./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor308828009 <...> Warning: Permanently added '10.128.1.123' (ECDSA) to the list of known hosts. execve("./syz-executor308828009", ["./syz-executor308828009"], 0x7ffca9c19ba0 /* 10 vars */) = 0 brk(NULL) = 0x555555d05000 brk(0x555555d05c40) = 0x555555d05c40 arch_prctl(ARCH_SET_FS, 0x555555d05300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor308828009", 4096) = 27 brk(0x555555d26c40) = 0x555555d26c40 brk(0x555555d27000) = 0x555555d27000 mprotect(0x7fb540433000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 getpid() = 4999 openat(AT_FDCWD, "/sys/kernel/debug/x86/nmi_longest_ns", O_WRONLY|O_CLOEXEC) = 3 write(3, "10000000000", 11) = 11 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/hung_task_check_interval_secs", O_WRONLY|O_CLOEXEC) = 3 write(3, "20", 2) = 2 close(3) = 0 openat(AT_FDCWD, "/proc/sys/net/core/bpf_jit_kallsyms", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/net/core/bpf_jit_harden", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/kptr_restrict", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/softlockup_all_cpu_backtrace", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3 write(3, "100", 3) = 3 close(3) = 0 openat(AT_FDCWD, "/proc/sys/vm/oom_dump_tasks", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/debug/exception-trace", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/printk", O_WRONLY|O_CLOEXEC) = 3 write(3, "7 4 1 3", 7) = 7 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/keys/gc_delay", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/vm/oom_kill_allocating_task", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/ctrl-alt-del", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/cad_pid", O_WRONLY|O_CLOEXEC) = 3 write(3, "4999", 4) = 4 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 sendto(4, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 recvfrom(4, [{nlmsg_len=784, nlmsg_type=nlctrl, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=4999}, "\x01\x02\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00\x06\x00\x01\x00\x1d\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x2e\x00\x00\x00\x98\x02\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x05\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x03\x00"...], 4096, 0, NULL, NULL) = 784 recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=4999}, {error=0, msg={nlmsg_len=36, nlmsg_type=nlctrl, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 access("/proc/net", R_OK) = 0 access("/proc/net/unix", R_OK) = 0 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan0", ifr_ifindex=11}) = 0 close(5) = 0 sendto(4, [{nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x0b\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x06\x00\x0a\x00\xa0\xaa\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=4999}, {error=0, msg={nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan0", ifr_ifindex=11}) = 0 close(5) = 0 sendto(3, [{nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0b\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x0c\x00\x01\x00\x02\x00\xaa\xaa\xaa\xaa\xaa\xaa"], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 