sys_mount+0x2d9/0x3c0 [ 78.409221][ T5031] ? __x64_sys_mount+0xc0/0xc0 [ 78.414631][ T5031] ? syscall_enter_from_user_mode+0x32/0x230 [ 78.420994][ T5031] ? __x64_sys_mount+0x20/0xc0 [ 78.426222][ T5031] do_syscall_64+0x41/0xc0 [ 78.430704][ T5031] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 78.436825][ T5031] RIP: 0033:0x7f41501ddc3a [ 78.441622][ T5031] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 78.461705][ T5031] RSP: 002b:00007fff809e7c88 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 78.470278][ T5031] RAX: ffffffffffffffda RBX: 00007fff809e7ca0 RCX: 00007f41501ddc3a [ 78.478728][ T5031] RDX: 0000000020000040 RSI: 0000000020000080 RDI: 00007fff809e7ca0 [ 78.486846][ T5031] RBP: 0000000000000004 R08: 00007fff809e7ce0 R09: 000000000000064b [ 78.495377][ T5031] R10: 0000000000208010 R11: 0000000000000286 R12: 0000000000208010 [ 78.503560][ T5031] R13: 00007fff809e7ce0 R14: 0000000000000003 R15: 0000000000080000 [ 78.511785][ T5031] [ 78.515090][ T5031] Kernel Offset: disabled [ 78.519525][ T5031] Rebooting in 86400 seconds..