./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2362624898 <...> Warning: Permanently added '10.128.1.48' (ED25519) to the list of known hosts. execve("./syz-executor2362624898", ["./syz-executor2362624898"], 0x7ffe5352c7a0 /* 10 vars */) = 0 brk(NULL) = 0x555556470000 brk(0x555556470d00) = 0x555556470d00 arch_prctl(ARCH_SET_FS, 0x555556470380) = 0 set_tid_address(0x555556470650) = 5015 set_robust_list(0x555556470660, 24) = 0 rseq(0x555556470ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2362624898", 4096) = 28 getrandom("\x87\x09\xeb\xe1\x53\x89\xa6\x58", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556470d00 brk(0x555556491d00) = 0x555556491d00 brk(0x555556492000) = 0x555556492000 mprotect(0x7fa93b5f6000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 [ 59.079888][ T26] audit: type=1400 audit(1690953030.005:83): avc: denied { write } for pid=5012 comm="strace-static-x" path="pipe:[29592]" dev="pipefs" ino=29592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa933146000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 munmap(0x7fa933146000, 524288) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./bus", 0777) = 0 [ 59.109252][ T26] audit: type=1400 audit(1690953030.035:84): avc: denied { append } for pid=4453 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 59.112514][ T5015] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5015 'syz-executor236' [ 59.131810][ T26] audit: type=1400 audit(1690953030.035:85): avc: denied { open } for pid=4453 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 59.157044][ T5015] loop0: detected capacity change from 0 to 1024 [ 59.164226][ T26] audit: type=1400 audit(1690953030.035:86): avc: denied { getattr } for pid=4453 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 59.175152][ T5015] ======================================================= [ 59.175152][ T5015] WARNING: The mand mount option has been deprecated and [ 59.175152][ T5015] and is ignored by this kernel. Remove the mand [ 59.175152][ T5015] option from the mount to silence this warning. [ 59.175152][ T5015] ======================================================= [ 59.193264][ T26] audit: type=1400 audit(1690953030.035:87): avc: denied { execmem } for pid=5015 comm="syz-executor236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 59.247177][ T26] audit: type=1400 audit(1690953030.075:88): avc: denied { read write } for pid=5015 comm="syz-executor236" name="loop0" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 chdir("./bus") = 0 ioctl(4, LOOP_CLR_FD) = 0 close(4) = 0 [ 59.271770][ T26] audit: type=1400 audit(1690953030.075:89): avc: denied { open } for pid=5015 comm="syz-executor236" path="/dev/loop0" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 59.296837][ T26] audit: type=1400 audit(1690953030.075:90): avc: denied { ioctl } for pid=5015 comm="syz-executor236" path="/dev/loop0" dev="devtmpfs" ino=648 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 59.299147][ T5015] hfsplus: xattr searching failed open("./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 4 [ 59.328337][ T26] audit: type=1400 audit(1690953030.095:91): avc: denied { mounton } for pid=5015 comm="syz-executor236" path="/root/bus" dev="sda1" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 59.336917][ T5015] hfsplus: xattr searching failed [ 59.356792][ T26] audit: type=1400 audit(1690953030.195:92): avc: denied { mount } for pid=5015 comm="syz-executor236" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 59.375965][ T5015] hfsplus: new node 0 already hashed? [ 59.384868][ T5015] ------------[ cut here ]------------ [ 59.390849][ T5015] WARNING: CPU: 1 PID: 5015 at fs/hfsplus/bnode.c:573 hfsplus_bnode_create+0x14b/0x530 [ 59.400609][ T5015] Modules linked in: [ 59.404517][ T5015] CPU: 1 PID: 5015 Comm: syz-executor236 Not tainted 6.5.0-rc4-syzkaller #0 [ 59.413227][ T5015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 59.423342][ T5015] RIP: 0010:hfsplus_bnode_create+0x14b/0x530 [ 59.429465][ T5015] Code: 5b 31 32 ff 45 39 fc 75 9e e8 61 36 32 ff 4c 89 f7 e8 99 96 e1 07 e8 54 36 32 ff 44 89 e6 48 c7 c7 80 e3 86 8a e8 25 98 15 ff <0f> 0b e8 3e 36 32 ff 48 89 d8 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e [ 59.449122][ T5015] RSP: 0018:ffffc9000341f040 EFLAGS: 00010282 [ 59.455190][ T5015] RAX: 0000000000000023 RBX: ffff8880128c6000 RCX: 0000000000000000 [ 59.463192][ T5015] RDX: 0000000000000000 RSI: ffffffff81691740 RDI: 0000000000000005 [ 59.471197][ T5015] RBP: ffff88807aaa6000 R08: 0000000000000005 R09: 0000000000000000 [ 59.479206][ T5015] R10: 0000000080000000 R11: 0000000000000001 R12: 0000000000000000 [ 59.487286][ T5015] R13: dffffc0000000000 R14: ffff88807aaa60e0 R15: 0000000000000000 [ 59.495304][ T5015] FS: 0000555556470380(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 59.504389][ T5015] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.511051][ T5015] CR2: 0000564684dd2948 CR3: 000000002209f000 CR4: 00000000003506e0 [ 59.519085][ T5015] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 59.527155][ T5015] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 59.535164][ T5015] Call Trace: [ 59.538556][ T5015] [ 59.541596][ T5015] ? __warn+0xe6/0x380 [ 59.545664][ T5015] ? hfsplus_bnode_create+0x14b/0x530 [ 59.551167][ T5015] ? report_bug+0x3bc/0x580 [ 59.555709][ T5015] ? handle_bug+0x3c/0x70 [ 59.560087][ T5015] ? exc_invalid_op+0x17/0x40 [ 59.564875][ T5015] ? asm_exc_invalid_op+0x1a/0x20 [ 59.570039][ T5015] ? vprintk+0x90/0xa0 [ 59.574136][ T5015] ? hfsplus_bnode_create+0x14b/0x530 [ 59.579552][ T5015] hfsplus_bmap_alloc+0x728/0x830 [ 59.584603][ T5015] ? hfsplus_bmap_reserve+0x410/0x410 [ 59.590030][ T5015] ? __lock_acquire+0x4298/0x5de0 [ 59.595102][ T5015] ? lock_sync+0x190/0x190 [ 59.599571][ T5015] hfs_btree_inc_height.isra.0+0x100/0x8b0 [ 59.605405][ T5015] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 59.611616][ T5015] ? hfs_bnode_split+0xdc0/0xdc0 [ 59.616581][ T5015] ? preempt_count_sub+0x150/0x150 [ 59.621734][ T5015] ? trace_contention_end+0xd6/0x100 [ 59.627045][ T5015] hfsplus_brec_insert+0x9fe/0xc50 [ 59.632316][ T5015] ? hfsplus_brec_find+0x3e8/0x520 [ 59.637463][ T5015] ? hfsplus_brec_keylen+0x340/0x340 [ 59.642847][ T5015] ? hfsplus_bmap_reserve+0x332/0x410 [ 59.648371][ T5015] ? kasan_set_track+0x25/0x30 [ 59.653156][ T5015] __hfsplus_ext_write_extent+0x49c/0x5e0 [ 59.658935][ T5015] hfsplus_ext_read_extent+0x84c/0xb00 [ 59.664422][ T5015] ? hfsplus_free_extents+0x510/0x510 [ 59.669834][ T5015] ? hfsplus_get_block+0x3b8/0x9e0 [ 59.674968][ T5015] hfsplus_file_extend+0x699/0xf90 [ 59.680124][ T5015] ? hfsplus_free_fork+0x820/0x820 [ 59.685258][ T5015] ? __lock_buffer+0x70/0x70 [ 59.689893][ T5015] ? spin_bug+0x1d0/0x1d0 [ 59.694246][ T5015] hfsplus_get_block+0x1ae/0x9e0 [ 59.699246][ T5015] __blockdev_direct_IO+0x2458/0x3cd0 [ 59.704646][ T5015] ? submit_page_section+0xa10/0xa10 [ 59.709969][ T5015] ? do_raw_spin_unlock+0x173/0x230 [ 59.715281][ T5015] ? __mod_timer+0x8ff/0xea0 [ 59.719923][ T5015] ? hfsplus_file_extend+0xf90/0xf90 [ 59.725233][ T5015] hfsplus_direct_IO+0x10c/0x2c0 [ 59.730211][ T5015] generic_file_direct_write+0x132/0x360 [ 59.735873][ T5015] __generic_file_write_iter+0x11d/0x240 [ 59.741572][ T5015] generic_file_write_iter+0xe3/0x350 [ 59.747013][ T5015] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 59.753064][ T5015] do_iter_readv_writev+0x21e/0x3c0 [ 59.758345][ T5015] ? generic_copy_file_range+0x1d0/0x1d0 [ 59.764029][ T5015] ? avc_policy_seqno+0x9/0x10 [ 59.768854][ T5015] ? selinux_file_permission+0x126/0x590 [ 59.774513][ T5015] ? security_file_permission+0x94/0x100 [ 59.780214][ T5015] do_iter_write+0x17f/0x830 [ 59.784942][ T5015] vfs_writev+0x221/0x700 [ 59.789412][ T5015] ? lock_acquire+0x1ae/0x510 [ 59.794115][ T5015] ? vfs_iter_write+0xb0/0xb0 [ 59.798835][ T5015] ? ptrace_stop.part.0+0x4b4/0x8f0 [ 59.804049][ T5015] ? spin_bug+0x1d0/0x1d0 [ 59.808442][ T5015] ? cgroup_update_frozen+0x144/0x6b0 [ 59.813832][ T5015] ? find_held_lock+0x2d/0x110 [ 59.818633][ T5015] ? do_pwritev+0x1af/0x260 [ 59.823177][ T5015] do_pwritev+0x1af/0x260 [ 59.827507][ T5015] ? do_writev+0x370/0x370 [ 59.831990][ T5015] ? _raw_spin_unlock_irq+0x23/0x50 [ 59.837234][ T5015] ? lockdep_hardirqs_on+0x7d/0x100 [ 59.842498][ T5015] __x64_sys_pwritev2+0xef/0x150 [ 59.847577][ T5015] do_syscall_64+0x38/0xb0 [ 59.852059][ T5015] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 59.857971][ T5015] RIP: 0033:0x7fa93b583639 [ 59.862437][ T5015] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 59.882155][ T5015] RSP: 002b:00007ffcba136708 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 59.890655][ T5015] RAX: ffffffffffffffda RBX: 00007ffcba1368e8 RCX: 00007fa93b583639 [ 59.898698][ T5015] RDX: 0000000000000001 RSI: 0000000020000680 RDI: 0000000000000004 [ 59.906780][ T5015] RBP: 00007fa93b5f6610 R08: 0000000000000000 R09: 0000000000000000 [ 59.914802][ T5015] R10: 0000000000000600 R11: 0000000000000246 R12: 0000000000000001 [ 59.922812][ T5015] R13: 00007ffcba1368d8 R14: 0000000000000001 R15: 0000000000000001 [ 59.930822][ T5015] [ 59.933883][ T5015] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 59.941242][ T5015] CPU: 1 PID: 5015 Comm: syz-executor236 Not tainted 6.5.0-rc4-syzkaller #0 [ 59.949902][ T5015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 59.959948][ T5015] Call Trace: [ 59.963213][ T5015] [ 59.969087][ T5015] dump_stack_lvl+0xd9/0x1b0 [ 59.973695][ T5015] panic+0x6a4/0x750 [ 59.977598][ T5015] ? panic_smp_self_stop+0xa0/0xa0 [ 59.982712][ T5015] ? show_trace_log_lvl+0x29d/0x3c0 [ 59.987926][ T5015] ? hfsplus_bnode_create+0x14b/0x530 [ 59.993310][ T5015] check_panic_on_warn+0xab/0xb0 [ 59.998282][ T5015] __warn+0xf2/0x380 [ 60.002208][ T5015] ? hfsplus_bnode_create+0x14b/0x530 [ 60.007591][ T5015] report_bug+0x3bc/0x580 [ 60.011923][ T5015] handle_bug+0x3c/0x70 [ 60.016095][ T5015] exc_invalid_op+0x17/0x40 [ 60.020630][ T5015] asm_exc_invalid_op+0x1a/0x20 [ 60.025493][ T5015] RIP: 0010:hfsplus_bnode_create+0x14b/0x530 [ 60.031505][ T5015] Code: 5b 31 32 ff 45 39 fc 75 9e e8 61 36 32 ff 4c 89 f7 e8 99 96 e1 07 e8 54 36 32 ff 44 89 e6 48 c7 c7 80 e3 86 8a e8 25 98 15 ff <0f> 0b e8 3e 36 32 ff 48 89 d8 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e [ 60.051228][ T5015] RSP: 0018:ffffc9000341f040 EFLAGS: 00010282 [ 60.057324][ T5015] RAX: 0000000000000023 RBX: ffff8880128c6000 RCX: 0000000000000000 [ 60.065318][ T5015] RDX: 0000000000000000 RSI: ffffffff81691740 RDI: 0000000000000005 [ 60.073411][ T5015] RBP: ffff88807aaa6000 R08: 0000000000000005 R09: 0000000000000000 [ 60.081398][ T5015] R10: 0000000080000000 R11: 0000000000000001 R12: 0000000000000000 [ 60.089387][ T5015] R13: dffffc0000000000 R14: ffff88807aaa60e0 R15: 0000000000000000 [ 60.097382][ T5015] ? vprintk+0x90/0xa0 [ 60.101488][ T5015] hfsplus_bmap_alloc+0x728/0x830 [ 60.106539][ T5015] ? hfsplus_bmap_reserve+0x410/0x410 [ 60.111930][ T5015] ? __lock_acquire+0x4298/0x5de0 [ 60.117059][ T5015] ? lock_sync+0x190/0x190 [ 60.121494][ T5015] hfs_btree_inc_height.isra.0+0x100/0x8b0 [ 60.127329][ T5015] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 60.133407][ T5015] ? hfs_bnode_split+0xdc0/0xdc0 [ 60.138365][ T5015] ? preempt_count_sub+0x150/0x150 [ 60.143585][ T5015] ? trace_contention_end+0xd6/0x100 [ 60.148882][ T5015] hfsplus_brec_insert+0x9fe/0xc50 [ 60.154029][ T5015] ? hfsplus_brec_find+0x3e8/0x520 [ 60.159160][ T5015] ? hfsplus_brec_keylen+0x340/0x340 [ 60.164490][ T5015] ? hfsplus_bmap_reserve+0x332/0x410 [ 60.169884][ T5015] ? kasan_set_track+0x25/0x30 [ 60.174754][ T5015] __hfsplus_ext_write_extent+0x49c/0x5e0 [ 60.180491][ T5015] hfsplus_ext_read_extent+0x84c/0xb00 [ 60.185981][ T5015] ? hfsplus_free_extents+0x510/0x510 [ 60.191373][ T5015] ? hfsplus_get_block+0x3b8/0x9e0 [ 60.196503][ T5015] hfsplus_file_extend+0x699/0xf90 [ 60.201633][ T5015] ? hfsplus_free_fork+0x820/0x820 [ 60.206767][ T5015] ? __lock_buffer+0x70/0x70 [ 60.211364][ T5015] ? spin_bug+0x1d0/0x1d0 [ 60.215714][ T5015] hfsplus_get_block+0x1ae/0x9e0 [ 60.220667][ T5015] __blockdev_direct_IO+0x2458/0x3cd0 [ 60.226059][ T5015] ? submit_page_section+0xa10/0xa10 [ 60.231359][ T5015] ? do_raw_spin_unlock+0x173/0x230 [ 60.236580][ T5015] ? __mod_timer+0x8ff/0xea0 [ 60.241179][ T5015] ? hfsplus_file_extend+0xf90/0xf90 [ 60.246486][ T5015] hfsplus_direct_IO+0x10c/0x2c0 [ 60.251444][ T5015] generic_file_direct_write+0x132/0x360 [ 60.257104][ T5015] __generic_file_write_iter+0x11d/0x240 [ 60.262758][ T5015] generic_file_write_iter+0xe3/0x350 [ 60.268147][ T5015] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 60.274141][ T5015] do_iter_readv_writev+0x21e/0x3c0 [ 60.279446][ T5015] ? generic_copy_file_range+0x1d0/0x1d0 [ 60.285187][ T5015] ? avc_policy_seqno+0x9/0x10 [ 60.289971][ T5015] ? selinux_file_permission+0x126/0x590 [ 60.295621][ T5015] ? security_file_permission+0x94/0x100 [ 60.301283][ T5015] do_iter_write+0x17f/0x830 [ 60.305901][ T5015] vfs_writev+0x221/0x700 [ 60.310254][ T5015] ? lock_acquire+0x1ae/0x510 [ 60.314945][ T5015] ? vfs_iter_write+0xb0/0xb0 [ 60.319643][ T5015] ? ptrace_stop.part.0+0x4b4/0x8f0 [ 60.324865][ T5015] ? spin_bug+0x1d0/0x1d0 [ 60.329211][ T5015] ? cgroup_update_frozen+0x144/0x6b0 [ 60.334596][ T5015] ? find_held_lock+0x2d/0x110 [ 60.339387][ T5015] ? do_pwritev+0x1af/0x260 [ 60.343912][ T5015] do_pwritev+0x1af/0x260 [ 60.348266][ T5015] ? do_writev+0x370/0x370 [ 60.352704][ T5015] ? _raw_spin_unlock_irq+0x23/0x50 [ 60.357924][ T5015] ? lockdep_hardirqs_on+0x7d/0x100 [ 60.363137][ T5015] __x64_sys_pwritev2+0xef/0x150 [ 60.368088][ T5015] do_syscall_64+0x38/0xb0 [ 60.372517][ T5015] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 60.378458][ T5015] RIP: 0033:0x7fa93b583639 [ 60.382880][ T5015] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 60.402584][ T5015] RSP: 002b:00007ffcba136708 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 60.411014][ T5015] RAX: ffffffffffffffda RBX: 00007ffcba1368e8 RCX: 00007fa93b583639 [ 60.419025][ T5015] RDX: 0000000000000001 RSI: 0000000020000680 RDI: 0000000000000004 [ 60.427001][ T5015] RBP: 00007fa93b5f6610 R08: 0000000000000000 R09: 0000000000000000 [ 60.434984][ T5015] R10: 0000000000000600 R11: 0000000000000246 R12: 0000000000000001 [ 60.443046][ T5015] R13: 00007ffcba1368d8 R14: 0000000000000001 R15: 0000000000000001 [ 60.451031][ T5015] [ 60.454162][ T5015] Kernel Offset: disabled [ 60.458573][ T5015] Rebooting in 86400 seconds..