44 recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=4999}, {error=0, msg={nlmsg_len=44, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 sendto(3, [{nlmsg_len=68, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|NLM_F_EXCL|NLM_F_CREATE, nlmsg_seq=0, nlmsg_pid=0}, {ifi_family=AF_UNSPEC, ifi_type=ARPHRD_NETROM, ifi_index=0, ifi_flags=0, ifi_change=0}, [[{nla_len=11, nla_type=IFLA_IFNAME}, "lowpan0"...], [{nla_len=16, nla_type=IFLA_LINKINFO}, [{nla_len=10, nla_type=IFLA_INFO_KIND}, "lowpan"...]], [{nla_len=8, nla_type=IFLA_LINK}, 11]]], 68, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 68 recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=4999}, {error=0, msg={nlmsg_len=68, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|NLM_F_EXCL|NLM_F_CREATE, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan1", ifr_ifindex=12}) = 0 close(5) = 0 sendto(4, [{nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x0b\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x06\x00\x0a\x00\xa1\xaa\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=4999}, {error=0, msg={nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan1", ifr_ifindex=12}) = 0 close(5) = 0 sendto(3, [{nlmsg_len=44, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, {ifi_family=AF_UNSPEC, ifi_type=ARPHRD_NETROM, ifi_index=if_nametoindex("wpan1"), ifi_flags=IFF_UP, ifi_change=0x1}, [{nla_len=12, nla_type=IFLA_ADDRESS}, 02:01:aa:aa:aa:aa:aa]], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 44 recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=4999}, {error=0, msg={nlmsg_len=44, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 close(3) = 0 close(4) = 0 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb537f77000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768) = 32768 munmap(0x7fb537f77000, 32768) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./file1", 0777) = 0 mount("/dev/loop0", "./file1", "hfs", MS_REC, "") = 0 openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 chdir("./file1") = 0 ioctl(4, LOOP_CLR_FD) = 0 close(4) = 0 openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_LARGEFILE|O_NOATIME|FASYNC, 000) = 4 openat(AT_FDCWD, "./file1", O_RDONLY|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|FASYNC, 000) = 5 openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 write(6, "6", 1) = 1 [ 41.839781][ T4999] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=4999 'syz-executor308' [ 41.855357][ T4999] loop0: detected capacity change from 0 to 64 [ 41.879337][ T27] audit: type=1804 audit(1687466476.672:2): pid=4999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor308" name="/root/file1/file1" dev="loop0" ino=18 res=1 errno=0 [ 41.882604][ T4999] FAULT_INJECTION: forcing a failure. [ 41.882604][ T4999] name failslab, interval 1, probability 0, space 0, times 1 [ 41.913810][ T4999] CPU: 0 PID: 4999 Comm: syz-executor308 Not tainted 6.4.0-rc7-syzkaller-00072-gdad9774deaf1 #0 [ 41.924361][ T4999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 41.934504][ T4999] Call