./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1227769196 <...> DUID 00:04:d9:3a:76:1c:b4:63:be:bc:0b:c2:08:9c:83:36:98:31 forked to background, child pid 4660 [ 29.724549][ T4661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.736401][ T4661] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.117' (ECDSA) to the list of known hosts. execve("./syz-executor1227769196", ["./syz-executor1227769196"], 0x7fffc5e02c30 /* 10 vars */) = 0 brk(NULL) = 0x555556a48000 brk(0x555556a48c40) = 0x555556a48c40 arch_prctl(ARCH_SET_FS, 0x555556a48300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1227769196", 4096) = 28 brk(0x555556a69c40) = 0x555556a69c40 brk(0x555556a6a000) = 0x555556a6a000 mprotect(0x7f20c5daf000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f20bd8f6000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768) = 32768 munmap(0x7f20bd8f6000, 32768) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./file0", 0777) = 0 mount("/dev/loop0", "./file0", "hfs", MS_REC, "") = 0 openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 chdir("./file0") = 0 ioctl(4, LOOP_CLR_FD) = 0 close(4) = 0 openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 syzkaller login: [ 56.155402][ T4991] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=4991 'syz-executor122' [ 56.170593][ T4991] loop0: detected capacity change from 0 to 64 [ 56.191435][ T4991] hfs: new node 0 already hashed? [ 56.196969][ T4991] ------------[ cut here ]------------ [ 56.202454][ T4991] WARNING: CPU: 0 PID: 4991 at fs/hfs/bnode.c:422 hfs_bnode_create+0x3b1/0x440 [ 56.211588][ T4991] Modules linked in: [ 56.215503][ T4991] CPU: 0 PID: 4991 Comm: syz-executor122 Not tainted 6.4.0-rc2-syzkaller-00330-g0dd2a6fb1e34 #0 [ 56.225989][ T4991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 56.236080][ T4991] RIP: 0010:hfs_bnode_create+0x3b1/0x440 [ 56.241769][ T4991] Code: 8a 44 89 e6 e8 50 44 49 08 e9 7c fd ff ff e8 c6 e2 27 ff 4c 89 ff e8 9e 55 55 08 48 c7 c7 60 c9 ff 8a 44 89 e6 e8 2f 44 49 08 <0f> 0b eb b5 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 89 fc ff ff 48 89 [ 56.261464][ T4991] RSP: 0018:ffffc90003a3ef98 EFLAGS: 00010246 [ 56.267816][ T4991] RAX: 000000000000001f RBX: ffff888013f38700 RCX: 36d0e8c779446200 [ 56.275778][ T4991] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 56.283897][ T4991] RBP: 0000000000000000 R08: ffffffff816efdbc R09: fffff52000747da9 [ 56.292041][ T4991] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 56.300088][ T4991] R13: dffffc0000000000 R14: ffff888029d72000 R15: ffff888029d720e0 [ 56.308295][ T4991] FS: 0000555556a48300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 56.317312][ T4991] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.323912][ T4991] CR2: 0000000020008000 CR3: 0000000075492000 CR4: 00000000003506f0 [ 56.331941][ T4991] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 56.339967][ T4991] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 56.348009][ T4991] Call Trace: [ 56.351302][ T4991] [ 56.354235][ T4991] hfs_bmap_alloc+0x5a6/0x640 [ 56.359000][ T4991] ? hfs_bmap_reserve+0x3f0/0x3f0 [ 56.364068][ T4991] hfs_btree_inc_height+0x11e/0xd20 [ 56.369363][ T4991] ? hfs_brec_insert+0xbd0/0xbd0 [ 56.374331][ T4991] ? __mutex_trylock_common+0x182/0x2e0 [ 56.379984][ T4991] ? __might_sleep+0xc0/0xc0 [ 56.384638][ T4991] hfs_brec_insert+0x15b/0xbd0 [ 56.389584][ T4991] ? rcu_is_watching+0x15/0xb0 [ 56.394398][ T4991] ? trace_contention_end+0x3c/0xf0 [ 56.399691][ T4991] ? hfs_brec_find+0x197/0x570 [ 56.404483][ T4991] ? hfs_brec_keylen+0x360/0x360 [ 56.409508][ T4991] ? mutex_lock_io_nested+0x60/0x60 [ 56.414782][ T4991] __hfs_ext_write_extent+0x2f2/0x4f0 [ 56.420239][ T4991] __hfs_ext_cache_extent+0x6a/0x990 [ 56.425557][ T4991] ? mutex_lock_nested+0x1b/0x20 [ 56.430562][ T4991] ? hfs_find_init+0x16e/0x1f0 [ 56.435363][ T4991] hfs_extend_file+0x344/0x1440 [ 56.440317][ T4991] ? hfs_get_block+0xb60/0xb60 [ 56.445194][ T4991] ? find_lock_entries+0x10f0/0x10f0 [ 56.450576][ T4991] ? clean_bdev_aliases+0x7f9/0x920 [ 56.455939][ T4991] hfs_get_block+0x3e4/0xb60 [ 56.460635][ T4991] ? hfs_free_extents+0x420/0x420 [ 56.465742][ T4991] ? _raw_spin_unlock+0x28/0x40 [ 56.470631][ T4991] ? folio_create_buffers+0x132/0x250 [ 56.476056][ T4991] __block_write_begin_int+0x548/0x1a50 [ 56.481612][ T4991] ? folio_add_lru+0x353/0x6f0 [ 56.486433][ T4991] ? hfs_free_extents+0x420/0x420 [ 56.491473][ T4991] ? PageUptodate+0x290/0x290 [ 56.496219][ T4991] ? folio_test_hugetlb+0xa0/0x1d0 [ 56.501342][ T4991] ? pagecache_get_page+0xeb/0x220 [ 56.506681][ T4991] ? hfs_free_extents+0x420/0x420 [ 56.511715][ T4991] block_write_begin+0x9c/0x1f0 [ 56.516626][ T4991] ? cont_write_begin+0x626/0x880 [ 56.521748][ T4991] cont_write_begin+0x643/0x880 [ 56.526651][ T4991] ? fault_in_readable+0x165/0x2b0 [ 56.531782][ T4991] ? generic_cont_expand_simple+0x2a0/0x2a0 [ 56.537729][ T4991] ? fault_in_readable+0x1a6/0x2b0 [ 56.543293][ T4991] ? fault_in_safe_writeable+0x260/0x260 [ 56.548979][ T4991] hfs_write_begin+0x8a/0xd0 [ 56.553583][ T4991] ? hfs_free_extents+0x420/0x420 [ 56.558890][ T4991] generic_perform_write+0x300/0x5e0 [ 56.564191][ T4991] ? generic_file_direct_write+0x460/0x460 [ 56.570061][ T4991] ? __file_remove_privs+0x640/0x640 [ 56.575378][ T4991] ? generic_write_checks+0x160/0x1c0 [ 56.580847][ T4991] __generic_file_write_iter+0x17a/0x400 [ 56.586525][ T4991] generic_file_write_iter+0xaf/0x310 [ 56.591897][ T4991] vfs_write+0x790/0xb20 [ 56.596199][ T4991] ? file_end_write+0x250/0x250 [ 56.601063][ T4991] ? lockdep_hardirqs_on+0x98/0x140 [ 56.606308][ T4991] ? __fdget_pos+0x265/0x2f0 [ 56.610913][ T4991] ksys_write+0x1a0/0x2c0 [ 56.615244][ T4991] ? __ia32_sys_read+0x90/0x90 [ 56.620103][ T4991] ? syscall_enter_from_user_mode+0x32/0x230 [ 56.626142][ T4991] ? syscall_enter_from_user_mode+0x8c/0x230 [ 56.632127][ T4991] do_syscall_64+0x41/0xc0 [ 56.636624][ T4991] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 56.642535][ T4991] RIP: 0033:0x7f20c5d427b9 [ 56.647078][ T4991] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 