./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2355208491 <...> Warning: Permanently added '10.128.1.154' (ED25519) to the list of known hosts. execve("./syz-executor2355208491", ["./syz-executor2355208491"], 0x7fffeae5af60 /* 10 vars */) = 0 brk(NULL) = 0x555556f7d000 brk(0x555556f7dd00) = 0x555556f7dd00 arch_prctl(ARCH_SET_FS, 0x555556f7d380) = 0 set_tid_address(0x555556f7d650) = 5063 set_robust_list(0x555556f7d660, 24) = 0 rseq(0x555556f7dca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2355208491", 4096) = 28 getrandom("\xb8\x82\xf0\xa9\xf8\x31\x50\x7a", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556f7dd00 brk(0x555556f9ed00) = 0x555556f9ed00 brk(0x555556f9f000) = 0x555556f9f000 mprotect(0x7f53ff47b000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 103.826622][ T27] audit: type=1400 audit(1704389454.696:83): avc: denied { execmem } for pid=5063 comm="syz-executor235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 103.847411][ T27] audit: type=1400 audit(1704389454.716:84): avc: denied { read write } for pid=5063 comm="syz-executor235" name="loop0" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5064 attached , child_tidptr=0x555556f7d650) = 5064 [pid 5064] set_robust_list(0x555556f7d660, 24) = 0 [pid 5064] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5064] setpgid(0, 0) = 0 [pid 5064] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5064] write(3, "1000", 4) = 4 [pid 5064] close(3) = 0 [pid 5064] memfd_create("syzkaller", 0) = 3 [pid 5064] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53f6fc8000 [ 103.872111][ T27] audit: type=1400 audit(1704389454.716:85): avc: denied { open } for pid=5063 comm="syz-executor235" path="/dev/loop0" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 103.897515][ T27] audit: type=1400 audit(1704389454.716:86): avc: denied { ioctl } for pid=5063 comm="syz-executor235" path="/dev/loop0" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [pid 5064] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5064] munmap(0x7f53f6fc8000, 138412032) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5064] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5064] close(3) = 0 [pid 5064] mkdir("./file0", 0777) = 0 [ 103.980728][ T5064] loop0: detected capacity change from 0 to 1024 [ 104.003336][ T27] audit: type=1400 audit(1704389454.876:87): avc: denied { mounton } for pid=5064 comm="syz-executor235" path="/root/file0" dev="sda1" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 104.020082][ T5064] hfsplus: new node 0 already hashed? [ 104.032253][ T5064] ------------[ cut here ]------------ [ 104.037848][ T5064] WARNING: CPU: 0 PID: 5064 at fs/hfsplus/bnode.c:573 hfsplus_bnode_create+0x14c/0x530 [ 104.047579][ T5064] Modules linked in: [ 104.051506][ T5064] CPU: 0 PID: 5064 Comm: syz-executor235 Not tainted 6.7.0-rc8-syzkaller-00024-gac865f00af29 #0 [ 104.062079][ T5064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 104.072324][ T5064] RIP: 0010:hfsplus_bnode_create+0x14c/0x530 [ 104.078433][ T5064] Code: 36 2e ff 45 39 fc 75 9e e8 d1 3b 2e ff 4c 89 f7 e8 a9 b1 2a 08 e8 c4 3b 2e ff 44 89 e6 48 c7 c7 c0 b6 e7 8a e8 e5 17 11 ff 90 <0f> 0b 90 e8 ac 3b 2e ff 48 89 d8 48 83 c4 18 5b 5d 41 5c 41 5d 41 [ 104.098369][ T5064] RSP: 0018:ffffc9000349f198 EFLAGS: 00010286 [ 104.104577][ T5064] RAX: 0000000000000023 RBX: ffff88801fe9f200 RCX: ffffffff816957c9 [ 104.112630][ T5064] RDX: 0000000000000000 RSI: ffffffff8169dc72 RDI: 0000000000000005 [ 104.120769][ T5064] RBP: ffff88801ff3a000 R08: 0000000000000005 R09: 0000000000000000 [ 104.128847][ T5064] R10: 0000000080000000 R11: 0000000000000001 R12: 0000000000000000 [ 104.136914][ T5064] R13: dffffc0000000000 R14: ffff88801ff3a0e0 R15: 0000000000000000 [ 104.139547][ T27] audit: type=1400 audit(1704389455.016:88): avc: denied { append } for pid=4493 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 104.144956][ T5064] FS: 0000555556f7d380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 104.168385][ T27] audit: type=1400 audit(1704389455.016:89): avc: denied { open } for pid=4493 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 104.176189][ T5064] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.199542][ T27] audit: type=1400 audit(1704389455.016:90): avc: denied { getattr } for pid=4493 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 104.205295][ T5064] CR2: 00007f53f7047c00 CR3: 000000001f2eb000 CR4: 00000000003506f0 [ 104.205322][ T5064] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 104.244215][ T5064] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 104.252332][ T5064] Call Trace: [ 104.255733][ T5064] [ 104.258697][ T5064] ? show_regs+0x8f/0xa0 [ 104.263058][ T5064] ? __warn+0xe6/0x390 [ 104.267190][ T5064] ? hfsplus_bnode_create+0x14c/0x530 [ 104.272599][ T5064] ? report_bug+0x3bc/0x580 [ 104.277252][ T5064] ? handle_bug+0x3d/0x70 [ 104.281666][ T5064] ? exc_invalid_op+0x17/0x40 [ 104.286485][ T5064] ? asm_exc_invalid_op+0x1a/0x20 [ 104.291582][ T5064] ? __wake_up_klogd.part.0+0x99/0xf0 [ 104.297076][ T5064] ? vprintk+0x82/0x90 [ 104.301209][ T5064] ? hfsplus_bnode_create+0x14c/0x530 [ 104.306727][ T5064] ? hfsplus_bnode_create+0x14b/0x530 [ 104.312171][ T5064] hfsplus_bmap_alloc+0x728/0x830 [ 104.317439][ T5064] ? hfsplus_bmap_reserve+0x410/0x410 [ 104.322881][ T5064] ? hfsplus_bnode_read_u16+0x7e/0xb0 [ 104.328374][ T5064] ? hfsplus_bnode_read+0x250/0x250 [ 104.333667][ T5064] hfs_bnode_split+0xe5/0xdc0 [ 104.338371][ T5064] ? hfsplus_bnode_read+0x10a/0x250 [ 104.343691][ T5064] ? hfs_bnode_need_zeroout+0x1a0/0x1a0 [ 104.349288][ T5064] ? memblock_search_pfn_nid+0x150/0x280 [ 104.355106][ T5064] hfsplus_brec_insert+0x2f7/0xc50 [ 104.360312][ T5064] ? hfsplus_brec_keylen+0x340/0x340 [ 104.365758][ T5064] ? rcu_is_watching+0x12/0xb0 [ 104.370591][ T5064] ? hfsplus_bmap_reserve+0x332/0x410 [ 104.376128][ T5064] hfsplus_create_cat+0x50d/0x10d0 [ 104.381318][ T5064] ? hfsplus_find_cat+0x4c0/0x4c0 [ 104.386579][ T5064] ? do_raw_spin_unlock+0x173/0x230 [ 104.391848][ T5064] ? __mod_timer+0x8fa/0xea0 [ 104.396627][ T5064] ? lockdep_hardirqs_on+0x7d/0x110 [ 104.401892][ T5064] ? do_raw_spin_unlock+0x173/0x230 [ 104.407229][ T5064] ? _raw_spin_unlock+0x28/0x40 [ 104.412129][ T5064] ? hfsplus_mark_mdb_dirty+0x189/0x200 [ 104.417768][ T5064] ? hfsplus_new_inode+0x4f4/0x900 [ 104.422949][ T5064] hfsplus_fill_super+0x16ca/0x1bc0 [ 104.428281][ T5064] ? hfsplus_iget+0x7a0/0x7a0 [ 104.433082][ T5064] ? lock_sync+0x190/0x190 [ 104.437557][ T5064] ? hfsplus_iget+0x7a0/0x7a0 [ 104.442357][ T5064] ? preempt_count_sub+0x160/0x160 [ 