Trace: [ 41.937785][ T4999] [ 41.940707][ T4999] dump_stack_lvl+0x136/0x150 [ 41.945409][ T4999] should_fail_ex+0x4a3/0x5b0 [ 41.950087][ T4999] should_failslab+0x9/0x20 [ 41.954581][ T4999] __kmem_cache_alloc_node+0x5b/0x320 [ 41.959947][ T4999] ? __hfs_bnode_create+0x107/0x820 [ 41.965133][ T4999] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 41.971129][ T4999] ? __hfs_bnode_create+0x107/0x820 [ 41.976314][ T4999] __kmalloc+0x4e/0x190 [ 41.980455][ T4999] __hfs_bnode_create+0x107/0x820 [ 41.985471][ T4999] ? memcpy_to_page+0x80/0x80 [ 41.990137][ T4999] ? lock_downgrade+0x690/0x690 [ 41.994979][ T4999] ? do_raw_spin_lock+0x124/0x2b0 [ 41.999994][ T4999] ? spin_bug+0x1c0/0x1c0 [ 42.004335][ T4999] ? lock_downgrade+0x690/0x690 [ 42.009191][ T4999] hfs_bnode_find+0x423/0xc60 [ 42.013863][ T4999] ? find_held_lock+0x2d/0x110 [ 42.018642][ T4999] ? hfs_bnode_put.part.0+0x280/0x280 [ 42.024004][ T4999] ? __lock_acquire+0x1987/0x5f30 [ 42.029022][ T4999] ? hfs_bmap_reserve+0x2b9/0x380 [ 42.034037][ T4999] hfs_bmap_alloc+0x102/0x800 [ 42.038708][ T4999] ? hfs_bmap_reserve+0x380/0x380 [ 42.043729][ T4999] hfs_btree_inc_height.isra.0+0xe6/0x950 [ 42.049440][ T4999] ? hfs_bnode_split+0xda0/0xda0 [ 42.054364][ T4999] ? rcu_is_watching+0x12/0xb0 [ 42.059144][ T4999] ? trace_contention_end+0xd8/0x100 [ 42.064420][ T4999] hfs_brec_insert+0x983/0xbc0 [ 42.069176][ T4999] ? hfs_find_init+0x182/0x240 [ 42.074013][ T4999] ? hfs_brec_find+0x3c9/0x500 [ 42.078766][ T4999] ? hfs_brec_keylen+0x3a0/0x3a0 [ 42.083688][ T4999] ? __kmem_cache_alloc_node+0x1b0/0x320 [ 42.089315][ T4999] ? hfs_bmap_reserve+0x2b9/0x380 [ 42.094329][ T4999] __hfs_ext_write_extent+0x3ec/0x510 [ 42.099695][ T4999] hfs_ext_read_extent+0x81c/0xa20 [ 42.104793][ T4999] ? rcu_is_watching+0x12/0xb0 [ 42.109550][ T4999] ? hfs_free_extents+0x2e0/0x2e0 [ 42.114581][ T4999] ? clean_bdev_aliases+0x4ff/0x600 [ 42.119781][ T4999] ? find_held_lock+0x2d/0x110 [ 42.124540][ T4999] hfs_extend_file+0x4b5/0xae0 [ 42.129292][ T4999] ? spin_bug+0x1c0/0x1c0 [ 42.133616][ T4999] ? hfs_free_fork+0x920/0x920 [ 42.138369][ T4999] ? rcu_is_watching+0x12/0xb0 [ 42.143130][ T4999] ? __mark_inode_dirty+0x297/0xd60 [ 42.148324][ T4999] hfs_get_block+0x17f/0x820 [ 42.152909][ T4999] __block_write_begin_int+0x3bd/0x14b0 [ 42.158446][ T4999] ? hfs_extend_file+0xae0/0xae0 [ 42.163382][ T4999] ? invalidate_bh_lrus_cpu+0x140/0x140 [ 42.168915][ T4999] ? folio_flags.constprop.0+0x53/0x150 [ 42.174463][ T4999] ? hfs_extend_file+0xae0/0xae0 [ 42.179393][ T4999] block_write_begin+0xb9/0x4d0 [ 42.184231][ T4999] cont_write_begin+0x534/0x740 [ 42.189071][ T4999] ? hfs_extend_file+0xae0/0xae0 [ 42.193995][ T4999] ? folio_flags.constprop.0+0x53/0x150 [ 42.199533][ T4999] ? block_write_begin+0x4d0/0x4d0 [ 42.204629][ T4999] ? __block_commit_write.constprop.0.isra.0+0x2af/0x330 [ 42.211647][ T4999] ? rcu_is_watching+0x12/0xb0 [ 42.216405][ T4999] ? __mark_inode_dirty+0x297/0xd60 [ 42.221597][ T4999] ? folio_flags.constprop.0+0x53/0x150 [ 42.227144][ T4999] hfs_write_begin+0x87/0x150 [ 42.231824][ T4999] ? hfs_extend_file+0xae0/0xae0 [ 42.236750][ T4999] cont_write_begin+0x334/0x740 [ 42.241593][ T4999] ? hfs_extend_file+0xae0/0xae0 [ 42.246523][ T4999] ? block_write_begin+0x4d0/0x4d0 [ 42.251621][ T4999] ? ktime_get_coarse_real_ts64+0x1bb/0x200 [ 42.257508][ T4999] ? fault_in_subpage_writeable+0x20/0x20 [ 42.263220][ T4999] ? ktime_get_coarse_real_ts64+0x15e/0x200 [ 42.269283][ T4999] hfs_write_begin+0x87/0x150 [ 42.273951][ T4999] ? hfs_extend_file+0xae0/0xae0 [ 42.278878][ T4999] generic_perform_write+0x256/0x570 [ 42.284156][ T4999] ? generic_file_readonly_mmap+0x180/0x180 [ 42.290065][ T4999] ? new_inode+0x280/0x280 [ 42.294480][ T4999] ? generic_write_checks+0x2c0/0x400 [ 42.299846][ T4999] __generic_file_write_iter+0x2ae/0x500 [ 42.305480][ T4999] generic_file_write_iter+0xe3/0x350 [ 42.310846][ T4999] do_iter_readv_writev+0x20b/0x3b0 [ 42.316042][ T4999] ? generic_copy_file_range+0x1d0/0x1d0 [ 42.321671][ T4999] ? bpf_lsm_file_permission+0x9/0x10 [ 42.327036][ T4999] ? security_file_permission+0xaf/0xd0 [ 42.332580][ T4999] do_iter_write+0x185/0x7e0 [ 42.337172][ T4999] vfs_writev+0x1aa/0x670 [ 42.341512][ T4999] ? vfs_iter_write+0xa0/0xa0 [ 42.346184][ T4999] ? lock_sync+0x190/0x190 [ 42.350592][ T4999] ? ptrace_stop.part.0+0x4a3/0x8e0 [ 42.355786][ T4999] ? spin_bug+0x1c0/0x1c0 [ 42.360133][ T4999] ? recalc_sigpending_tsk+0x18b/0x1d0 [ 42.365579][ T4999] ? ptrace_stop.part.0+0x60f/0x8e0 [ 42.370768][ T4999] ? find_held_lock+0x2d/0x110 [ 42.375525][ T4999] do_pwritev+0x1b6/0x270 [ 42.379848][ T4999] ? do_writev+0x2f0/0x2f0 [ 42.384273][ T4999] ? _raw_spin_unlock_irq+0x23/0x50 [ 42.389482][ T4999] ? lockdep_hardirqs_on+0x7d/0x100 [ 42.394679][ T4999] __x64_sys_pwritev2+0xef/0x150 [ 42.399606][ T4999] do_syscall_64+0x39/0xb0 [ 42.404009][ T4999] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 42.409897][ T4999] RIP: 0033:0x7fb5403cbf39 [ 42.414298][ T4999] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 71 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 42.433890][ T4999] RSP: 002b:00007ffe63245fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 42.442293][ T4999] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fb5403cbf39 [ 42.450272][ T4999] RDX: 0000000000000001 RSI: 0000000020000100 RDI: 0000000000000004 [ 42.458230][ T4999] RBP: 0000000000000006 R08: 0000000000000000 R09: 0000000000000000 [ 42.466184][ T4999] R10: 0000000000105405 R11: 0000000000000246 R12: 0000000000000004 [ 42.474227][ T4999] R13: 00007ffe63245ff0 R14: 00007ffe63246010 R15: 0000000000000003 [ 42.482196][ T4999] [ 42.486378][ T4999] hfs: new node 0 already hashed? [ 42.491780][ T4999] ------------[ cut here ]------------ [ 42.497282][ T4999] WARNING: CPU: 0 PID: 4999 at fs/hfs/bnode.c:422 hfs_bnode_create+0x14c/0x530 [ 42.506234][ T4999] Modules linked in: [ 42.510181][ T4999] CPU: 0 PID: 4999 Comm: syz-executor308 Not tainted 6.4.0-rc7-syzkaller-00072-gdad9774deaf1 #0 [ 42.520623][ T4999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 42.530715][ T4999] RIP: 0010:hfs_bnode_create+0x14c/0x530 [ 42.536355][ T4999] Code: 89 ef 44 89 fe e8 f4 43 32 ff 44 39 fd 75 9b e8 4a 48 32 ff 4c 89 f7 e8 52 48 c2 07 89 ee 48 c7 c7 e0 fc 66 8a e8 34 2c 16 