56.666749][ T4991] RSP: 002b:00007fffe7bacaf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 56.675183][ T4991] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f20c5d427b9 [ 56.683245][ T4991] RDX: 00000000000ffe00 RSI: 0000000020004200 RDI: 0000000000000004 [ 56.691277][ T4991] RBP: 00007f20c5d02050 R08: 0000000000000000 R09: 0000000000000000 [ 56.699299][ T4991] R10: 000000000000024c R11: 0000000000000246 R12: 00007f20c5d020e0 [ 56.707353][ T4991] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 56.715361][ T4991] [ 56.718431][ T4991] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 56.725721][ T4991] CPU: 0 PID: 4991 Comm: syz-executor122 Not tainted 6.4.0-rc2-syzkaller-00330-g0dd2a6fb1e34 #0 [ 56.736398][ T4991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 56.746441][ T4991] Call Trace: [ 56.749737][ T4991] [ 56.752697][ T4991] dump_stack_lvl+0x1e7/0x2d0 [ 56.758088][ T4991] ? nf_tcp_handle_invalid+0x650/0x650 [ 56.763651][ T4991] ? panic+0x770/0x770 [ 56.767747][ T4991] ? vscnprintf+0x5d/0x80 [ 56.772411][ T4991] panic+0x30f/0x770 [ 56.776297][ T4991] ? __warn+0x171/0x4a0 [ 56.780441][ T4991] ? __memcpy_flushcache+0x2b0/0x2b0 [ 56.785821][ T4991] __warn+0x314/0x4a0 [ 56.789933][ T4991] ? hfs_bnode_create+0x3b1/0x440 [ 56.794960][ T4991] report_bug+0x2b3/0x500 [ 56.799283][ T4991] ? hfs_bnode_create+0x3b1/0x440 [ 56.804300][ T4991] handle_bug+0x3d/0x70 [ 56.808457][ T4991] exc_invalid_op+0x1a/0x50 [ 56.812949][ T4991] asm_exc_invalid_op+0x1a/0x20 [ 56.817785][ T4991] RIP: 0010:hfs_bnode_create+0x3b1/0x440 [ 56.823401][ T4991] Code: 8a 44 89 e6 e8 50 44 49 08 e9 7c fd ff ff e8 c6 e2 27 ff 4c 89 ff e8 9e 55 55 08 48 c7 c7 60 c9 ff 8a 44 89 e6 e8 2f 44 49 08 <0f> 0b eb b5 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 89 fc ff ff 48 89 [ 56.843001][ T4991] RSP: 0018:ffffc90003a3ef98 EFLAGS: 00010246 [ 56.849082][ T4991] RAX: 000000000000001f RBX: ffff888013f38700 RCX: 36d0e8c779446200 [ 56.857065][ T4991] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 56.865030][ T4991] RBP: 0000000000000000 R08: ffffffff816efdbc R09: fffff52000747da9 [ 56.872996][ T4991] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 56.880960][ T4991] R13: dffffc0000000000 R14: ffff888029d72000 R15: ffff888029d720e0 [ 56.888936][ T4991] ? __wake_up_klogd+0xcc/0x100 [ 56.893885][ T4991] ? hfs_bnode_create+0x3b1/0x440 [ 56.898906][ T4991] hfs_bmap_alloc+0x5a6/0x640 [ 56.903581][ T4991] ? hfs_bmap_reserve+0x3f0/0x3f0 [ 56.908615][ T4991] hfs_btree_inc_height+0x11e/0xd20 [ 56.913824][ T4991] ? hfs_brec_insert+0xbd0/0xbd0 [ 56.918849][ T4991] ? __mutex_trylock_common+0x182/0x2e0 [ 56.924390][ T4991] ? __might_sleep+0xc0/0xc0 [ 56.928983][ T4991] hfs_brec_insert+0x15b/0xbd0 [ 56.933753][ T4991] ? rcu_is_watching+0x15/0xb0 [ 56.938507][ T4991] ? trace_contention_end+0x3c/0xf0 [ 56.943700][ T4991] ? hfs_brec_find+0x197/0x570 [ 56.948467][ T4991] ? hfs_brec_keylen+0x360/0x360 [ 56.953400][ T4991] ? mutex_lock_io_nested+0x60/0x60 [ 56.958770][ T4991] __hfs_ext_write_extent+0x2f2/0x4f0 [ 56.964146][ T4991] __hfs_ext_cache_extent+0x6a/0x990 [ 56.969426][ T4991] ? mutex_lock_nested+0x1b/0x20 [ 56.974357][ T4991] ? hfs_find_init+0x16e/0x1f0 [ 56.979120][ T4991] hfs_extend_file+0x344/0x1440 [ 56.983973][ T4991] ? hfs_get_block+0xb60/0xb60 [ 56.988736][ T4991] ? find_lock_entries+0x10f0/0x10f0 [ 56.994035][ T4991] ? clean_bdev_aliases+0x7f9/0x920 [ 56.999228][ T4991] hfs_get_block+0x3e4/0xb60 [ 57.003824][ T4991] ? hfs_free_extents+0x420/0x420 [ 57.008850][ T4991] ? _raw_spin_unlock+0x28/0x40 [ 57.013691][ T4991] ? folio_create_buffers+0x132/0x250 [ 57.019062][ T4991] __block_write_begin_int+0x548/0x1a50 [ 57.024607][ T4991] ? folio_add_lru+0x353/0x6f0 [ 57.029378][ T4991] ? hfs_free_extents+0x420/0x420 [ 57.034399][ T4991] ? PageUptodate+0x290/0x290 [ 57.039071][ T4991] ? folio_test_hugetlb+0xa0/0x1d0 [ 57.044265][ T4991] ? pagecache_get_page+0xeb/0x220 [ 57.049548][ T4991] ? hfs_free_extents+0x420/0x420 [ 57.054567][ T4991] block_write_begin+0x9c/0x1f0 [ 57.059410][ T4991] ? cont_write_begin+0x626/0x880 [ 57.064434][ T4991] cont_write_begin+0x643/0x880 [ 57.069545][ T4991] ? fault_in_readable+0x165/0x2b0 [ 57.074741][ T4991] ? generic_cont_expand_simple+0x2a0/0x2a0 [ 57.080631][ T4991] ? fault_in_readable+0x1a6/0x2b0 [ 57.085747][ T4991] ? fault_in_safe_writeable+0x260/0x260 [ 57.091377][ T4991] hfs_write_begin+0x8a/0xd0 [ 57.095963][ T4991] ? hfs_free_extents+0x420/0x420 [ 57.100994][ T4991] generic_perform_write+0x300/0x5e0 [ 57.106278][ T4991] ? generic_file_direct_write+0x460/0x460 [ 57.112075][ T4991] ? __file_remove_privs+0x640/0x640 [ 57.117355][ T4991] ? generic_write_checks+0x160/0x1c0 [ 57.122720][ T4991] __generic_file_write_iter+0x17a/0x400 [ 57.128350][ T4991] generic_file_write_iter+0xaf/0x310 [ 57.133716][ T4991] vfs_write+0x790/0xb20 [ 57.138064][ T4991] ? file_end_write+0x250/0x250 [ 57.142918][ T4991] ? lockdep_hardirqs_on+0x98/0x140 [ 57.148114][ T4991] ? __fdget_pos+0x265/0x2f0 [ 57.152697][ T4991] ksys_write+0x1a0/0x2c0 [ 57.157025][ T4991] ? __ia32_sys_read+0x90/0x90 [ 57.161794][ T4991] ? syscall_enter_from_user_mode+0x32/0x230 [ 57.167775][ T4991] ? syscall_enter_from_user_mode+0x8c/0x230 [ 57.173748][ T4991] do_syscall_64+0x41/0xc0 [ 57.178161][ T4991] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 57.184050][ T4991] RIP: 0033:0x7f20c5d427b9 [ 57.188462][ T4991] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 57.208060][ T4991] RSP: 002b:00007fffe7bacaf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 57.216467][ T4991] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f20c5d427b9 [ 57.224431][ T4991] RDX: 00000000000ffe00 RSI: 0000000020004200 RDI: 0000000000000004 [ 57.232392][ T4991] RBP: 00007f20c5d02050 R08: 0000000000000000 R09: 0000000000000000 [ 57.240354][ T4991] R10: 000000000000024c R11: 0000000000000246 R12: 00007f20c5d020e0 [ 57.248316][ T4991] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 57.256546][ T4991] [ 57.259742][ T4991] Kernel Offset: disabled [ 57.264129][ T4991] Rebooting in 86400 seconds..