./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1051895054 <...> DUID 00:04:e6:d8:3e:4c:c1:15:84:42:dc:00:60:8c:e3:5f:26:b4 forked to background, child pid 3210 [ 29.769330][ T3211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.779734][ T3211] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.140' (ECDSA) to the list of known hosts. execve("./syz-executor1051895054", ["./syz-executor1051895054"], 0x7ffd1373c7c0 /* 10 vars */) = 0 brk(NULL) = 0x555555798000 brk(0x555555798c40) = 0x555555798c40 arch_prctl(ARCH_SET_FS, 0x555555798300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1051895054", 4096) = 28 brk(0x5555557b9c40) = 0x5555557b9c40 brk(0x5555557ba000) = 0x5555557ba000 mprotect(0x7f8db9f78000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8db1abf000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 munmap(0x7f8db1abf000, 524288) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./bus", 0777) = 0 mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 chdir("./bus") = 0 ioctl(4, LOOP_CLR_FD) = 0 close(4) = 0 openat(AT_FDCWD, "cgroup.controllers", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 syzkaller login: [ 55.069939][ T3638] loop0: detected capacity change from 0 to 1024 [ 55.080131][ T3638] ======================================================= [ 55.080131][ T3638] WARNING: The mand mount option has been deprecated and [ 55.080131][ T3638] and is ignored by this kernel. Remove the mand [ 55.080131][ T3638] option from the mount to silence this warning. [ 55.080131][ T3638] ======================================================= [ 55.135081][ T3638] hfsplus: new node 0 already hashed? [ 55.140748][ T3638] ------------[ cut here ]------------ [ 55.146635][ T3638] WARNING: CPU: 1 PID: 3638 at fs/hfsplus/bnode.c:573 hfsplus_bnode_create+0x3d4/0x460 [ 55.156397][ T3638] Modules linked in: [ 55.160300][ T3638] CPU: 1 PID: 3638 Comm: syz-executor105 Not tainted 6.1.0-rc8-syzkaller-00014-g8ed710da2873 #0 [ 55.170800][ T3638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 55.180994][ T3638] RIP: 0010:hfsplus_bnode_create+0x3d4/0x460 [ 55.187066][ T3638] Code: 31 c0 e8 6b c2 33 08 e9 5f fd ff ff e8 55 f7 2d ff 4c 89 ff e8 5d 2e 3f 08 48 c7 c7 c0 c9 07 8b 44 89 e6 31 c0 e8 48 c2 33 08 <0f> 0b eb b1 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 61 fc ff ff 48 89 [ 55.206776][ T3638] RSP: 0018:ffffc90003b6efb0 EFLAGS: 00010246 [ 55.212854][ T3638] RAX: 0000000000000023 RBX: ffff888017b4ab00 RCX: f21730eeb4034b00 [ 55.220867][ T3638] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 55.228927][ T3638] RBP: 0000000000000000 R08: ffffffff816e5c7d R09: fffff5200076ddad [ 55.236948][ T3638] R10: fffff5200076ddad R11: 1ffff9200076ddac R12: 0000000000000000 [ 55.244995][ T3638] R13: dffffc0000000000 R14: ffff88802766a000 R15: ffff88802766a0e0 [ 55.252987][ T3638] FS: 0000555555798300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 55.261973][ T3638] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.268626][ T3638] CR2: 0000000020011000 CR3: 0000000024854000 CR4: 00000000003506e0 [ 55.277017][ T3638] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 55.285073][ T3638] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 55.293174][ T3638] Call Trace: [ 55.296548][ T3638] [ 55.299487][ T3638] hfsplus_bmap_alloc+0x58a/0x610 [ 55.304597][ T3638] ? hfsplus_bmap_reserve+0x500/0x500 [ 55.309986][ T3638] hfs_btree_inc_height+0xe2/0xd30 [ 55.315243][ T3638] ? hfsplus_brec_insert+0xd70/0xd70 [ 55.320537][ T3638] ? rcu_read_lock_sched_held+0x87/0x110 [ 55.326278][ T3638] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 55.332283][ T3638] hfsplus_brec_insert+0x130/0xd70 [ 55.337483][ T3638] ? trace_contention_end+0x72/0x1d0 [ 55.342864][ T3638] ? __mutex_lock_common+0x45f/0x26e0 [ 55.348600][ T3638] ? hfsplus_brec_find+0x15f/0x520 [ 55.353720][ T3638] ? hfsplus_bmap_reserve+0x4be/0x500 [ 55.359162][ T3638] ? hfsplus_brec_keylen+0x310/0x310 [ 55.364657][ T3638] ? mutex_lock_io_nested+0x60/0x60 [ 55.369856][ T3638] __hfsplus_ext_write_extent+0x356/0x590 [ 55.375623][ T3638] __hfsplus_ext_cache_extent+0x8d/0x810 [ 55.381267][ T3638] ? mutex_lock_nested+0x17/0x20 [ 55.386295][ T3638] hfsplus_file_extend+0x3cc/0x19d0 [ 55.391535][ T3638] ? hfsplus_get_block+0x1560/0x1560 [ 55.396893][ T3638] ? filemap_get_folios+0x557/0x830 [ 55.402101][ T3638] ? find_lock_entries+0xf60/0xf60 [ 55.407288][ T3638] ? trace_writeback_dirty_inode+0xdf/0x2b0 [ 55.413200][ T3638] hfsplus_get_block+0x415/0x1560 [ 55.418374][ T3638] ? create_empty_buffers+0xe30/0xe30 [ 55.423763][ T3638] ? hfsplus_ext_write_extent+0x1e0/0x1e0 [ 55.429544][ T3638] ? do_raw_spin_unlock+0x134/0x8a0 [ 55.434795][ T3638] ? folio_alloc+0x47/0x50 [ 55.439211][ T3638] ? create_page_buffers+0x244/0x4b0 [ 55.444571][ T3638] __block_write_begin_int+0x54c/0x1a80 [ 55.450142][ T3638] ? hfsplus_ext_write_extent+0x1e0/0x1e0 [ 55.455903][ T3638] ? page_zero_new_buffers+0x940/0x940 [ 55.461378][ T3638] ? PageHeadHuge+0x8a/0x1d0 [ 55.466033][ T3638] ? hfsplus_ext_write_extent+0x1e0/0x1e0 [ 55.471758][ T3638] block_write_begin+0x93/0x1e0 [ 55.476668][ T3638] ? cont_write_begin+0x5e5/0x860 [ 55.481700][ T3638] ? hfsplus_ext_write_extent+0x1e0/0x1e0 [ 55.487485][ T3638] cont_write_begin+0x606/0x860 [ 55.492347][ T3638] ? fault_in_readable+0x1d5/0x310 [ 55.497506][ T3638] ? generic_cont_expand_simple+0x250/0x250 [ 55.503405][ T3638] ? fault_in_readable+0x219/0x310 [ 55.508591][ T3638] ? fault_in_safe_writeable+0x240/0x240 [ 55.514306][ T3638] hfsplus_write_begin+0x86/0xd0 [ 55.519251][ T3638] ? hfsplus_ext_write_extent+0x1e0/0x1e0 [ 55.525028][ T3638] generic_perform_write+0x2e4/0x5e0 [ 55.530351][ T3638] ? __block_commit_write+0x420/0x420 [ 55.535797][ T3638] ? generic_file_direct_write+0x610/0x610 [ 55.541609][ T3638] ? __file_remove_privs+0x6c0/0x6c0 [ 55.546964][ T3638] ? generic_write_checks+0x15c/0x1c0 [ 55.552358][ T3638] __generic_file_write_iter+0x176/0x400 [ 55.558061][ T3638] generic_file_write_iter+0xab/0x310 [ 55.563440][ T3638] vfs_write+0x7dc/0xc50 [ 55.567759][ T3638] ? file_end_write+0x230/0x230 [ 55.572610][ T3638] ? ptrace_stop+0x74d/0x970 [ 55.577255][ T3638] ? _raw_spin_unlock_irq+0x2a/0x40 [ 55.582471][ T3638] ? __fdget_pos+0x252/0x2e0 [ 55.587232][ T3638] ksys_write+0x177/0x2a0 [ 55.591575][ T3638] ? __ia32_sys_read+0x80/0x80 [ 55.596399][ T3638] ? syscall_enter_from_user_mode+0x2e/0x1d0 [ 55.602387][ T3638] ? syscall_enter_from_user_mode+0x86/0x1d0 [ 55.608430][ T3638] do_syscall_64+0x3d/0xb0 [ 55.612845][ T3638] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 