./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3805373533 <...> DUID 00:04:b0:cd:33:f9:4f:8a:55:45:4d:7b:3b:ee:3a:71:f0:8b forked to background, child pid 4660 [ 40.446726][ T4661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.470942][ T4661] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.57' (ECDSA) to the list of known hosts. execve("./syz-executor3805373533", ["./syz-executor3805373533"], 0x7ffff685b0b0 /* 10 vars */) = 0 brk(NULL) = 0x555555a8a000 brk(0x555555a8ac40) = 0x555555a8ac40 arch_prctl(ARCH_SET_FS, 0x555555a8a300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor3805373533", 4096) = 28 brk(0x555555aabc40) = 0x555555aabc40 brk(0x555555aac000) = 0x555555aac000 mprotect(0x7feba651f000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feb9e065000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 munmap(0x7feb9e065000, 524288) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./file0", 0777) = 0 syzkaller login: [ 70.784587][ T4996] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=4996 'syz-executor380' [ 70.804053][ T4996] loop0: detected capacity change from 0 to 1024 [ 70.822051][ T4996] hfsplus: new node 0 already hashed? [ 70.827738][ T4996] ------------[ cut here ]------------ [ 70.833299][ T4996] WARNING: CPU: 0 PID: 4996 at fs/hfsplus/bnode.c:573 hfsplus_bnode_create+0x3b1/0x440 [ 70.843170][ T4996] Modules linked in: [ 70.847158][ T4996] CPU: 0 PID: 4996 Comm: syz-executor380 Not tainted 6.4.0-rc5-syzkaller-00016-ga4d7d7011219 #0 [ 70.857638][ T4996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 70.867800][ T4996] RIP: 0010:hfsplus_bnode_create+0x3b1/0x440 [ 70.873841][ T4996] Code: 8a 44 89 e6 e8 e0 34 4b 08 e9 7c fd ff ff e8 e6 75 29 ff 4c 89 ff e8 fe 45 57 08 48 c7 c7 80 b8 ff 8a 44 89 e6 e8 bf 34 4b 08 <0f> 0b eb b5 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 89 fc ff ff 48 89 [ 70.893589][ T4996] RSP: 0018:ffffc900039cefd8 EFLAGS: 00010246 [ 70.899737][ T4996] RAX: 0000000000000023 RBX: ffff888012a93800 RCX: 4a8843874786b000 [ 70.907739][ T4996] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 70.915796][ T4996] RBP: 0000000000000000 R08: ffffffff816f004c R09: fffff52000739db1 [ 70.923857][ T4996] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 70.931933][ T4996] R13: dffffc0000000000 R14: ffff888018e62000 R15: ffff888018e620e0 [ 70.940002][ T4996] FS: 0000555555a8a300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 70.949053][ T4996] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 70.955664][ T4996] CR2: 00007ffdf9dde000 CR3: 0000000022c64000 CR4: 00000000003506f0 [ 70.963729][ T4996] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 70.971801][ T4996] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 70.979841][ T4996] Call Trace: [ 70.983147][ T4996] [ 70.986085][ T4996] ? __warn+0x162/0x4a0 [ 70.990333][ T4996] ? hfsplus_bnode_create+0x3b1/0x440 [ 70.995765][ T4996] ? report_bug+0x2b3/0x500 [ 71.000365][ T4996] ? hfsplus_bnode_create+0x3b1/0x440 [ 71.005832][ T4996] ? handle_bug+0x3d/0x70 [ 71.010273][ T4996] ? exc_invalid_op+0x1a/0x50 [ 71.014977][ T4996] ? asm_exc_invalid_op+0x1a/0x20 [ 71.020263][ T4996] ? __wake_up_klogd+0xcc/0x100 [ 71.025151][ T4996] ? hfsplus_bnode_create+0x3b1/0x440 [ 71.030605][ T4996] ? hfsplus_bnode_create+0x3b1/0x440 [ 71.036010][ T4996] hfsplus_bmap_alloc+0x59a/0x640 [ 71.041123][ T4996] ? hfsplus_bmap_reserve+0x4e0/0x4e0 [ 71.046612][ T4996] ? hfsplus_bnode_read+0xe9/0x1e0 [ 71.051872][ T4996] ? hfsplus_bnode_read_u16+0x146/0x2c0 [ 71.057486][ T4996] ? __asan_memcpy+0x40/0x70 [ 71.062196][ T4996] hfs_bnode_split+0xde/0x1110 [ 71.067004][ T4996] ? hfsplus_bnode_dump+0xa36/0xba0 [ 71.072354][ T4996] ? __asan_memcpy+0x40/0x70 [ 71.076985][ T4996] ? hfsplus_bnode_read_u16+0x1c1/0x2c0 [ 71.082763][ T4996] ? hfs_btree_inc_height+0xdb0/0xdb0 [ 71.088257][ T4996] ? hfs_find_1st_rec_by_cnid+0x3c0/0x3c0 [ 71.093999][ T4996] hfsplus_brec_insert+0x3a6/0xdd0 [ 71.099195][ T4996] ? hfsplus_brec_keylen+0x310/0x310 [ 71.104510][ T4996] ? __kmalloc+0xe6/0x230 [ 71.108926][ T4996] ? mutex_lock_nested+0x1b/0x20 [ 71.113908][ T4996] hfsplus_create_cat+0x49c/0x1bb0 [ 71.119116][ T4996] ? hfsplus_find_cat+0x5c0/0x5c0 [ 71.124519][ T4996] ? do_raw_spin_unlock+0x13b/0x8b0 [ 71.129831][ T4996] ? _raw_spin_unlock+0x28/0x40 [ 71.134705][ T4996] ? hfsplus_new_inode+0x5cd/0x740 [ 71.139897][ T4996] hfsplus_fill_super+0x13ea/0x1c90 [ 71.145146][ T4996] ? hfsplus_mount+0x40/0x40 [ 71.149888][ T4996] ? mutex_lock_io_nested+0x60/0x60 [ 71.155131][ T4996] ? snprintf+0xda/0x120 [ 71.159446][ T4996] ? vscnprintf+0x80/0x80 [ 71.163827][ T4996] ? sb_set_blocksize+0x99/0x100 [ 71.168867][ T4996] mount_bdev+0x2d0/0x3f0 [ 71.173252][ T4996] ? hfsplus_mount+0x40/0x40 [ 71.177857][ T4996] legacy_get_tree+0xef/0x190 [ 71.182608][ T4996] ? hfsplus_mark_mdb_dirty+0x1c0/0x1c0 [ 71.188304][ T4996] vfs_get_tree+0x8c/0x270 [ 71.192770][ T4996] do_new_mount+0x28f/0xae0 [ 71.197291][ T4996] ? path_mount+0x5f2/0xf80 [ 71.201867][ T4996] ? do_move_mount_old+0x170/0x170 [ 71.207033][ T4996] ? user_path_at_empty+0x12f/0x180 [ 71.212423][ T4996] __se_sys_mount+0x2d9/0x3c0 [ 71.217156][ T4996] ? __x64_sys_mount+0xc0/0xc0 [ 71.221996][ T4996] ? syscall_enter_from_user_mode+0x32/0x230 [ 71.228082][ T4996] ? __x64_sys_mount+0x20/0xc0 [ 71.232872][ T4996] do_syscall_64+0x41/0xc0 [ 71.237386][ T4996] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 71.243344][ T4996] RIP: 0033:0x7feba64b2eba [ 71.247783][ T4996] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 71.267506][ T4996] RSP: 002b:00007ffdf9ddd008 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 71.275990][ T4996] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007feba64b2eba [ 71.284067][ T4996] RDX: 0000000020000040 RSI: 0000000020000080 RDI: 00007ffdf9ddd020 [ 71.292096][ T4996] RBP: 00007ffdf9ddd020 R08: 00007ffdf9ddd060 R09: 000000000000064b [ 71.300170][ T4996] R10: 0000000000208010 R11: 0000000000000286 R12: 0000000000000004 [ 71.308201][ T4996] R13: 0000555555a8a2c0 R14: 0000000000208010 R15: 00007ffdf9ddd060 [ 71.316191][ T4996] [ 71.320139][ T4996] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 71.327442][ T4996] CPU: 0 PID: 4996 Comm: syz-executor380 Not tainted 6.4.0-rc5-syzkaller-00016-ga4d7d7011219 #0 [ 71.337864][ T4996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 71.347933][ T4996] Call Trace: [ 71.351227][ T4996] [ 71.354161][ T4996] dump_stack_lvl+0x1e7/0x2d0 [ 71.358862][ T4996] ? nf_tcp_handle_invalid+0x650/0x650 [ 71.364358][ T4996] ? panic+0x770/0x770 [ 71.368445][ T4996] ? vscnprintf+0x5d/0x80 [ 71.372790][ T4996] panic+0x30f/0x770 [ 71.376691][ T4996] ? __warn+0x171/0x4a0 [ 71.380902][ T4996] ? __memcpy_flushcache+0x2b0/0x2b0 [ 71.386248][ T4996] __warn+0x314/0x4a0 [ 71.390244][ T4996] ? hfsplus_bnode_create+0x3b1/0x440 [ 71.395629][ T4996] report_bug+0x2b3/0x500 [ 71.399968][ T4996] ? hfsplus_bnode_create+0x3b1/0x440 [ 71.405352][ T4996] handle_bug+0x3d/0x70 [ 71.409519][ T4996] exc_invalid_op+0x1a/0x50 [ 71.414033][ T4996] asm_exc_invalid_op+0x1a/0x20 [ 71.418904][ T4996] RIP: 0010:hfsplus_bnode_create+0x3b1/0x440 [ 71.424918][ T4996] Code: 8a 44 89 e6 e8 e0 34 4b 08 e9 7c fd ff ff e8 e6 75 29 ff 4c 89 