./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor722756086 <...> Warning: Permanently added '10.128.0.249' (ED25519) to the list of known hosts. execve("./syz-executor722756086", ["./syz-executor722756086"], 0x7fffbb36c4c0 /* 10 vars */) = 0 brk(NULL) = 0x555567970000 brk(0x555567970d00) = 0x555567970d00 arch_prctl(ARCH_SET_FS, 0x555567970380) = 0 set_tid_address(0x555567970650) = 5077 set_robust_list(0x555567970660, 24) = 0 rseq(0x555567970ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor722756086", 4096) = 27 getrandom("\x5b\xfb\x30\x4f\xaf\xf8\xdc\x79", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555567970d00 brk(0x555567991d00) = 0x555567991d00 brk(0x555567992000) = 0x555567992000 mprotect(0x7fa123e57000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa11b800000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 munmap(0x7fa11b800000, 138412032) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 close(4) = 0 mkdir("./bus", 0777) = 0 [ 75.666104][ T5077] loop0: detected capacity change from 0 to 1024 [ 75.719574][ T5077] hfsplus: new node 0 already hashed? [ 75.725317][ T5077] ------------[ cut here ]------------ [ 75.730937][ T5077] WARNING: CPU: 1 PID: 5077 at fs/hfsplus/bnode.c:573 hfsplus_bnode_create+0x3b6/0x440 [ 75.740689][ T5077] Modules linked in: [ 75.744795][ T5077] CPU: 1 PID: 5077 Comm: syz-executor722 Not tainted 6.9.0-rc6-syzkaller-00053-g0106679839f7 #0 [ 75.755522][ T5077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 75.765711][ T5077] RIP: 0010:hfsplus_bnode_create+0x3b6/0x440 [ 75.771813][ T5077] Code: 44 89 e6 e8 2c 9d f7 08 e9 78 fd ff ff e8 c2 25 19 ff 4c 89 ff e8 0a 6a 05 09 48 c7 c7 c0 37 e1 8b 44 89 e6 e8 0b 9d f7 08 90 <0f> 0b 90 eb af 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 83 fc ff ff 48 [ 75.791646][ T5077] RSP: 0018:ffffc9000368ef58 EFLAGS: 00010246 [ 75.797796][ T5077] RAX: 0000000000000023 RBX: ffff888015170700 RCX: 7f4179b6927a4e00 [ 75.806062][ T5077] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 75.814275][ T5077] RBP: 0000000000000000 R08: ffffffff8176b74c R09: 1ffff920006d1d8c [ 75.823024][ T5077] R10: dffffc0000000000 R11: fffff520006d1d8d R12: 0000000000000000 [ 75.831100][ T5077] R13: dffffc0000000000 R14: ffff888024082000 R15: ffff8880240820e0 [ 75.839136][ T5077] FS: 0000555567970380(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 75.848177][ T5077] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.854791][ T5077] CR2: 000055f5c8f30ff0 CR3: 0000000074a1e000 CR4: 00000000003506f0 [ 75.862849][ T5077] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 75.870937][ T5077] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 75.878991][ T5077] Call Trace: [ 75.882345][ T5077] [ 75.885303][ T5077] ? __warn+0x163/0x4e0 [ 75.889535][ T5077] ? hfsplus_bnode_create+0x3b6/0x440 [ 75.895061][ T5077] ? report_bug+0x2b3/0x500 [ 75.899672][ T5077] ? hfsplus_bnode_create+0x3b6/0x440 [ 75.905091][ T5077] ? handle_bug+0x3e/0x70 [ 75.909571][ T5077] ? exc_invalid_op+0x1a/0x50 [ 75.914499][ T5077] ? asm_exc_invalid_op+0x1a/0x20 [ 75.919685][ T5077] ? __wake_up_klogd+0xcc/0x110 [ 75.924592][ T5077] ? hfsplus_bnode_create+0x3b6/0x440 [ 75.930055][ T5077] ? hfsplus_bnode_create+0x3b5/0x440 [ 75.935488][ T5077] hfsplus_bmap_alloc+0x59a/0x640 [ 75.940627][ T5077] ? __pfx_hfsplus_bmap_alloc+0x10/0x10 [ 75.946238][ T5077] ? hfsplus_create_cat+0x1748/0x1b60 [ 75.951711][ T5077] ? hfsplus_bnode_read_u16+0x146/0x2c0 [ 75.957368][ T5077] hfs_bnode_split+0xde/0x1110 [ 75.962272][ T5077] ? hfsplus_bnode_dump+0xa36/0xbb0 [ 75.967563][ T5077] ? hfsplus_bnode_read+0xe9/0x1e0 [ 75.972715][ T5077] ? __asan_memcpy+0x40/0x70 [ 75.977429][ T5077] ? hfsplus_bnode_read_u16+0x1c1/0x2c0 [ 75.983125][ T5077] ? __pfx_hfs_bnode_split+0x10/0x10 [ 75.988512][ T5077] ? __pfx_hfs_find_rec_by_key+0x10/0x10 [ 75.994203][ T5077] hfsplus_brec_insert+0x3a6/0xde0 [ 75.999508][ T5077] ? __pfx_hfsplus_brec_insert+0x10/0x10 [ 76.005221][ T5077] hfsplus_create_cat+0x49f/0x1b60 [ 76.010449][ T5077] ? __pfx_hfsplus_create_cat+0x10/0x10 [ 76.016082][ T5077] ? do_raw_spin_unlock+0x13c/0x8b0 [ 76.021378][ T5077] ? _raw_spin_unlock+0x28/0x50 [ 76.026599][ T5077] ? hfsplus_new_inode+0x53e/0x6c0 [ 76.031770][ T5077] hfsplus_fill_super+0x13ee/0x1ca0 [ 76.037118][ T5077] ? __pfx_hfsplus_fill_super+0x10/0x10 [ 76.042754][ T5077] ? snprintf+0xda/0x120 [ 76.047102][ T5077] ? __pfx_lock_release+0x10/0x10 [ 76.052173][ T5077] ? do_raw_spin_lock+0x14f/0x370 [ 76.057391][ T5077] ? sb_set_blocksize+0x99/0x100 [ 76.062369][ T5077] ? setup_bdev_super+0x4b7/0x5b0 [ 76.067474][ T5077] mount_bdev+0x20a/0x2d0 [ 76.071933][ T5077] ? __pfx_hfsplus_fill_super+0x10/0x10 [ 76.077578][ T5077] ? __pfx_mount_bdev+0x10/0x10 [ 76.082746][ T5077] ? vfs_parse_fs_string+0x190/0x230 [ 76.088168][ T5077] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 76.093960][ T5077] ? cap_capable+0x1b4/0x250 [ 76.098810][ T5077] legacy_get_tree+0xee/0x190 [ 76.103549][ T5077] ? __pfx_hfsplus_mount+0x10/0x10 [ 76.108789][ T5077] vfs_get_tree+0x90/0x2a0 [ 76.113255][ T5077] do_new_mount+0x2be/0xb40 [ 76.117879][ T5077] ? ns_capable+0x8a/0xf0 [ 76.122652][ T5077] ? __pfx_do_new_mount+0x10/0x10 [ 76.127876][ T5077] __se_sys_mount+0x2d9/0x3c0 [ 76.132615][ T5077] ? __pfx___se_sys_mount+0x10/0x10 [ 76.138160][ T5077] ? do_syscall_64+0x102/0x240 [ 76.142968][ T5077] ? __x64_sys_mount+0x20/0xc0 [ 76.149237][ T5077] do_syscall_64+0xf5/0x240 [ 76.154808][ T5077] ? clear_bhb_loop+0x35/0x90 [ 76.159971][ T5077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.166121][ T5077] RIP: 0033:0x7fa123de4c7a [ 76.170661][ T5077] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 76.191219][ T5077] RSP: 002b:00007ffd61b423c8 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 76.200465][ T5077] RAX: ffffffffffffffda RBX: 00007ffd61b423e0 RCX: 00007fa123de4c7a [ 76.208724][ T5077] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 00007ffd61b423e0 [ 76.216993][ T5077] RBP: 0000000000000004 R08: 00007ffd61b42420 R09: 0000000000000646 [ 76.225032][ T5077] R10: 0000000002000010 R11: 0000000000000286 R12: 0000000002000010 [ 76.233512][ T5077] R13: 00007ffd61b42420 R14: 0000000000000003 R15: 0000000000080000 [ 76.243350][ T5077] [ 76.246501][ T5077] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 76.253825][ T5077] CPU: 1 PID: 5077 Comm: syz-executor722 Not tainted 6.9.0-rc6-syzkaller-00053-g0106679839f7 #0 [ 76.264619][ T5077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 76.278363][ T5077] Call Trace: [ 76.281661][ T5077] [ 76.284688][ T5077] dump_stack_lvl+0x241/0x360 [ 76.289390][ T5077] ? __pfx_dump_stack_lvl+0x10/0x10 [ 76.294809][ T5077] ? __pfx__printk+0x10/0x10 [ 76.299734][ T5077] ? _printk+0xd5/0x120 [ 76.303934][ T5077] ? vscnprintf+0x5d/0x90 [ 76.308301][ T5077] panic+0x349/0x860 [ 76.312216][ T5077] ? __warn+0x172/0x4e0 [ 76.316396][ T5077] ? __pfx_panic+0x10/0x10 [ 76.320922][ T5077] ? show_trace_log_lvl+0x4e6/0x520 [ 76.326443][ T5077] __warn+0x346/0x4e0 [ 76.330554][ T5077] ? hfsplus_bnode_create+0x3b6/0x440 [ 76.336036][ T5077] report_bug+0x2b3/0x500 [ 76.340391][ T5077] ? hfsplus_bnode_create+0x3b6/0x440 [ 76.346046][ T5077] handle_bug+0x3e/0x70 [ 76.350251][ T5077] exc_invalid_op+0x1a/0x50 [ 76.354780][ T5077] asm_exc_invalid_op+0x1a/0x20 [ 76.359821][ T5077] RIP: 0010:hfsplus_bnode_create+0x3b6/0x440 [ 76.365992][ T5077] Code: 44 89 e6 e8 2c 9d f7 08 e9 78 fd ff ff e8 c2 25 19 ff 4c 89 ff e8 0a 6a 05 09 48 c7 c7 c0 37 e1 8b 44 89 e6 e8 0b 9d f7 08 90 <0f> 0b 90 eb af 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 83 fc ff ff 48 [ 76.386044][ T5077] RSP: 0018:ffffc9000368ef58 EFLAGS: 00010246 [ 76.392135][ T5077] RAX: 0000000000000023 RBX: ffff888015170700 RCX: 7f4179b6927a4e00 [ 76.400139][ T5077] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 76.408125][ T5077] RBP: 0000000000000000 R08: ffffffff8176b74c R09: 1ffff920006d1d8c [ 76.416461][ T5077] R10: dffffc0000000000 R11: fffff520006d1d8d R12: 0000000000000000 [ 76.424726][ T5077] R13: dffffc0000000000 R14: ffff888024082000 R15: ffff8880240820e0 [ 76.432717][ T5077] ? __wake_up_klogd+0xcc/0x110 [ 76.437598][ T5077] ? hfsplus_bnode_create+0x3b5/0x440 [ 76.443004][ T5077] hfsplus_bmap_alloc+0x59a/0x640 [ 76.448052][ T5077] ? __pfx_hfsplus_bmap_alloc+0x10/0x10 [ 76.454461][ T5077] ? hfsplus_create_cat+0x1748/0x1b60 [ 76.459943][ T5077] ? hfsplus_bnode_read_u16+0x146/0x2c0 [ 76.465532][ T5077] hfs_bnode_split+0xde/0x1110 [ 76.470339][ T5077] ? hfsplus_bnode_dump+0xa36/0xbb0 [ 76.475959][ T5077] ? hfsplus_bnode_read+0xe9/0x1e0 [ 76.482760][ T5077] ? __asan_memcpy+0x40/0x70 [ 76.487375][ T5077] ? hfsplus_bnode_read_u16+0x1c1/0x2c0 [ 76.492957][ T5077] ? __pfx_hfs_bnode_split+0x10/0x10 [ 76.498549][ T5077] ? __pfx_hfs_find_rec_by_key+0x10/0x10 [ 76.504206][ T5077] hfsplus_brec_insert+0x3a6/0xde0 [ 76.509359][ T5077] ? __pfx_hfsplus_brec_insert+0x10/0x10 [ 76.515016][ T5077] hfsplus_create_cat+0x49f/0x1b60 [ 76.520161][ T5077] ? __pfx_hfsplus_create_cat+0x10/0x10 [ 76.526029][ T5077] ? do_raw_spin_unlock+0x13c/0x8b0 [ 76.531269][ T5077] ? _raw_spin_unlock+0x28/0x50 [ 76.536148][ T5077] ? hfsplus_new_inode+0x53e/0x6c0 [ 76.541374][ T5077] hfsplus_fill_super+0x13ee/0x1ca0 [ 76.547414][ T5077] ? __pfx_hfsplus_fill_super+0x10/0x10 [ 76.553043][ T5077] ? snprintf+0xda/0x120 [ 76.557306][ T5077] ? __pfx_lock_release+0x10/0x10 [ 76.562341][ T5077] ? do_raw_spin_lock+0x14f/0x370 [ 76.567636][ T5077] ? sb_set_blocksize+0x99/0x100 [ 76.572594][ T5077] ? setup_bdev_super+0x4b7/0x5b0 [ 76.577725][ T5077] mount_bdev+0x20a/0x2d0 [ 76.582070][ T5077] ? __pfx_hfsplus_fill_super+0x10/0x10 [ 76.587636][ T5077] ? __pfx_mount_bdev+0x10/0x10 [ 76.592960][ T5077] ? vfs_parse_fs_string+0x190/0x230 [ 76.598434][ T5077] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 76.604078][ T5077] ? cap_capable+0x1b4/0x250 [ 76.608689][ T5077] legacy_get_tree+0xee/0x190 [ 76.613381][ T5077] ? __pfx_hfsplus_mount+0x10/0x10 [ 76.618510][ T5077] vfs_get_tree+0x90/0x2a0 [ 76.623207][ T5077] do_new_mount+0x2be/0xb40 [ 76.627730][ T5077] ? ns_capable+0x8a/0xf0 [ 76.632071][ T5077] ? __pfx_do_new_mount+0x10/0x10 [ 76.637116][ T5077] __se_sys_mount+0x2d9/0x3c0 [ 76.641817][ T5077] ? __pfx___se_sys_mount+0x10/0x10 [ 76.647287][ T5077] ? do_syscall_64+0x102/0x240 [ 76.652713][ T5077] ? __x64_sys_mount+0x20/0xc0 [ 76.657522][ T5077] do_syscall_64+0xf5/0x240 [ 76.662073][ T5077] ? clear_bhb_loop+0x35/0x90 [ 76.667087][ T5077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.673300][ T5077] RIP: 0033:0x7fa123de4c7a [ 76.677733][ T5077] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 76.697832][ T5077] RSP: 002b:00007ffd61b423c8 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 76.706774][ T5077] RAX: ffffffffffffffda RBX: 00007ffd61b423e0 RCX: 00007fa123de4c7a [ 76.714966][ T5077] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 00007ffd61b423e0 [ 76.722980][ T5077] RBP: 0000000000000004 R08: 00007ffd61b42420 R09: 0000000000000646 [ 76.730975][ T5077] R10: 0000000002000010 R11: 0000000000000286 R12: 0000000002000010 [ 76.739244][ T5077] R13: 00007ffd61b42420 R14: 0000000000000003 R15: 0000000000080000 [ 76.747343][ T5077] [ 76.750642][ T5077] Kernel Offset: disabled [ 76.755021][ T5077] Rebooting in 86400 seconds..