./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4196299503 <...> Warning: Permanently added '10.128.0.67' (ED25519) to the list of known hosts. execve("./syz-executor4196299503", ["./syz-executor4196299503"], 0x7ffc79f82470 /* 10 vars */) = 0 brk(NULL) = 0x555555ac3000 brk(0x555555ac3d00) = 0x555555ac3d00 arch_prctl(ARCH_SET_FS, 0x555555ac3380) = 0 set_tid_address(0x555555ac3650) = 5036 set_robust_list(0x555555ac3660, 24) = 0 rseq(0x555555ac3ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor4196299503", 4096) = 28 getrandom("\x54\xf0\x8d\x0e\x33\xf5\xc6\x83", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555555ac3d00 brk(0x555555ae4d00) = 0x555555ae4d00 brk(0x555555ae5000) = 0x555555ae5000 mprotect(0x7f24f685f000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f24ee3ae000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 munmap(0x7f24ee3ae000, 524288) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./file0", 0777) = 0 [ 71.416346][ T5036] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5036 'syz-executor419' [ 71.433797][ T5036] loop0: detected capacity change from 0 to 1024 [ 71.445571][ T5036] hfsplus: new node 0 already hashed? [ 71.451278][ T5036] ------------[ cut here ]------------ [ 71.456839][ T5036] WARNING: CPU: 1 PID: 5036 at fs/hfsplus/bnode.c:573 hfsplus_bnode_create+0x14b/0x530 [ 71.466530][ T5036] Modules linked in: [ 71.470410][ T5036] CPU: 1 PID: 5036 Comm: syz-executor419 Not tainted 6.5.0-rc5-next-20230809-syzkaller #0 [ 71.480500][ T5036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 71.490634][ T5036] RIP: 0010:hfsplus_bnode_create+0x14b/0x530 [ 71.496658][ T5036] Code: 0b 7f 2f ff 45 39 fc 75 9e e8 11 84 2f ff 4c 89 f7 e8 d9 b9 e5 07 e8 04 84 2f ff 44 89 e6 48 c7 c7 80 8d 87 8a e8 e5 b7 12 ff <0f> 0b e8 ee 83 2f ff 48 89 d8 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e [ 71.516356][ T5036] RSP: 0018:ffffc9000390f1a0 EFLAGS: 00010282 [ 71.522493][ T5036] RAX: 0000000000000023 RBX: ffff888013697600 RCX: 0000000000000000 [ 71.530470][ T5036] RDX: 0000000000000000 RSI: ffffffff816b97f2 RDI: 0000000000000005 [ 71.538484][ T5036] RBP: ffff888024d94000 R08: 0000000000000005 R09: 0000000000000000 [ 71.546488][ T5036] R10: 0000000080000000 R11: 0000000000000001 R12: 0000000000000000 [ 71.554506][ T5036] R13: dffffc0000000000 R14: ffff888024d940e0 R15: 0000000000000000 [ 71.562515][ T5036] FS: 0000555555ac3380(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 71.571834][ T5036] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.578432][ T5036] CR2: 00000000006e0388 CR3: 0000000073d3d000 CR4: 00000000003506e0 [ 71.586441][ T5036] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 71.594477][ T5036] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 