104.447580][ T5064] ? sb_set_blocksize+0xf6/0x120 [ 104.452559][ T5064] ? hfsplus_iget+0x7a0/0x7a0 [ 104.457344][ T5064] mount_bdev+0x1f3/0x2e0 [ 104.461737][ T5064] ? sget+0x640/0x640 [ 104.465875][ T5064] ? selinux_sb_eat_lsm_opts+0x594/0x700 [ 104.471561][ T5064] ? cap_capable+0x1cf/0x230 [ 104.476262][ T5064] ? zisofs_cleanup+0x20/0x20 [ 104.481010][ T5064] legacy_get_tree+0x109/0x220 [ 104.485879][ T5064] vfs_get_tree+0x8c/0x370 [ 104.490355][ T5064] path_mount+0x1492/0x1ed0 [ 104.494991][ T5064] ? lockdep_hardirqs_on+0x7d/0x110 [ 104.500264][ T5064] ? finish_automount+0xa40/0xa40 [ 104.505429][ T5064] ? putname+0x12e/0x170 [ 104.509734][ T5064] __x64_sys_mount+0x293/0x310 [ 104.514617][ T5064] ? copy_mnt_ns+0xb60/0xb60 [ 104.519273][ T5064] ? syscall_trace_enter.constprop.0+0xaf/0x1e0 [ 104.525651][ T5064] do_syscall_64+0x40/0x110 [ 104.530216][ T5064] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 104.536353][ T5064] RIP: 0033:0x7f53ff40812a [ 104.540822][ T5064] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 104.560547][ T5064] RSP: 002b:00007ffdaab27d38 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 104.569071][ T5064] RAX: ffffffffffffffda RBX: 00007ffdaab27d50 RCX: 00007f53ff40812a [ 104.577151][ T5064] RDX: 0000000020000040 RSI: 0000000020000080 RDI: 00007ffdaab27d50 [ 104.585240][ T5064] RBP: 0000000000000004 R08: 00007ffdaab27d90 R09: 000000000000064b [ 104.593319][ T5064] R10: 0000000000208010 R11: 0000000000000286 R12: 0000000000208010 [ 104.602137][ T5064] R13: 00007ffdaab27d90 R14: 0000000000000003 R15: 0000000000080000 [ 104.610233][ T5064] [ 104.613348][ T5064] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 104.620640][ T5064] CPU: 0 PID: 5064 Comm: syz-executor235 Not tainted 6.7.0-rc8-syzkaller-00024-gac865f00af29 #0 [ 104.631104][ T5064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 104.641182][ T5064] Call Trace: [ 104.644481][ T5064] [ 104.647428][ T5064] dump_stack_lvl+0xd9/0x1b0 [ 104.652056][ T5064] panic+0x6dc/0x790 [ 104.655985][ T5064] ? panic_smp_self_stop+0xa0/0xa0 [ 104.661129][ T5064] ? show_trace_log_lvl+0x363/0x4f0 [ 104.666363][ T5064] ? check_panic_on_warn+0x1f/0xb0 [ 104.671512][ T5064] ? hfsplus_bnode_create+0x14c/0x530 [ 104.676967][ T5064] check_panic_on_warn+0xab/0xb0 [ 104.681967][ T5064] __warn+0xf2/0x390 [ 104.685908][ T5064] ? hfsplus_bnode_create+0x14c/0x530 [ 104.691318][ T5064] report_bug+0x3bc/0x580 [ 104.695684][ T5064] handle_bug+0x3d/0x70 [ 104.699875][ T5064] exc_invalid_op+0x17/0x40 [ 104.704417][ T5064] asm_exc_invalid_op+0x1a/0x20 [ 104.709294][ T5064] RIP: 0010:hfsplus_bnode_create+0x14c/0x530 [ 104.715306][ T5064] Code: 36 2e ff 45 39 fc 75 9e e8 d1 3b 2e ff 4c 89 f7 e8 a9 b1 2a 08 e8 c4 3b 2e ff 44 89 e6 48 c7 c7 c0 b6 e7 8a e8 e5 17 11 ff 90 <0f> 0b 90 e8 ac 3b 2e ff 48 89 d8 48 83 c4 18 5b 5d 41 5c 41 5d 41 [ 104.734938][ T5064] RSP: 0018:ffffc9000349f198 EFLAGS: 00010286 [ 104.741033][ T5064] RAX: 0000000000000023 RBX: ffff88801fe9f200 RCX: ffffffff816957c9 [ 104.749131][ T5064] RDX: 0000000000000000 RSI: ffffffff8169dc72 RDI: 0000000000000005 [ 104.757125][ T5064] RBP: ffff88801ff3a000 R08: 0000000000000005 R09: 0000000000000000 [ 104.765325][ T5064] R10: 0000000080000000 R11: 0000000000000001 R12: 0000000000000000 [ 104.773335][ T5064] R13: dffffc0000000000 