55.618772][ T3638] RIP: 0033:0x7f8db9f0b7a9 [ 55.623192][ T3638] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 55.642876][ T3638] RSP: 002b:00007ffd47196b58 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 55.651353][ T3638] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8db9f0b7a9 [ 55.659395][ T3638] RDX: 00000000fffffdef RSI: 0000000020000040 RDI: 0000000000000004 [ 55.667489][ T3638] RBP: 00007f8db9ecb040 R08: 0000000000000000 R09: 0000000000000000 [ 55.675510][ T3638] R10: 000000000000061e R11: 0000000000000246 R12: 00007f8db9ecb0d0 [ 55.683481][ T3638] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 55.691513][ T3638] [ 55.694627][ T3638] Kernel panic - not syncing: panic_on_warn set ... [ 55.701219][ T3638] CPU: 1 PID: 3638 Comm: syz-executor105 Not tainted 6.1.0-rc8-syzkaller-00014-g8ed710da2873 #0 [ 55.711619][ T3638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 55.721664][ T3638] Call Trace: [ 55.724929][ T3638] [ 55.727846][ T3638] dump_stack_lvl+0x1b1/0x28e [ 55.732512][ T3638] ? nf_tcp_handle_invalid+0x62e/0x62e [ 55.737950][ T3638] ? panic+0x710/0x710 [ 55.742005][ T3638] ? vscnprintf+0x59/0x80 [ 55.746317][ T3638] ? hfsplus_bnode_create+0x370/0x460 [ 55.751673][ T3638] panic+0x2d6/0x710 [ 55.755553][ T3638] ? __warn+0x131/0x220 [ 55.759697][ T3638] ? memcpy_page_flushcache+0xfc/0xfc [ 55.765082][ T3638] ? hfsplus_bnode_create+0x3d4/0x460 [ 55.770441][ T3638] __warn+0x1fa/0x220 [ 55.774411][ T3638] ? hfsplus_bnode_create+0x3d4/0x460 [ 55.779804][ T3638] report_bug+0x1b3/0x2d0 [ 55.784129][ T3638] handle_bug+0x3d/0x70 [ 55.788275][ T3638] exc_invalid_op+0x16/0x40 [ 55.792777][ T3638] asm_exc_invalid_op+0x16/0x20 [ 55.797616][ T3638] RIP: 0010:hfsplus_bnode_create+0x3d4/0x460 [ 55.803590][ T3638] Code: 31 c0 e8 6b c2 33 08 e9 5f fd ff ff e8 55 f7 2d ff 4c 89 ff e8 5d 2e 3f 08 48 c7 c7 c0 c9 07 8b 44 89 e6 31 c0 e8 48 c2 33 08 <0f> 0b eb b1 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 61 fc ff ff 48 89 [ 55.823289][ T3638] RSP: 0018:ffffc90003b6efb0 EFLAGS: 00010246 [ 55.829362][ T3638] RAX: 0000000000000023 RBX: ffff888017b4ab00 RCX: f21730eeb4034b00 [ 55.837331][ T3638] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 55.845311][ T3638] RBP: 0000000000000000 R08: ffffffff816e5c7d R09: fffff5200076ddad [ 55.853281][ T3638] R10: fffff5200076ddad R11: 1ffff9200076ddac R12: 0000000000000000 [ 55.861257][ T3638] R13: dffffc0000000000 R14: ffff88802766a000 R15: ffff88802766a0e0 [ 55.869250][ T3638] ? __wake_up_klogd+0xcd/0x100 [ 55.874109][ T3638] hfsplus_bmap_alloc+0x58a/0x610 [ 55.879136][ T3638] ? hfsplus_bmap_reserve+0x500/0x500 [ 55.884525][ T3638] hfs_btree_inc_height+0xe2/0xd30 [ 55.889650][ T3638] ? hfsplus_brec_insert+0xd70/0xd70 [ 55.895030][ T3638] ? rcu_read_lock_sched_held+0x87/0x110 [ 55.900679][ T3638] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 55.906672][ T3638] hfsplus_brec_insert+0x130/0xd70 [ 55.911795][ T3638] ? trace_contention_end+0x72/0x1d0 [ 55.917096][ T3638] ? __mutex_lock_common+0x45f/0x26e0 [ 55.923448][ T3638] ? hfsplus_brec_find+0x15f/0x520 [ 55.928582][ T3638] ? hfsplus_bmap_reserve+0x4be/0x500 [ 55.933976][ T3638] ? hfsplus_brec_keylen+0x310/0x310 [ 55.939267][ T3638] ? mutex_lock_io_nested+0x60/0x60 [ 55.944481][ T3638] __hfsplus_ext_write_extent+0x356/0x590 [ 55.950209][ T3638] __hfsplus_ext_cache_extent+0x8d/0x810 [ 55.955842][ T3638] ? mutex_lock_nested+0x17/0x20 [ 55.960780][ T3638] hfsplus_file_extend+0x3cc/0x19d0 [ 55.965986][ T3638] ? hfsplus_get_block+0x1560/0x1560 [ 55.971527][ T3638] ? filemap_get_folios+0x557/0x830 [ 55.976728][ T3638] ? find_lock_entries+0xf60/0xf60 [ 55.981838][ T3638] ? trace_writeback_dirty_inode+0xdf/0x2b0 [ 55.987746][ T3638] hfsplus_get_block+0x415/0x1560 [ 55.992771][ T3638] ? create_empty_buffers+0xe30/0xe30 [ 55.998150][ T3638] ? hfsplus_ext_write_extent+0x1e0/0x1e0 [ 56.003948][ T3638] ? do_raw_spin_unlock+0x134/0x8a0 [ 56.009174][ T3638] ? folio_alloc+0x47/0x50 [ 56.013759][ T3638] ? create_page_buffers+0x244/0x4b0 [ 56.019042][ T3638] __block_write_begin_int+0x54c/0x1a80 [ 56.024602][ T3638] ? hfsplus_ext_write_extent+0x1e0/0x1e0 [ 56.030312][ T3638] ? page_zero_new_buffers+0x940/0x940 [ 56.035766][ T3638] ? PageHeadHuge+0x8a/0x1d0 [ 56.040371][ T3638] ? hfsplus_ext_write_extent+0x1e0/0x1e0 [ 56.046083][ T3638] block_write_begin+0x93/0x1e0 [ 56.050928][ T3638] ? cont_write_begin+0x5e5/0x860 [ 56.055949][ T3638] ? hfsplus_ext_write_extent+0x1e0/0x1e0 [ 56.061667][ T3638] cont_write_begin+0x606/0x860 [ 56.066535][ T3638] ? fault_in_readable+0x1d5/0x310 [ 56.071643][ T3638] ? generic_cont_expand_simple+0x250/0x250 [ 56.077532][ T3638] ? fault_in_readable+0x219/0x310 [ 56.082642][ T3638] ? fault_in_safe_writeable+0x240/0x240 [ 56.088278][ T3638] hfsplus_write_begin+0x86/0xd0 [ 56.093214][ T3638] ? hfsplus_ext_write_extent+0x1e0/0x1e0 [ 56.098931][ T3638] generic_perform_write+0x2e4/0x5e0 [ 56.104220][ T3638] ? __block_commit_write+0x420/0x420 [ 56.109589][ T3638] ? generic_file_direct_write+0x610/0x610 [ 56.115476][ T3638] ? __file_remove_privs+0x6c0/0x6c0 [ 56.120756][ T3638] ? generic_write_checks+0x15c/0x1c0 [ 56.126129][ T3638] __generic_file_write_iter+0x176/0x400 [ 56.131778][ T3638] generic_file_write_iter+0xab/0x310 [ 56.137144][ T3638] vfs_write+0x7dc/0xc50 [ 56.141389][ T3638] ? file_end_write+0x230/0x230 [ 56.146242][ T3638] ? ptrace_stop+0x74d/0x970 [ 56.150845][ T3638] ? _raw_spin_unlock_irq+0x2a/0x40 [ 56.156054][ T3638] ? __fdget_pos+0x252/0x2e0 [ 56.160644][ T3638] ksys_write+0x177/0x2a0 [ 56.164970][ T3638] ? __ia32_sys_read+0x80/0x80 [ 56.169735][ T3638] ? syscall_enter_from_user_mode+0x2e/0x1d0 [ 56.175720][ T3638] ? syscall_enter_from_user_mode+0x86/0x1d0 [ 56.182048][ T3638] do_syscall_64+0x3d/0xb0 [ 56.186484][ T3638] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 56.192366][ T3638] RIP: 0033:0x7f8db9f0b7a9 [ 56.196774][ T3638] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 56.216422][ T3638] RSP: 002b:00007ffd47196b58 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 56.224829][ T3638] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8db9f0b7a9 [ 56.232792][ T3638] RDX: 00000000fffffdef RSI: 0000000020000040 RDI: 0000000000000004 [ 56.240839][ T3638] RBP: 00007f8db9ecb040 R08: 0000000000000000 R09: 0000000000000000 [ 56.248798][ T3638] R10: 000000000000061e R11: 0000000000000246 R12: 00007f8db9ecb0d0 [ 56.257113][ T3638] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 56.265089][ T3638] [ 56.268265][ T3638] Kernel Offset: disabled [ 56.272685][ T3638] Rebooting in 86400 seconds..