71.602471][ T5036] Call Trace: [ 71.605756][ T5036] [ 71.608673][ T5036] ? show_regs+0x8f/0xa0 [ 71.612948][ T5036] ? __warn+0xe6/0x380 [ 71.617048][ T5036] ? hfsplus_bnode_create+0x14b/0x530 [ 71.622467][ T5036] ? report_bug+0x3bc/0x580 [ 71.627011][ T5036] ? handle_bug+0x3c/0x70 [ 71.631332][ T5036] ? exc_invalid_op+0x17/0x40 [ 71.636099][ T5036] ? asm_exc_invalid_op+0x1a/0x20 [ 71.641173][ T5036] ? vprintk+0x82/0x90 [ 71.645288][ T5036] ? hfsplus_bnode_create+0x14b/0x530 [ 71.650704][ T5036] hfsplus_bmap_alloc+0x728/0x830 [ 71.655772][ T5036] ? lock_release+0x4bf/0x680 [ 71.661084][ T5036] ? hfsplus_bmap_reserve+0x410/0x410 [ 71.666505][ T5036] ? hfsplus_bnode_read_u16+0x7e/0xb0 [ 71.672558][ T5036] ? hfsplus_bnode_read+0x250/0x250 [ 71.677785][ T5036] hfs_bnode_split+0xe5/0xdc0 [ 71.682504][ T5036] ? hfsplus_bnode_read+0x10a/0x250 [ 71.688001][ T5036] ? hfs_bnode_need_zeroout+0x1a0/0x1a0 [ 71.693611][ T5036] hfsplus_brec_insert+0x2f7/0xc50 [ 71.698731][ T5036] ? hfsplus_brec_keylen+0x340/0x340 [ 71.704072][ T5036] ? hfsplus_bmap_reserve+0x332/0x410 [ 71.709562][ T5036] hfsplus_create_cat+0x50d/0x10a0 [ 71.714921][ T5036] ? hfsplus_find_cat+0x4c0/0x4c0 [ 71.720426][ T5036] ? lock_release+0x4bf/0x680 [ 71.725151][ T5036] ? __mod_timer+0x8fa/0xea0 [ 71.729864][ T5036] ? do_raw_spin_unlock+0x173/0x230 [ 71.735093][ T5036] ? _raw_spin_unlock+0x28/0x40 [ 71.740021][ T5036] ? hfsplus_mark_mdb_dirty+0x189/0x200 [ 71.745605][ T5036] ? hfsplus_new_inode+0x55b/0x980 [ 71.750749][ T5036] hfsplus_fill_super+0x16ca/0x1bc0 [ 71.755986][ T5036] ? hfsplus_iget+0x7a0/0x7a0 [ 71.760681][ T5036] ? bdev_name.constprop.0+0xa1/0x320 [ 71.766094][ T5036] ? lock_sync+0x190/0x190 [ 71.770546][ T5036] ? do_raw_spin_lock+0x12e/0x2b0 [ 71.775629][ T5036] ? down_write+0x14f/0x200 [ 71.780157][ T5036] ? down_write_killable_nested+0x250/0x250 [ 71.786103][ T5036] ? sb_set_blocksize+0xf6/0x120 [ 71.791074][ T5036] ? setup_bdev_super+0x366/0x6f0 [ 71.796256][ T5036] ? hfsplus_iget+0x7a0/0x7a0 [ 71.800961][ T5036] mount_bdev+0x1f3/0x2e0 [ 71.805347][ T5036] ? sget+0x610/0x610 [ 71.809356][ T5036] ? vfs_parse_fs_string+0xfb/0x150 [ 71.814637][ T5036] ? apparmor_capable+0x1da/0x4e0 [ 71.819680][ T5036] ? zisofs_cleanup+0x20/0x20 [ 71.824386][ T5036] legacy_get_tree+0x109/0x220 [ 71.829180][ T5036] vfs_get_tree+0x88/0x350 [ 71.833629][ T5036] path_mount+0x1492/0x1ed0 [ 71.838154][ T5036] ? kmem_cache_free+0xf0/0x490 [ 71.843122][ T5036] ? finish_automount+0xa50/0xa50 [ 71.848165][ T5036] ? putname+0x101/0x140 [ 71.852432][ T5036] __x64_sys_mount+0x293/0x310 [ 71.857216][ T5036] ? copy_mnt_ns+0xb60/0xb60 [ 71.861833][ T5036] ? _raw_spin_unlock_irq+0x2e/0x50 [ 71.867051][ T5036] ? ptrace_notify+0xf4/0x130 [ 71.871774][ T5036] do_syscall_64+0x38/0xb0 [ 