R14: ffff88801ff3a0e0 R15: 0000000000000000 [ 104.781341][ T5064] ? __wake_up_klogd.part.0+0x99/0xf0 [ 104.786760][ T5064] ? vprintk+0x82/0x90 [ 104.790921][ T5064] ? hfsplus_bnode_create+0x14b/0x530 [ 104.796448][ T5064] hfsplus_bmap_alloc+0x728/0x830 [ 104.801507][ T5064] ? hfsplus_bmap_reserve+0x410/0x410 [ 104.806911][ T5064] ? hfsplus_bnode_read_u16+0x7e/0xb0 [ 104.812315][ T5064] ? hfsplus_bnode_read+0x250/0x250 [ 104.817543][ T5064] hfs_bnode_split+0xe5/0xdc0 [ 104.822251][ T5064] ? hfsplus_bnode_read+0x10a/0x250 [ 104.827494][ T5064] ? hfs_bnode_need_zeroout+0x1a0/0x1a0 [ 104.833069][ T5064] ? memblock_search_pfn_nid+0x150/0x280 [ 104.838739][ T5064] hfsplus_brec_insert+0x2f7/0xc50 [ 104.843970][ T5064] ? hfsplus_brec_keylen+0x340/0x340 [ 104.849284][ T5064] ? rcu_is_watching+0x12/0xb0 [ 104.854077][ T5064] ? hfsplus_bmap_reserve+0x332/0x410 [ 104.859479][ T5064] hfsplus_create_cat+0x50d/0x10d0 [ 104.864626][ T5064] ? hfsplus_find_cat+0x4c0/0x4c0 [ 104.869675][ T5064] ? do_raw_spin_unlock+0x173/0x230 [ 104.874935][ T5064] ? __mod_timer+0x8fa/0xea0 [ 104.879576][ T5064] ? lockdep_hardirqs_on+0x7d/0x110 [ 104.884815][ T5064] ? do_raw_spin_unlock+0x173/0x230 [ 104.890061][ T5064] ? _raw_spin_unlock+0x28/0x40 [ 104.894956][ T5064] ? hfsplus_mark_mdb_dirty+0x189/0x200 [ 104.900548][ T5064] ? hfsplus_new_inode+0x4f4/0x900 [ 104.905704][ T5064] hfsplus_fill_super+0x16ca/0x1bc0 [ 104.910950][ T5064] ? hfsplus_iget+0x7a0/0x7a0 [ 104.915683][ T5064] ? lock_sync+0x190/0x190 [ 104.920137][ T5064] ? hfsplus_iget+0x7a0/0x7a0 [ 104.924857][ T5064] ? preempt_count_sub+0x160/0x160 [ 104.929992][ T5064] ? sb_set_blocksize+0xf6/0x120 [ 104.934960][ T5064] ? hfsplus_iget+0x7a0/0x7a0 [ 104.939683][ T5064] mount_bdev+0x1f3/0x2e0 [ 104.944056][ T5064] ? sget+0x640/0x640 [ 104.948075][ T5064] ? selinux_sb_eat_lsm_opts+0x594/0x700 [ 104.953742][ T5064] ? cap_capable+0x1cf/0x230 [ 104.958372][ T5064] ? zisofs_cleanup+0x20/0x20 [ 104.963087][ T5064] legacy_get_tree+0x109/0x220 [ 104.967883][ T5064] vfs_get_tree+0x8c/0x370 [ 104.972343][ T5064] path_mount+0x1492/0x1ed0 [ 104.976887][ T5064] ? lockdep_hardirqs_on+0x7d/0x110 [ 104.982128][ T5064] ? finish_automount+0xa40/0xa40 [ 104.987193][ T5064] ? putname+0x12e/0x170 [ 104.991473][ T5064] __x64_sys_mount+0x293/0x310 [ 104.996278][ T5064] ? copy_mnt_ns+0xb60/0xb60 [ 105.000907][ T5064] ? syscall_trace_enter.constprop.0+0xaf/0x1e0 [ 105.007184][ T5064] do_syscall_64+0x40/0x110 [ 105.011723][ T5064] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 105.017667][ T5064] RIP: 0033:0x7f53ff40812a [ 105.022103][ T5064] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 105.041756][ T5064] RSP: 002b:00007ffdaab27d38 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 105.050206][ T5064] RAX: ffffffffffffffda RBX: 00007ffdaab27d50 RCX: 00007f53ff40812a [ 105.058287][ T5064] RDX: 0000000020000040 RSI: 0000000020000080 RDI: 00007ffdaab27d50 [ 105.066283][ T5064] RBP: 0000000000000004 R08: 00007ffdaab27d90 R09: 000000000000064b [ 105.074280][ T5064] R10: 0000000000208010 R11: 0000000000000286 R12: 0000000000208010 [ 105.082285][ T5064] R13: 00007ffdaab27d90 R14: 0000000000000003 R15: 0000000000080000 [ 105.090287][ T5064] [ 105.093641][ T5064] Kernel Offset: disabled [ 105.098093][ T5064] Rebooting in 86400 seconds..