ff <0f> 0b e8 2d 48 32 ff 4c 89 e0 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e [ 42.556005][ T4999] RSP: 0018:ffffc90003aaefb8 EFLAGS: 00010282 [ 42.562092][ T4999] RAX: 000000000000001f RBX: ffff88807de78000 RCX: 0000000000000000 [ 42.570101][ T4999] RDX: 0000000000000000 RSI: ffffffff8168bd1c RDI: 0000000000000005 [ 42.578089][ T4999] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 42.586037][ T4999] R10: 0000000080000000 R11: 0000000000000001 R12: ffff88801529af00 [ 42.594055][ T4999] R13: dffffc0000000000 R14: ffff88807de780e0 R15: 0000000000000000 [ 42.602046][ T4999] FS: 0000555555d05300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 42.611014][ T4999] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.617662][ T4999] CR2: 00007fff7f369cc8 CR3: 000000007a610000 CR4: 0000000000350ef0 [ 42.625634][ T4999] Call Trace: [ 42.628958][ T4999] [ 42.631905][ T4999] ? __warn+0xe6/0x390 [ 42.636015][ T4999] ? hfs_bnode_create+0x14c/0x530 [ 42.641075][ T4999] ? report_bug+0x2da/0x500 [ 42.645710][ T4999] ? handle_bug+0x3c/0x70 [ 42.650074][ T4999] ? exc_invalid_op+0x18/0x50 [ 42.654755][ T4999] ? asm_exc_invalid_op+0x1a/0x20 [ 42.659814][ T4999] ? vprintk+0x8c/0xa0 [ 42.663900][ T4999] ? hfs_bnode_create+0x14c/0x530 [ 42.668966][ T4999] ? hfs_bnode_create+0x14c/0x530 [ 42.673995][ T4999] hfs_bmap_alloc+0x6f4/0x800 [ 42.678701][ T4999] ? hfs_bmap_reserve+0x380/0x380 [ 42.683732][ T4999] ? hfs_bnode_put.part.0+0x1e0/0x280 [ 42.689146][ T4999] ? lock_downgrade+0x690/0x690 [ 42.694022][ T4999] hfs_btree_inc_height.isra.0+0xe6/0x950 [ 42.699809][ T4999] ? hfs_bnode_split+0xda0/0xda0 [ 42.704764][ T4999] ? do_raw_spin_unlock+0x175/0x230 [ 42.710006][ T4999] ? _raw_spin_unlock+0x28/0x40 [ 42.714868][ T4999] ? hfs_bnode_put.part.0+0x1e0/0x280 [ 42.720311][ T4999] hfs_brec_insert+0x851/0xbc0 [ 42.725096][ T4999] ? hfs_brec_keylen+0x3a0/0x3a0 [ 42.730066][ T4999] ? __kmem_cache_alloc_node+0x1b0/0x320 [ 42.735712][ T4999] ? hfs_bmap_reserve+0x2b9/0x380 [ 42.740800][ T4999] __hfs_ext_write_extent+0x3ec/0x510 [ 42.746203][ T4999] hfs_ext_read_extent+0x81c/0xa20 [ 42.751378][ T4999] ? rcu_is_watching+0x12/0xb0 [ 42.756179][ T4999] ? hfs_free_extents+0x2e0/0x2e0 [ 42.761273][ T4999] ? clean_bdev_aliases+0x4ff/0x600 [ 42.766495][ T4999] ? find_held_lock+0x2d/0x110 [ 42.771349][ T4999] hfs_extend_file+0x4b5/0xae0 [ 42.776161][ T4999] ? spin_bug+0x1c0/0x1c0 [ 42.780514][ T4999] ? hfs_free_fork+0x920/0x920 [ 42.785291][ T4999] ? rcu_is_watching+0x12/0xb0 [ 42.790092][ T4999] ? __mark_inode_dirty+0x297/0xd60 [ 42.795305][ T4999] hfs_get_block+0x17f/0x820 [ 42.799923][ T4999] __block_write_begin_int+0x3bd/0x14b0 [ 42.805482][ T4999] ? hfs_extend_file+0xae0/0xae0 [ 42.810478][ T4999] ? invalidate_bh_lrus_cpu+0x140/0x140 [ 42.816031][ T4999] ? folio_flags.constprop.0+0x53/0x150 [ 42.821611][ T4999] ? hfs_extend_file+0xae0/0xae0 [ 42.826577][ T4999] block_write_begin+0xb9/0x4d0 [ 42.831499][ T4999] cont_write_begin+0x534/0x740 [ 42.836366][ T4999] ? hfs_extend_file+0xae0/0xae0 [ 42.841347][ T4999] ? folio_flags.constprop.0+0x53/0x150 [ 42.846966][ T4999] ? block_write_begin+0x4d0/0x4d0 [ 42.852111][ T4999] ? __block_commit_write.constprop.0.isra.0+0x2af/0x330 [ 42.859191][ T4999] ? rcu_is_watching+0x12/0xb0 [ 42.863943][ T4999] ? __mark_inode_dirty+0x297/0xd60 [ 42.869180][ T4999] ? folio_flags.constprop.0+0x53/0x150 [ 42.874738][ T4999] hfs_write_begin+0x87/0x150 [ 42.879478][ T4999] ? hfs_extend_file+0xae0/0xae0 [ 42.884444][ T4999] cont_write_begin+0x334/0x740 [ 42.889369][ T4999] ? hfs_extend_file+0xae0/0xae0 [ 42.894364][ T4999] ? block_write_begin+0x4d0/0x4d0 [ 42.899521][ T4999] ? ktime_get_coarse_real_ts64+0x1bb/0x200 [ 42.905432][ T4999] ? fault_in_subpage_writeable+0x20/0x20 [ 42.911211][ T4999] ? ktime_get_coarse_real_ts64+0x15e/0x200 [ 42.917196][ T4999] hfs_write_begin+0x87/0x150 [ 42.921915][ T4999] ? hfs_extend_file+0xae0/0xae0 [ 42.926862][ T4999] generic_perform_write+0x256/0x570 [ 42.932227][ T4999] ? generic_file_readonly_mmap+0x180/0x180 [ 42.938156][ T4999] ? new_inode+0x280/0x280 [ 42.942558][ T4999] ? generic_write_checks+0x2c0/0x400 [ 42.947961][ T4999] __generic_file_write_iter+0x2ae/0x500 [ 42.953598][ T4999] generic_file_write_iter+0xe3/0x350 [ 42.959005][ T4999] do_iter_readv_writev+0x20b/0x3b0 [ 42.964240][ T4999] ? generic_copy_file_range+0x1d0/0x1d0 [ 42.969939][ T4999] ? bpf_lsm_file_permission+0x9/0x10 [ 42.975337][ T4999] ? security_file_permission+0xaf/0xd0 [ 42.980917][ T4999] do_iter_write+0x185/0x7e0 [ 42.985528][ T4999] vfs_writev+0x1aa/0x670 [ 42.989941][ T4999] ? vfs_iter_write+0xa0/0xa0 [ 42.994725][ T4999] ? lock_sync+0x190/0x190 [ 42.999171][ T4999] ? ptrace_stop.part.0+0x4a3/0x8e0 [ 43.004413][ T4999] ? spin_bug+0x1c0/0x1c0 [ 43.008817][ T4999] ? recalc_sigpending_tsk+0x18b/0x1d0 [ 43.014296][ T4999] ? ptrace_stop.part.0+0x60f/0x8e0 [ 43.019562][ T4999] ? find_held_lock+0x2d/0x110 [ 43.024340][ T4999] do_pwritev+0x1b6/0x270 [ 43.028723][ T4999] ? do_writev+0x2f0/0x2f0 [ 43.033167][ T4999] ? _raw_spin_unlock_irq+0x23/0x50 [ 43.038398][ T4999] ? lockdep_hardirqs_on+0x7d/0x100 [ 43.043614][ T4999] __x64_sys_pwritev2+0xef/0x150 [ 43.048592][ T4999] do_syscall_64+0x39/0xb0 [ 43.053028][ T4999] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 43.059034][ T4999] RIP: 0033:0x7fb5403cbf39 [ 43.063453][ T4999] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 71 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 43.083223][ T4999] RSP: 002b:00007ffe63245fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 43.091728][ T4999] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fb5403cbf39 [ 43.099761][ T4999] RDX: 0000000000000001 RSI: 0000000020000100 RDI: 0000000000000004 [ 43.107784][ T4999] RBP: 0000000000000006 R08: 0000000000000000 R09: 0000000000000000 [ 43.115752][ T4999] R10: 0000000000105405 R11: 0000000000000246 R12: 0000000000000004 [ 43.123790][ T4999] R13: 00007ffe63245ff0 R14: 00007ffe63246010 R15: 0000000000000003 [ 43.131825][ T4999] [ 43.134831][ T4999] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 43.142121][ T4999] CPU: 0 PID: 4999 Comm: syz-executor308 Not tainted 6.4.0-rc7-syzkaller-00072-gdad9774deaf1 #0 [ 43.152518][ T4999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 43.162561][ T4999] Call Trace: [ 43.165916][ T4999] [ 43.168839][ T4999] dump_stack_lvl+0xd9/0x150 [ 43.173512][ T4999] panic+0x686/0x730 [ 43.177402][ T4999] ? panic_smp_self_stop+0xa0/0xa0 [ 43.182509][ T4999] ? show_trace_log_lvl+0x284/0x390 [ 43.187709][ T4999] ? hfs_bnode_create+0x14c/0x530 [ 43.192738][ T4999] check_panic_on_warn+0xb1/0xc0 [ 43.197678][ T4999] __warn+0xf2/0x390 [ 43.201577][ T4999] ? hfs_bnode_create+0x14c/0x530 [ 43.206599][ T4999] report_bug+0x2da/0x500 [ 43.210964][ T4999] handle_bug+0x3c/0x70 [ 43.215123][ T4999] exc_invalid_op+0x18/0x50 [ 43.219623][ T4999] asm_exc_invalid_op+0x1a/0x20 [ 43.224503][ T4999] RIP: 0010:hfs_bnode_create+0x14c/0x530 [ 43.230144][ T4999] Code: 89 ef 44 89 fe e8 f4 43 32 ff 44 39 fd 75 9b e8 4a 48 32 ff 4c 89 f7 e8 52 48 c2 07 89 ee 48 c7 c7 e0 fc 66 8a e8 34 2c 16 ff <0f> 0b e8 2d 48 32 ff 4c 89 e0 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e [ 43.249747][ T4999] RSP: 0018:ffffc90003aaefb8 EFLAGS: 00010282 [ 43.255803][ T4999] RAX: 000000000000001f RBX: ffff88807de78000 RCX: 0000000000000000 [ 43.263797][ T4999] RDX: 0000000000000000 RSI: ffffffff8168bd1c RDI: 0000000000000005 [ 43.271756][ T4999] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 43.279714][ T4999] R10: 0000000080000000 R11: 0000000000000001 R12: ffff88801529af00 [ 43.287673][ T4999] R13: dffffc0000000000 R14: ffff88807de780e0 R15: 0000000000000000 [ 43.295641][ T4999] ? vprintk+0x8c/0xa0 [ 43.299752][ T4999] ? hfs_bnode_create+0x14c/0x530 [ 43.304811][ T4999] hfs_bmap_alloc+0x6f4/0x800 [ 43.309483][ T4999] ? hfs_bmap_reserve+0x380/0x380 [ 43.314505][ T4999] ? hfs_bnode_put.part.0+0x1e0/0x280 [ 43.319868][ T4999] ? lock_downgrade+0x690/0x690 [ 43.324714][ T4999] hfs_btree_inc_height.isra.0+0xe6/0x950 [ 43.330443][ T4999] ? hfs_bnode_split+0xda0/0xda0 [ 43.335372][ T4999] ? do_raw_spin_unlock+0x175/0x230 [ 43.340566][ T4999] ? _raw_spin_unlock+0x28/0x40 [ 43.345413][ T4999] ? hfs_bnode_put.part.0+0x1e0/0x280 [ 43.350795][ T4999] hfs_brec_insert+0x851/0xbc0 [ 43.355572][ T4999] ? hfs_brec_keylen+0x3a0/0x3a0 [ 43.360505][ T4999] ? __kmem_cache_alloc_node+0x1b0/0x320 [ 43.366135][ T4999] ? hfs_bmap_reserve+0x2b9/0x380 [ 43.371154][ T4999] __hfs_ext_write_extent+0x3ec/0x510 [ 43.376541][ T4999] hfs_ext_read_extent+0x81c/0xa20 [ 43.381642][ T4999] ? rcu_is_watching+0x12/0xb0 [ 43.386407][ T4999] ? hfs_free_extents+0x2e0/0x2e0 [ 43.391444][ T4999] ? clean_bdev_aliases+0x4ff/0x600 [ 43.396643][ T4999] ? find_held_lock+0x2d/0x110 [ 43.401406][ T4999] hfs_extend_file+0x4b5/0xae0 [ 43.406182][ T4999] ? spin_bug+0x1c0/0x1c0 [ 43.410511][ T4999] ? hfs_free_fork+0x920/0x920 [ 43.415266][ T4999] ? rcu_is_watching+0x12/0xb0 [ 43.420025][ T4999] ? __mark_inode_dirty+0x297/0xd60 [ 43.425216][ T4999] hfs_get_block+0x17f/0x820 [ 43.429799][ T4999] __block_write_begin_int+0x3bd/0x14b0 [ 43.435334][ T4999] ? hfs_extend_file+0xae0/0xae0 [ 43.440264][ T4999] ? invalidate_bh_lrus_cpu+0x140/0x140 [ 43.445801][ T4999] ? folio_flags.constprop.0+0x53/0x150 [ 43.451357][ T4999] ? hfs_extend_file+0xae0/0xae0 [ 43.456293][ T4999] block_write_begin+0xb9/0x4d0 [ 43.461137][ T4999] cont_write_begin+0x534/0x740 [ 43.465980][ T4999] ? hfs_extend_file+0xae0/0xae0 [ 43.470905][ T4999] ? folio_flags.constprop.0+0x53/0x150 [ 43.476444][ T4999] ? block_write_begin+0x4d0/0x4d0 [ 43.481551][ T4999] ? __block_commit_write.constprop.0.isra.0+0x2af/0x330 [ 43.488665][ T4999] ? rcu_is_watching+0x12/0xb0 [ 43.493425][ T4999] ? __mark_inode_dirty+0x297/0xd60 [ 43.498618][ T4999] ? folio_flags.constprop.0+0x53/0x150 [ 43.504157][ T4999] hfs_write_begin+0x87/0x150 [ 43.508825][ T4999] ? hfs_extend_file+0xae0/0xae0 [ 43.513756][ T4999] cont_write_begin+0x334/0x740 [ 43.518599][ T4999] ? hfs_extend_file+0xae0/0xae0 [ 43.523528][ T4999] ? block_write_begin+0x4d0/0x4d0 [ 43.528625][ T4999] ? ktime_get_coarse_real_ts64+0x1bb/0x200 [ 43.534516][ T4999] ? fault_in_subpage_writeable+0x20/0x20 [ 43.540232][ T4999] ? ktime_get_coarse_real_ts64+0x15e/0x200 [ 43.546130][ T4999] hfs_write_begin+0x87/0x150 [ 43.550797][ T4999] ? hfs_extend_file+0xae0/0xae0 [ 43.555728][ T4999] generic_perform_write+0x256/0x570 [ 43.561008][ T4999] ? generic_file_readonly_mmap+0x180/0x180 [ 43.566894][ T4999] ? new_inode+0x280/0x280 [ 43.571303][ T4999] ? generic_write_checks+0x2c0/0x400 [ 43.576687][ T4999] __generic_file_write_iter+0x2ae/0x500 [ 43.582404][ T4999] generic_file_write_iter+0xe3/0x350 [ 43.587773][ T4999] do_iter_readv_writev+0x20b/0x3b0 [ 43.592969][ T4999] ? generic_copy_file_range+0x1d0/0x1d0 [ 43.598686][ T4999] ? bpf_lsm_file_permission+0x9/0x10 [ 43.604049][ T4999] ? security_file_permission+0xaf/0xd0 [ 43.609587][ T4999] do_iter_write+0x185/0x7e0 [ 43.614178][ T4999] vfs_writev+0x1aa/0x670 [ 43.618505][ T4999] ? vfs_iter_write+0xa0/0xa0 [ 43.623174][ T4999] ? lock_sync+0x190/0x190 [ 43.627595][ T4999] ? ptrace_stop.part.0+0x4a3/0x8e0 [ 43.632788][ T4999] ? spin_bug+0x1c0/0x1c0 [ 43.637113][ T4999] ? recalc_sigpending_tsk+0x18b/0x1d0 [ 43.642572][ T4999] ? ptrace_stop.part.0+0x60f/0x8e0 [ 43.647763][ T4999] ? find_held_lock+0x2d/0x110 [ 43.652522][ T4999] do_pwritev+0x1b6/0x270 [ 43.656847][ T4999] ? do_writev+0x2f0/0x2f0 [ 43.661260][ T4999] ? _raw_spin_unlock_irq+0x23/0x50 [ 43.666454][ T4999] ? lockdep_hardirqs_on+0x7d/0x100 [ 43.671646][ T4999] __x64_sys_pwritev2+0xef/0x150 [ 43.676573][ T4999] do_syscall_64+0x39/0xb0 [ 43.680979][ T4999] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 43.686867][ T4999] RIP: 0033:0x7fb5403cbf39 [ 43.691272][ T4999] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 71 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 43.710868][ T4999] RSP: 002b:00007ffe63245fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 43.719273][ T4999] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fb5403cbf39 [ 43.727227][ T4999] RDX: 0000000000000001 RSI: 0000000020000100 RDI: 0000000000000004 [ 43.735181][ T4999] RBP: 0000000000000006 R08: 0000000000000000 R09: 0000000000000000 [ 43.743137][ T4999] R10: 0000000000105405 R11: 0000000000000246 R12: 0000000000000004 [ 43.751092][ T4999] R13: 00007ffe63245ff0 R14: 00007ffe63246010 R15: 0000000000000003 [ 43.759057][ T4999] [ 43.762949][ T4999] Kernel Offset: disabled [ 43.767318][ T4999] Rebooting in 86400 seconds..