ff e8 fe 45 57 08 48 c7 c7 80 b8 ff 8a 44 89 e6 e8 bf 34 4b 08 <0f> 0b eb b5 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 89 fc ff ff 48 89 [ 71.444576][ T4996] RSP: 0018:ffffc900039cefd8 EFLAGS: 00010246 [ 71.450663][ T4996] RAX: 0000000000000023 RBX: ffff888012a93800 RCX: 4a8843874786b000 [ 71.458640][ T4996] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 71.466702][ T4996] RBP: 0000000000000000 R08: ffffffff816f004c R09: fffff52000739db1 [ 71.474678][ T4996] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 71.482664][ T4996] R13: dffffc0000000000 R14: ffff888018e62000 R15: ffff888018e620e0 [ 71.490653][ T4996] ? __wake_up_klogd+0xcc/0x100 [ 71.495533][ T4996] ? hfsplus_bnode_create+0x3b1/0x440 [ 71.500919][ T4996] hfsplus_bmap_alloc+0x59a/0x640 [ 71.505961][ T4996] ? hfsplus_bmap_reserve+0x4e0/0x4e0 [ 71.511342][ T4996] ? hfsplus_bnode_read+0xe9/0x1e0 [ 71.516460][ T4996] ? hfsplus_bnode_read_u16+0x146/0x2c0 [ 71.522019][ T4996] ? __asan_memcpy+0x40/0x70 [ 71.526629][ T4996] hfs_bnode_split+0xde/0x1110 [ 71.531416][ T4996] ? hfsplus_bnode_dump+0xa36/0xba0 [ 71.536629][ T4996] ? __asan_memcpy+0x40/0x70 [ 71.541322][ T4996] ? hfsplus_bnode_read_u16+0x1c1/0x2c0 [ 71.546876][ T4996] ? hfs_btree_inc_height+0xdb0/0xdb0 [ 71.552261][ T4996] ? hfs_find_1st_rec_by_cnid+0x3c0/0x3c0 [ 71.557993][ T4996] hfsplus_brec_insert+0x3a6/0xdd0 [ 71.563131][ T4996] ? hfsplus_brec_keylen+0x310/0x310 [ 71.568431][ T4996] ? __kmalloc+0xe6/0x230 [ 71.572774][ T4996] ? mutex_lock_nested+0x1b/0x20 [ 71.577730][ T4996] hfsplus_create_cat+0x49c/0x1bb0 [ 71.582863][ T4996] ? hfsplus_find_cat+0x5c0/0x5c0 [ 71.587957][ T4996] ? do_raw_spin_unlock+0x13b/0x8b0 [ 71.593209][ T4996] ? _raw_spin_unlock+0x28/0x40 [ 71.598066][ T4996] ? hfsplus_new_inode+0x5cd/0x740 [ 71.603205][ T4996] hfsplus_fill_super+0x13ea/0x1c90 [ 71.608444][ T4996] ? hfsplus_mount+0x40/0x40 [ 71.613088][ T4996] ? mutex_lock_io_nested+0x60/0x60 [ 71.618402][ T4996] ? snprintf+0xda/0x120 [ 71.622659][ T4996] ? vscnprintf+0x80/0x80 [ 71.627010][ T4996] ? sb_set_blocksize+0x99/0x100 [ 71.631961][ T4996] mount_bdev+0x2d0/0x3f0 [ 71.636298][ T4996] ? hfsplus_mount+0x40/0x40 [ 71.640903][ T4996] legacy_get_tree+0xef/0x190 [ 71.645593][ T4996] ? hfsplus_mark_mdb_dirty+0x1c0/0x1c0 [ 71.651155][ T4996] vfs_get_tree+0x8c/0x270 [ 71.655586][ T4996] do_new_mount+0x28f/0xae0 [ 71.660112][ T4996] ? path_mount+0x5f2/0xf80 [ 71.664625][ T4996] ? do_move_mount_old+0x170/0x170 [ 71.669752][ T4996] ? user_path_at_empty+0x12f/0x180 [ 71.674967][ T4996] __se_sys_mount+0x2d9/0x3c0 [ 71.679662][ T4996] ? __x64_sys_mount+0xc0/0xc0 [ 71.684443][ T4996] ? syscall_enter_from_user_mode+0x32/0x230 [ 71.690447][ T4996] ? __x64_sys_mount+0x20/0xc0 [ 71.695227][ T4996] do_syscall_64+0x41/0xc0 [ 71.699667][ T4996] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 71.705581][ T4996] RIP: 0033:0x7feba64b2eba [ 71.710025][ T4996] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 71.730076][ T4996] RSP: 002b:00007ffdf9ddd008 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 71.738502][ T4996] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007feba64b2eba [ 71.746481][ T4996] RDX: 0000000020000040 RSI: 0000000020000080 RDI: 00007ffdf9ddd020 [ 71.754470][ T4996] RBP: 00007ffdf9ddd020 R08: 00007ffdf9ddd060 R09: 000000000000064b [ 71.762534][ T4996] R10: 0000000000208010 R11: 0000000000000286 R12: 0000000000000004 [ 71.770682][ T4996] R13: 0000555555a8a2c0 R14: 0000000000208010 R15: 00007ffdf9ddd060 [ 71.778679][ T4996] [ 71.781980][ T4996] Kernel Offset: disabled [ 71.786399][ T4996] Rebooting in 86400 seconds..