71.876218][ T5036] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 71.882243][ T5036] RIP: 0033:0x7f24f67ecc3a [ 71.886666][ T5036] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 71.906391][ T5036] RSP: 002b:00007ffc0dffdf58 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 71.914861][ T5036] RAX: ffffffffffffffda RBX: 00007ffc0dffdf70 RCX: 00007f24f67ecc3a [ 71.922918][ T5036] RDX: 0000000020000040 RSI: 0000000020000080 RDI: 00007ffc0dffdf70 [ 71.931016][ T5036] RBP: 0000000000000004 R08: 00007ffc0dffdfb0 R09: 000000000000064b [ 71.939052][ T5036] R10: 0000000000208010 R11: 0000000000000286 R12: 0000000000208010 [ 71.947050][ T5036] R13: 00007ffc0dffdfb0 R14: 0000000000000003 R15: 0000000000080000 [ 71.955055][ T5036] [ 71.958080][ T5036] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 71.965436][ T5036] CPU: 1 PID: 5036 Comm: syz-executor419 Not tainted 6.5.0-rc5-next-20230809-syzkaller #0 [ 71.975314][ T5036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 71.985355][ T5036] Call Trace: [ 71.988622][ T5036] [ 71.991538][ T5036] dump_stack_lvl+0xd9/0x1b0 [ 71.996153][ T5036] panic+0x6a6/0x750 [ 72.000039][ T5036] ? panic_smp_self_stop+0xa0/0xa0 [ 72.005148][ T5036] ? hfsplus_bnode_create+0x14b/0x530 [ 72.010511][ T5036] check_panic_on_warn+0xab/0xb0 [ 72.015443][ T5036] __warn+0xf2/0x380 [ 72.019327][ T5036] ? hfsplus_bnode_create+0x14b/0x530 [ 72.024732][ T5036] report_bug+0x3bc/0x580 [ 72.029058][ T5036] handle_bug+0x3c/0x70 [ 72.033202][ T5036] exc_invalid_op+0x17/0x40 [ 72.037702][ T5036] asm_exc_invalid_op+0x1a/0x20 [ 72.042644][ T5036] RIP: 0010:hfsplus_bnode_create+0x14b/0x530 [ 72.048653][ T5036] Code: 0b 7f 2f ff 45 39 fc 75 9e e8 11 84 2f ff 4c 89 f7 e8 d9 b9 e5 07 e8 04 84 2f ff 44 89 e6 48 c7 c7 80 8d 87 8a e8 e5 b7 12 ff <0f> 0b e8 ee 83 2f ff 48 89 d8 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e [ 72.068471][ T5036] RSP: 0018:ffffc9000390f1a0 EFLAGS: 00010282 [ 72.074541][ T5036] RAX: 0000000000000023 RBX: ffff888013697600 RCX: 0000000000000000 [ 72.082529][ T5036] RDX: 0000000000000000 RSI: ffffffff816b97f2 RDI: 0000000000000005 [ 72.090597][ T5036] RBP: ffff888024d94000 R08: 0000000000000005 R09: 0000000000000000 [ 72.098586][ T5036] R10: 0000000080000000 R11: 0000000000000001 R12: 0000000000000000 [ 72.106561][ T5036] R13: dffffc0000000000 R14: ffff888024d940e0 R15: 0000000000000000 [ 72.114544][ T5036] ? vprintk+0x82/0x90 [ 72.118657][ T5036] hfsplus_bmap_alloc+0x728/0x830 [ 72.123708][ T5036] ? lock_release+0x4bf/0x680 [ 72.128398][ T5036] ? hfsplus_bmap_reserve+0x410/0x410 [ 72.133889][ T5036] ? hfsplus_bnode_read_u16+0x7e/0xb0 [ 72.139283][ T5036] ? hfsplus_bnode_read+0x250/0x250 [ 72.144503][ T5036] hfs_bnode_split+0xe5/0xdc0 [ 72.149292][ T5036] ? hfsplus_bnode_read+0x10a/0x250 [ 72.154525][ T5036] ? hfs_bnode_need_zeroout+0x1a0/0x1a0 [ 72.160223][ T5036] hfsplus_brec_insert+0x2f7/0xc50 [ 72.165373][ T5036] ? hfsplus_brec_keylen+0x340/0x340 [ 72.170686][ T5036] ? hfsplus_bmap_reserve+0x332/0x410 [ 72.176262][ T5036] hfsplus_create_cat+0x50d/0x10a0 [ 72.181445][ T5036] ? hfsplus_find_cat+0x4c0/0x4c0 [ 72.186954][ T5036] ? lock_release+0x4bf/0x680 [ 72.191655][ T5036] ? __mod_timer+0x8fa/0xea0 [ 72.196289][ T5036] ? do_raw_spin_unlock+0x173/0x230 [ 72.201505][ T5036] ? _raw_spin_unlock+0x28/0x40 [ 72.206374][ T5036] ? hfsplus_mark_mdb_dirty+0x189/0x200 [ 72.211935][ T5036] ? hfsplus_new_inode+0x55b/0x980 [ 72.217063][ T5036] hfsplus_fill_super+0x16ca/0x1bc0 [ 72.222279][ T5036] ? hfsplus_iget+0x7a0/0x7a0 [ 72.226967][ T5036] ? bdev_name.constprop.0+0xa1/0x320 [ 72.232352][ T5036] ? lock_sync+0x190/0x190 [ 72.236806][ T5036] ? do_raw_spin_lock+0x12e/0x2b0 [ 72.241850][ T5036] ? down_write+0x14f/0x200 [ 72.246365][ T5036] ? down_write_killable_nested+0x250/0x250 [ 72.252269][ T5036] ? sb_set_blocksize+0xf6/0x120 [ 72.257225][ T5036] ? setup_bdev_super+0x366/0x6f0 [ 72.262263][ T5036] ? hfsplus_iget+0x7a0/0x7a0 [ 72.266949][ T5036] mount_bdev+0x1f3/0x2e0 [ 72.271296][ T5036] ? sget+0x610/0x610 [ 72.275291][ T5036] ? vfs_parse_fs_string+0xfb/0x150 [ 72.280506][ T5036] ? apparmor_capable+0x1da/0x4e0 [ 72.285632][ T5036] ? zisofs_cleanup+0x20/0x20 [ 72.290319][ T5036] legacy_get_tree+0x109/0x220 [ 72.295103][ T5036] vfs_get_tree+0x88/0x350 [ 72.299540][ T5036] path_mount+0x1492/0x1ed0 [ 72.304058][ T5036] ? kmem_cache_free+0xf0/0x490 [ 72.308937][ T5036] ? finish_automount+0xa50/0xa50 [ 72.313985][ T5036] ? putname+0x101/0x140 [ 72.318243][ T5036] __x64_sys_mount+0x293/0x310 [ 72.323022][ T5036] ? copy_mnt_ns+0xb60/0xb60 [ 72.327625][ T5036] ? _raw_spin_unlock_irq+0x2e/0x50 [ 72.332843][ T5036] ? ptrace_notify+0xf4/0x130 [ 72.337529][ T5036] do_syscall_64+0x38/0xb0 [ 72.341966][ T5036] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 72.347884][ T5036] RIP: 0033:0x7f24f67ecc3a [ 72.352300][ T5036] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 72.371948][ T5036] RSP: 002b:00007ffc0dffdf58 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 72.380717][ T5036] RAX: ffffffffffffffda RBX: 00007ffc0dffdf70 RCX: 00007f24f67ecc3a [ 72.388785][ T5036] RDX: 0000000020000040 RSI: 0000000020000080 RDI: 00007ffc0dffdf70 [ 72.396760][ T5036] RBP: 0000000000000004 R08: 00007ffc0dffdfb0 R09: 000000000000064b [ 72.404732][ T5036] R10: 0000000000208010 R11: 0000000000000286 R12: 0000000000208010 [ 72.412712][ T5036] R13: 00007ffc0dffdfb0 R14: 0000000000000003 R15: 0000000000080000 [ 72.420696][ T5036] [ 72.424001][ T5036] Kernel Offset: disabled [ 72.428325][ T5036] Rebooting in 86400 seconds..